Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72335914-b6b7-340a-b57b-8b7f123ed0ab.roa
File: 72335914-b6b7-340a-b57b-8b7f123ed0ab.roa (raw, json)
Hash identifier: D5GEpnWbnN0EnjQ/mBFqPDYQSigj34ryA4/2mpxcdrs=
Subject key identifier: BE:05:27:44:E3:B4:64:A8:B9:DF:FE:92:AE:7A:FF:08:C0:76:BF:4B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583F5FB8A624DC4B4A9E5129BE80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72335914-b6b7-340a-b57b-8b7f123ed0ab.roa
Signing time: Sun 25 Sep 2022 12:00:00 +0000
ROA not before: Sun 25 Sep 2022 12:00:00 +0000
ROA not after: Sat 28 Dec 2024 05:00:00 +0000
asID: 15169
IP address blocks: 142.250.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5f:b8:a6:24:dc:4b:4a:9e:51:29:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 25 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2024 GMT
Subject: CN=60fcb703-6989-468b-b6c4-fe2669986b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:b9:ec:51:bb:9f:e7:b9:94:44:2f:b2:e7:
29:ec:bb:e8:07:b8:46:d3:af:b2:36:c8:ab:b0:6e:
d4:51:63:e0:05:6a:df:bf:b0:c2:ed:cf:36:0b:15:
7b:1d:14:7d:d3:0e:12:64:d8:5f:2d:20:8e:db:5d:
09:4f:06:bf:2c:33:86:76:d1:2c:03:84:84:60:92:
16:fe:36:0c:da:4d:cb:47:23:d6:86:a1:32:14:2e:
b4:42:4d:0f:45:51:dc:f9:46:77:b3:15:c8:7d:1f:
84:0e:27:24:11:72:d4:ce:58:ce:bc:09:6f:10:c2:
aa:6d:90:cc:f0:1d:ed:70:16:6c:8e:54:c9:a9:f2:
3a:6e:38:2a:c9:1b:fd:df:e3:f8:fb:77:a3:00:e6:
34:53:d4:9e:2f:6d:43:d1:42:4c:95:24:9c:52:ce:
58:3b:ee:22:69:2d:ef:96:53:92:ac:64:ce:d8:c9:
e7:84:4b:69:43:ba:d2:ef:db:66:ae:c3:8e:09:bf:
1e:bd:12:f4:8d:12:cd:28:6f:6a:89:43:6a:7e:1c:
ff:22:10:9d:c3:5a:5b:c8:39:48:71:1b:64:2b:db:
d4:eb:67:dc:0e:a6:42:e5:0a:4c:05:63:bf:f1:ad:
72:ef:82:02:43:08:83:d5:86:ff:f4:bc:59:01:ff:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:27:44:E3:B4:64:A8:B9:DF:FE:92:AE:7A:FF:08:C0:76:BF:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/72335914-b6b7-340a-b57b-8b7f123ed0ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:08:84:34:cd:bd:51:fc:3e:f3:3e:85:b9:b0:95:97:33:f3:
02:fc:55:4e:02:8f:3b:b8:77:90:ba:30:2d:4f:10:fc:4e:2f:
a7:4c:9e:6b:c1:8c:72:3a:86:ca:92:c7:e5:12:2d:f0:b2:2c:
30:84:bf:38:ed:73:19:ba:13:ae:53:07:69:ee:98:ed:f3:8a:
fa:a5:5a:06:3d:68:8a:20:05:1d:0c:99:6a:a8:25:3e:e6:9f:
f0:8b:87:a4:a4:e9:5d:5a:1c:2a:57:4d:e3:b8:b8:7c:26:6f:
10:19:f7:a0:90:b0:29:7f:1c:31:0c:f6:57:be:95:92:80:35:
1b:e7:96:ce:05:94:15:5b:cb:41:3a:6d:82:10:c1:f9:0d:57:
bb:31:23:94:6f:74:41:4f:b2:d7:ac:4e:44:de:c6:e4:30:58:
47:03:0f:3e:3e:2f:bf:9d:47:1f:3c:bd:56:13:dc:7e:4b:57:
2a:a8:41:7d:96:5c:75:6e:b1:85:9c:6f:58:50:07:79:18:f9:
bb:97:f7:fe:e6:b2:ba:bd:3e:03:b7:7b:30:d3:96:d4:6c:a3:
cc:aa:32:f7:3c:15:35:b6:7c:1a:d3:33:7b:94:76:63:ea:de:
92:86:d1:d1:22:2d:05:57:dd:34:b4:36:9a:54:53:ab:23:72:
bc:01:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org