Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a9cd4d3-93f4-3f36-8c0b-2fa766b026d5.roa
File: 9a9cd4d3-93f4-3f36-8c0b-2fa766b026d5.roa (raw, json)
Hash identifier: 99h0879UmbaOuZKaNgur4/JFyJjflYCWbcvZTsHVvlc=
Subject key identifier: 6D:64:A1:FA:A7:C1:92:FB:A8:C2:51:ED:F3:9E:08:E8:FE:C1:62:C7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858407F63E5D1131901B8DF60CA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a9cd4d3-93f4-3f36-8c0b-2fa766b026d5.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Thu 10 Apr 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7f:63:e5:d1:13:19:01:b8:df:60:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Apr 10 04:00:00 2025 GMT
Subject: CN=f1fbbb94-5fe1-4114-b4a1-dec18fc09600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:41:2b:f0:cf:f3:59:e3:13:68:c2:3d:3b:
00:ba:9b:06:13:ae:4c:14:33:6c:98:19:09:ff:af:
bf:28:cd:58:29:ee:97:50:94:f0:b9:8b:68:ba:9e:
f1:06:18:68:b8:61:73:86:a6:87:d2:cf:d0:cf:94:
b5:4c:21:e8:d5:9c:33:89:4a:b7:98:2e:7b:b1:e7:
05:03:36:f0:bb:66:7b:10:5d:ae:3a:26:1d:87:d9:
70:2e:78:d7:81:ba:2d:13:26:8c:d8:2f:79:af:db:
2e:3a:f3:0c:c5:99:80:00:7c:37:f2:bc:67:d9:2e:
db:47:ad:86:71:67:07:e9:8c:ea:79:8d:f9:01:0f:
92:1d:27:e6:7f:b2:29:e0:ab:7a:69:42:1f:e4:1c:
6c:8e:04:da:35:ff:bd:2f:82:e4:14:be:02:26:dd:
0e:bc:ac:99:a0:07:d0:5d:5b:f8:d9:6f:3f:4d:86:
a7:a9:2c:ed:54:58:53:1f:2b:df:c5:ef:d3:2a:f5:
09:3f:85:d9:f3:63:9d:07:db:5d:8c:65:92:d3:4b:
90:48:b1:db:1e:ef:76:df:c8:89:74:74:cc:4f:db:
39:bc:08:3b:69:b1:7d:79:0d:38:a8:3a:67:4a:c5:
df:50:5b:3e:45:e5:06:8d:00:71:39:72:90:2b:0e:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:64:A1:FA:A7:C1:92:FB:A8:C2:51:ED:F3:9E:08:E8:FE:C1:62:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a9cd4d3-93f4-3f36-8c0b-2fa766b026d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:6c:e4:3f:49:c7:33:09:75:64:ad:6d:97:ff:a4:4d:8a:d8:
24:2c:26:68:da:d2:a7:5e:54:1a:6a:37:ae:76:c5:24:4b:d0:
b0:7f:f1:bb:4a:ff:17:db:b4:6b:26:01:0b:9c:64:18:05:ed:
30:33:51:42:9a:46:73:e9:09:18:87:85:46:5e:ee:c7:ff:05:
e0:8f:ed:af:f4:98:ef:a4:1f:11:cf:32:f4:bb:32:0c:68:94:
73:81:1b:96:0d:0b:af:57:73:e3:13:43:81:9c:4c:2f:10:84:
7b:46:99:1c:1c:15:4b:27:2e:c5:86:a0:5e:04:5d:6e:c8:23:
2d:e2:ad:07:e0:5f:c0:4b:98:4e:f1:e4:db:cc:ab:13:27:78:
7f:be:fd:0f:33:d8:36:1e:e8:3d:dd:ea:2f:e1:70:1d:a5:4b:
85:a3:d2:36:13:6d:a1:21:30:a9:59:37:1b:5d:0c:61:da:f9:
da:a1:9c:3e:4e:39:6f:52:10:b2:4b:a5:e0:36:51:35:3d:e0:
35:24:85:a2:20:6e:ef:4b:bf:86:11:84:0a:12:1c:0f:d9:84:
69:9b:91:a8:dc:eb:4c:14:e4:a9:f0:74:b0:cc:36:8f:f7:50:
9b:3f:d3:02:13:8b:5c:d5:f5:46:f2:3a:bd:5e:dc:78:66:2b:
18:cd:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:41 2024 by rpki-client on console-ams.rpki-client.org