Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738bc8c2-8535-34f4-8d3e-865359c31850.roa
File: 738bc8c2-8535-34f4-8d3e-865359c31850.roa (raw, json)
Hash identifier: TFcXz1SlqSZYwlG0I0eCmSxNOCsVb6DJcWUkLkBsXxE=
Subject key identifier: 27:75:B5:80:AC:7D:79:9E:2C:0F:23:A3:66:8F:CD:5A:CA:64:48:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1BD5444849E591BA85B3D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738bc8c2-8535-34f4-8d3e-865359c31850.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:d5:44:48:49:e5:91:ba:85:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=41684701-58b1-4ced-8879-3b82fa28664d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:c1:89:d2:08:48:a8:dd:20:83:a1:54:93:
c4:65:94:b3:f8:54:82:ac:27:1a:da:34:72:af:61:
75:60:c7:5d:3a:b3:7f:0f:28:a1:79:ba:97:14:5d:
e1:16:71:93:3b:37:b7:59:30:ba:2b:ab:ec:cd:2e:
b5:a2:8f:85:05:15:80:3a:fa:76:9e:3d:fe:01:42:
2d:22:52:b9:da:99:04:11:9a:ad:b1:81:7f:23:6c:
3d:25:54:cb:65:4c:ee:6e:5c:cd:7d:59:bf:48:8e:
0b:b8:d5:b7:df:76:22:70:ed:31:2c:5e:b5:24:1f:
9e:38:8b:ee:46:33:11:06:80:48:50:a8:22:53:d1:
3b:48:64:c7:a2:de:82:fb:35:47:b3:c1:1c:78:af:
36:83:bb:d3:3c:fc:bf:8f:05:35:d7:d4:1a:22:4a:
d8:8f:20:72:7f:a2:d1:e4:7b:4f:ed:cc:98:6a:6e:
66:7e:7f:b4:cd:a2:13:88:b1:4d:c8:d4:6b:fe:a3:
ee:cd:50:c9:78:d1:58:55:be:95:4d:e2:8d:4a:9e:
86:bd:c9:bd:93:2b:c9:87:66:e5:b7:1b:87:20:1e:
e4:67:2b:1d:e2:56:93:eb:34:91:16:d8:48:8d:1e:
5f:5a:dd:a1:7c:2e:c9:1c:91:b8:78:f6:f3:01:c0:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:75:B5:80:AC:7D:79:9E:2C:0F:23:A3:66:8F:CD:5A:CA:64:48:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/738bc8c2-8535-34f4-8d3e-865359c31850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ac:42:e3:c1:31:7f:e4:24:b2:ca:cc:7c:78:0c:3e:1e:10:
c5:12:85:cf:bf:86:5a:44:2a:e3:34:c3:7d:36:72:36:8a:af:
03:5e:a7:94:de:a0:27:41:cb:0a:8c:77:18:63:73:64:46:cf:
9a:83:e5:e1:2f:10:bd:b1:7c:17:dd:48:0c:4d:25:8b:b6:fa:
1f:60:eb:ef:70:97:4b:37:60:69:63:af:3c:26:34:90:da:f5:
67:1d:d6:ea:99:0e:33:8a:71:ec:e4:69:c1:ea:b4:bf:e3:f6:
51:f7:c7:55:da:15:96:7c:a3:1f:25:30:26:ad:94:7e:f7:42:
7e:63:cc:c0:a9:3a:58:2a:1d:ee:44:0b:59:6d:75:c3:20:90:
75:50:1b:7b:fd:14:2a:a5:4d:1f:5a:cb:8a:03:33:19:8d:6b:
3f:db:5c:72:53:2e:7a:8b:66:3e:58:7d:31:e3:5d:8a:99:65:
97:09:b1:6f:f9:d3:ac:75:bc:f5:08:1a:65:9d:bd:01:9c:c8:
0b:98:55:3b:a0:23:2f:20:51:7e:a7:a1:93:84:0e:d4:0d:80:
35:b8:6d:2c:ac:bb:c8:d3:62:4d:d9:3b:3d:98:06:98:17:92:
f2:00:e7:56:ef:97:f1:3c:2a:08:9b:01:0c:9f:0a:a4:1d:bc:
e8:e3:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:39 2024 by rpki-client on console-ams.rpki-client.org