Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f99f7c4-e650-3229-99b1-a20693c53cde.roa
File: 8f99f7c4-e650-3229-99b1-a20693c53cde.roa (raw, json)
Hash identifier: lBnUHiWXONhg6LKQXAAT0IHz42BhZtF2hZi8I5aJs1Y=
Subject key identifier: 81:53:AF:27:F1:AC:76:C5:75:69:13:3A:10:43:B1:50:19:AF:5D:6D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A23765DB217FB6D3E985D00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f99f7c4-e650-3229-99b1-a20693c53cde.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:23:76:5d:b2:17:fb:6d:3e:98:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=053ec619-6462-411d-9a5d-5c6d4bf69971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:1b:76:4f:8c:de:e4:f8:3d:fe:0d:88:0b:
64:dd:a0:63:c7:03:62:6e:61:92:fa:5d:c0:8a:e2:
3f:8a:ef:82:19:18:38:78:1b:c3:1f:02:4f:eb:65:
ea:ae:1a:4a:17:5f:a4:b8:55:10:be:eb:f3:55:e6:
99:a0:11:0d:1c:17:95:1b:d2:d0:ae:9c:d1:0c:2e:
ab:22:61:01:b5:81:3c:98:8b:91:d5:e2:c1:ba:1a:
3b:e7:f9:e6:9a:0d:16:a8:1a:2d:09:85:9f:f2:6d:
57:e7:be:96:75:0d:74:b5:62:39:61:ad:d8:c5:12:
6a:94:88:a1:da:44:cc:46:06:c5:34:9b:11:2e:84:
8b:06:39:42:e9:b9:db:9d:5f:bc:ce:f3:2b:4b:01:
89:08:ad:e0:26:2a:5a:ad:92:e7:54:02:c3:86:0a:
59:fa:e3:f9:09:72:34:54:7a:61:1d:e6:66:f1:05:
65:b8:cd:43:06:67:47:a5:07:bf:c9:39:91:e0:bd:
0a:1e:c5:60:e5:88:66:96:a3:30:01:b7:2b:66:26:
b1:87:5f:8a:0c:28:9c:6e:e2:71:10:09:8e:f5:74:
c9:70:db:12:d9:bd:51:cf:d5:83:b1:01:be:38:6c:
47:a3:ec:76:84:bd:12:4d:df:c3:f2:ee:06:c7:13:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:53:AF:27:F1:AC:76:C5:75:69:13:3A:10:43:B1:50:19:AF:5D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f99f7c4-e650-3229-99b1-a20693c53cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:64:a1:05:b3:56:00:d1:17:2b:57:f4:0e:c7:7d:f6:ff:db:
a3:b1:51:5d:9a:03:2e:60:da:26:c3:a3:4a:be:87:9c:34:98:
ad:b4:0b:e8:62:f1:af:70:76:7a:f8:55:ef:04:9b:2f:9d:6b:
43:a2:26:63:a8:23:72:09:c4:8d:06:59:4c:a7:ae:52:6e:86:
c2:c7:18:4d:ab:11:2c:ce:e8:f9:bb:74:ae:6f:dd:96:9f:47:
a0:db:d7:c0:e9:c1:b3:67:cf:bf:56:96:0b:69:71:13:67:24:
73:32:42:65:f6:85:ae:d5:a6:8f:2c:32:ec:ea:6d:7b:e1:6a:
a3:e7:2e:8c:fc:75:1c:49:40:47:67:18:18:85:97:41:8d:ec:
88:05:45:67:97:34:c3:41:de:a3:c0:64:c6:ac:97:a6:e9:aa:
fc:29:99:fd:86:eb:ed:f2:3d:83:3a:5c:c2:4b:a1:ee:82:7e:
5f:11:1c:cc:92:db:f0:bf:17:e3:61:ec:22:be:cb:e3:e6:a2:
90:68:c3:4a:fd:9a:5e:d4:0d:87:9c:c7:3d:32:45:84:ff:1f:
91:48:01:8a:67:fa:5e:f4:b2:bc:96:4d:33:fc:8f:3f:f5:75:
af:c6:0b:8b:f2:ee:39:83:ef:53:bc:dc:d5:e3:b0:ad:f7:ed:
25:d6:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:24 2024 by rpki-client on console-fra.rpki-client.org