Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eabf417-ab11-3bce-8a82-57a056219dd5.roa
File: 8eabf417-ab11-3bce-8a82-57a056219dd5.roa (raw, json)
Hash identifier: gnrh/uwbqqk7SQh+CA52oqPGcLF4cak0fNC+WJJeaLA=
Subject key identifier: B3:17:AC:3C:37:6F:29:F4:BE:F7:0D:3C:55:C3:4F:04:85:0A:85:60
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A24D6B07C71D745F4B17000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eabf417-ab11-3bce-8a82-57a056219dd5.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:24:d6:b0:7c:71:d7:45:f4:b1:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ffe0977e-1a0e-4d0b-8b5a-cb55602b7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:5e:b9:cf:bc:5f:57:a0:2e:eb:15:28:d2:
a7:d6:a6:22:0d:ff:2b:3a:2d:ec:d6:4c:9f:7a:3c:
04:7d:21:e7:41:87:28:eb:31:05:28:58:65:61:85:
49:3a:e5:be:9f:f1:a2:fa:10:28:26:85:dc:44:c9:
d7:ec:fd:c2:f3:87:d2:24:ef:4d:d8:8a:5c:3f:4b:
3f:68:d7:69:f5:9b:c8:23:82:0f:c8:07:a8:ef:48:
9b:60:19:2d:ad:e5:db:3a:89:bd:c5:2d:0d:0e:bc:
b8:b9:42:05:00:df:a0:44:0c:47:7c:38:8a:52:d1:
ba:ea:88:70:9a:e8:ff:fa:f3:7e:80:90:7c:ab:5b:
c1:1d:ef:c0:c2:71:88:89:9c:97:9a:93:95:f3:b6:
a6:5c:1f:d4:12:8e:46:66:b7:fe:d8:e8:78:48:26:
b5:c5:2a:ee:bc:8f:55:9d:24:d0:1e:b4:7e:ca:65:
06:a4:52:f0:91:34:86:66:ca:56:27:2a:d0:cb:1a:
21:e0:44:ac:7a:e0:81:9b:32:bd:56:74:04:74:1a:
1c:6b:50:42:40:72:a5:74:a1:86:52:33:0a:95:43:
65:46:de:88:04:f3:63:64:77:a9:b7:92:89:e6:1e:
3e:0a:d9:fc:44:d4:a3:a9:38:c5:d0:5b:e5:40:c2:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:AC:3C:37:6F:29:F4:BE:F7:0D:3C:55:C3:4F:04:85:0A:85:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8eabf417-ab11-3bce-8a82-57a056219dd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ea:ff:27:30:e4:13:68:a1:24:18:a8:14:da:4e:ae:1c:1b:
c3:31:6c:9a:2b:d3:1c:09:ef:bb:8f:6f:3c:08:4a:21:d7:08:
1d:97:65:da:04:4d:6e:e7:d4:19:f1:9a:89:50:2e:d1:61:70:
0f:e1:2f:31:a9:8a:74:17:b5:10:c1:ad:55:b5:1d:4b:70:ab:
63:37:72:9a:e0:04:d7:f5:bf:4c:5a:75:79:64:2e:21:43:ff:
08:fa:b6:d5:f9:90:9b:44:b1:d7:d6:21:f3:8d:a4:af:50:c6:
f4:f4:69:64:10:ff:9e:63:f9:4b:a6:5a:44:35:ac:0f:6f:fa:
7b:18:0d:ef:20:cc:dc:df:7f:87:d2:83:2d:ba:4e:14:be:c1:
06:91:0f:86:ea:c6:a3:e2:4d:2c:9b:26:5d:4b:1c:c6:33:6b:
3a:e9:4d:c0:d4:23:3f:7b:44:e8:5b:70:f6:d2:fb:69:8a:27:
19:f0:dc:ef:1b:9a:d1:9b:07:81:d3:44:c0:94:cf:ce:0e:1b:
1a:51:76:25:bb:59:c7:84:c7:b1:57:4f:3c:64:e7:4c:e7:0c:
c8:b0:e1:66:a9:62:92:bf:b7:bf:39:df:f2:55:a1:b5:9c:9f:
d2:24:48:78:00:51:5a:70:8c:fb:02:16:86:17:5b:33:5e:b1:
bb:a3:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org