Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0a2354-4af3-3a79-9a7d-27ffba3ac80e.roa
File: 8e0a2354-4af3-3a79-9a7d-27ffba3ac80e.roa (raw, json)
Hash identifier: 74MJ4TCVBk0HYqd7tAzkNSBbhooqRmlxXkwVzPVxlQg=
Subject key identifier: A1:8B:B5:2C:7A:29:D4:DF:8F:97:05:26:DF:B9:9C:9E:3D:0B:D2:8C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A0B35845D5B402E83B30640
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0a2354-4af3-3a79-9a7d-27ffba3ac80e.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0b:35:84:5d:5b:40:2e:83:b3:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=520f5ba1-ba20-4a6b-b51e-96849a4dfdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:6b:5e:ef:19:42:41:70:18:a9:f4:60:aa:
57:bc:56:4a:33:99:72:7b:43:1b:20:fd:d9:ba:40:
2a:a9:c1:8e:0d:dc:a4:26:06:53:08:13:52:30:07:
28:0b:0d:20:e1:9c:cb:22:84:ae:e5:e5:c4:33:30:
26:dd:cd:4e:fa:bb:63:e5:61:9e:3f:dc:4f:eb:35:
5c:ce:57:a0:03:ff:8d:20:6c:10:02:bf:77:4f:9b:
70:bc:45:6e:13:57:79:b3:a2:95:a7:71:fc:49:23:
08:83:71:4f:e3:75:a0:9a:d1:a2:05:e9:ae:cc:5f:
a8:fa:79:22:af:0b:c6:4e:16:19:75:22:af:f8:23:
b6:23:02:a8:48:33:53:56:fe:d1:49:7e:6d:a5:d2:
3f:a3:47:c3:36:16:00:d6:a9:77:aa:90:b9:38:c8:
b0:be:94:80:6f:d6:62:82:14:1a:03:94:f9:0b:eb:
82:9b:72:ed:22:58:3e:20:62:d8:50:d5:60:b5:4e:
a1:d1:57:3f:15:f9:36:bb:75:dc:26:26:e9:f6:ce:
7b:ca:32:45:a0:99:77:16:9a:4e:c6:73:48:d0:ba:
a1:60:4f:b0:b8:25:65:71:52:af:3d:ef:d5:49:17:
2b:db:a3:5a:ee:03:06:f4:a3:be:bb:95:6e:98:4b:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:B5:2C:7A:29:D4:DF:8F:97:05:26:DF:B9:9C:9E:3D:0B:D2:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8e0a2354-4af3-3a79-9a7d-27ffba3ac80e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:81:a7:45:7c:65:73:be:c3:89:9c:bb:93:cf:3e:f6:2a:dc:
87:16:e2:89:e4:13:72:d8:58:83:09:31:d4:3d:5b:50:9e:52:
b6:8f:4a:28:88:a4:49:23:ff:24:c9:59:f3:b1:26:36:48:d2:
01:ff:61:a9:7a:83:ec:8f:96:72:99:9f:9c:69:09:ee:6a:6c:
68:e7:79:9f:af:1e:02:bf:4a:95:d4:23:ea:ed:d2:cc:5b:88:
cb:64:50:39:c8:5c:04:4c:27:bf:0c:d3:95:0f:93:38:85:d0:
f8:8f:a2:b6:22:4d:42:48:1f:a6:ab:a7:e9:f4:a1:cd:31:41:
ea:90:b9:59:a9:89:93:94:06:7e:81:44:cd:85:16:4b:c9:0e:
8d:4d:06:ff:39:cd:7f:a3:ee:76:9b:cc:46:3d:c3:ee:cf:7f:
c7:b9:19:b1:ac:4a:0d:1e:35:9d:c0:98:96:0d:23:28:56:14:
16:40:81:1d:03:a7:d5:72:53:5c:b7:37:69:c6:b6:5a:1b:7c:
63:89:98:38:6a:18:d1:e0:b1:40:32:d1:8e:b2:e1:11:4e:3d:
f5:d2:ca:cf:26:9f:9e:b0:a6:f9:b2:79:fc:4d:c8:56:a6:77:
16:f8:97:25:9f:36:72:af:70:61:49:f1:4d:b8:3e:0c:5e:63:
38:b5:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org