Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d062e1a-0491-33d3-b825-d6b4b7429bbd.roa
File: 9d062e1a-0491-33d3-b825-d6b4b7429bbd.roa (raw, json)
Hash identifier: NuSCz8EUojunhk9bTnqW9r0yZWwLhwYu/lebambdn+k=
Subject key identifier: 24:B8:D0:FA:B4:BD:96:AD:EB:C4:F4:94:F4:E8:26:08:DE:DA:A8:EB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EE02A709E5AC77F2EA0480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d062e1a-0491-33d3-b825-d6b4b7429bbd.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.114.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:02:a7:09:e5:ac:77:f2:ea:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=65f24193-edea-48d4-837a-22bda719038d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:e0:b8:be:91:e0:d6:f4:3c:b5:97:10:64:
ec:59:ec:29:c5:f7:c5:3b:81:1f:38:61:be:25:3f:
dc:07:e5:98:f4:eb:a8:66:e7:9b:e7:69:22:9a:cb:
f8:14:ae:5a:57:fc:c0:91:10:48:6d:8d:5f:ef:6f:
ea:51:17:7f:11:7d:05:5d:93:d5:17:e5:11:32:4e:
b4:3a:fd:c9:11:a5:d7:56:96:83:22:af:8d:0f:d0:
f8:e6:b2:9c:63:ac:09:e9:ff:7a:7b:0f:ed:cb:15:
30:26:7a:a1:7e:27:48:69:4c:44:7a:b7:9b:8c:e6:
1d:d1:40:00:9b:2b:2e:4b:44:f1:f8:e8:6b:ed:24:
19:73:c8:57:cb:18:39:4d:61:a0:d5:7f:cb:b7:37:
41:88:5d:8c:c7:60:61:89:e9:42:ed:71:8b:11:06:
d0:7c:59:96:16:e3:16:59:8b:41:dc:43:26:76:e8:
00:32:1e:c0:0a:9e:7e:30:70:dd:56:0f:31:61:b7:
84:bb:e9:9b:23:58:d9:d2:95:e3:24:9f:4a:26:b3:
97:a3:cd:37:1d:02:da:cb:db:d4:51:7c:05:2e:01:
51:a1:9b:11:30:e0:b4:4e:92:ae:8b:be:b3:97:26:
06:e0:9b:a4:2c:f7:05:4f:12:15:2e:78:ea:22:ad:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:D0:FA:B4:BD:96:AD:EB:C4:F4:94:F4:E8:26:08:DE:DA:A8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9d062e1a-0491-33d3-b825-d6b4b7429bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.114.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:b8:f8:ea:a8:17:48:e9:10:5a:61:f1:5b:6e:a9:9f:36:18:
1c:89:2c:10:e1:45:38:ab:57:c1:42:ea:36:8e:d6:83:1f:c8:
a4:81:f2:2f:d5:71:2d:07:bb:aa:56:4e:77:a5:64:bc:bd:f2:
5c:79:be:47:b3:82:16:c2:0b:a2:28:76:a4:a4:56:31:9b:ab:
70:73:ae:89:1a:62:6b:09:b4:de:71:d7:a9:8c:40:9f:ea:91:
17:10:5a:ea:d6:29:23:80:ce:64:bd:2c:85:e9:77:56:6e:aa:
f0:cf:49:05:5f:1d:f9:bf:6d:21:88:10:02:e2:62:a7:cb:6b:
bb:df:19:48:04:f8:67:0b:ee:4e:69:c9:e4:3f:a2:2f:ea:98:
e7:84:95:cb:8a:5e:3c:22:4f:62:55:e7:5d:3d:b4:cc:23:97:
29:ee:fa:5d:d9:c1:11:4c:ae:e5:7e:b2:60:0f:fc:9a:d4:d5:
06:44:3e:05:30:45:f5:f5:38:2e:9a:0e:47:17:a4:74:49:67:
05:fb:ef:20:b2:b9:7f:ff:1e:50:b6:e8:9b:33:d3:0b:9d:83:
cf:0c:71:df:58:41:b9:2a:63:42:95:59:eb:f3:b5:67:3a:a6:
70:46:34:c7:16:46:3f:e3:b6:72:38:16:c4:4e:e9:6f:ac:dd:
01:45:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:53:14 2024 by rpki-client on console-ams.rpki-client.org