Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3cadd9f-68b8-3ad0-8bbb-44ad9c7e867c.roa
File: a3cadd9f-68b8-3ad0-8bbb-44ad9c7e867c.roa (raw, json)
Hash identifier: ftu7C43DimoJXkyL4Zl3RO/AnF5tv9R78nxCUnTJxpY=
Subject key identifier: D6:A9:2C:29:11:97:C8:BC:C6:15:57:BB:0D:B5:0F:2C:2A:9E:54:AB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309EE89A82129E568D30A4540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3cadd9f-68b8-3ad0-8bbb-44ad9c7e867c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ee:89:a8:21:29:e5:68:d3:0a:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2a9b8a01-a7bd-4ab8-8255-eb9f8ab7335a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:53:72:e1:e2:28:ed:d0:36:a8:69:95:af:
4a:45:3e:90:ea:14:16:e4:96:ff:16:95:df:21:f6:
11:2f:e0:31:ef:9c:5a:5e:72:74:c2:8c:09:3e:7a:
0a:31:db:9a:18:e9:78:cd:27:4c:af:01:39:ac:a2:
51:8e:2d:52:af:60:4b:66:d6:06:b1:2e:73:a5:c4:
ce:6d:51:78:de:ff:4a:ed:fc:ba:f0:d2:84:8a:0f:
04:27:9e:d0:9b:49:d7:43:e2:a1:55:26:ff:bb:ad:
fc:62:dc:ef:88:c5:6f:c6:17:f2:d8:9f:8c:73:bd:
9f:c4:c1:51:b8:3a:9e:b5:44:09:46:24:c2:82:b5:
7b:a9:19:20:b1:c7:5b:11:95:61:23:01:20:e5:be:
85:bf:54:db:01:3f:66:05:e7:7a:74:39:bd:32:fa:
49:7d:2e:0f:6c:15:07:b7:ab:e6:3d:31:24:7c:e6:
6d:25:b9:0a:cb:a7:ca:3c:ad:66:6c:e9:f3:74:76:
34:07:23:cf:a4:66:3b:59:a1:65:be:e6:42:9d:43:
df:1f:2e:33:90:3d:3c:3c:0d:82:60:a7:5f:bc:3e:
bc:35:93:b6:26:7b:99:00:9e:bb:b9:ba:22:93:75:
29:17:44:0a:4f:0f:6b:49:e9:cc:69:d2:b5:89:1a:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:2C:29:11:97:C8:BC:C6:15:57:BB:0D:B5:0F:2C:2A:9E:54:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a3cadd9f-68b8-3ad0-8bbb-44ad9c7e867c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:5c:bd:e5:71:f1:0e:ad:53:9f:cc:cb:ba:5f:55:d1:1b:e6:
0a:e9:f5:9e:b9:b0:d9:90:bc:67:c3:05:93:07:f1:03:3d:3b:
11:a2:b2:77:93:5e:e2:79:d1:81:f5:7f:33:17:0c:ad:75:d3:
24:8f:77:7c:a9:36:88:4b:36:8c:e4:02:47:d9:1a:12:dd:af:
e1:25:8e:65:b6:1a:81:b8:1f:24:d5:bf:6b:9d:fe:f4:c9:65:
81:d0:87:ff:14:78:75:8a:56:b4:68:e1:f5:90:9f:43:55:55:
bf:ca:be:cc:98:a3:de:51:2b:38:1b:41:4d:99:d3:29:40:aa:
61:fa:6e:9d:cf:6d:0c:39:ef:aa:cc:bb:4a:eb:44:22:57:bc:
10:fc:5a:06:24:d3:4a:27:26:24:17:b7:f4:58:56:f7:e1:35:
79:11:68:22:a1:7a:c9:6e:63:c1:c6:d2:c6:37:2e:6c:cc:76:
fb:f6:52:3e:30:a8:d9:ae:38:e2:9e:94:08:47:58:32:41:b3:
c6:3c:d0:db:8a:a0:f1:93:c5:da:09:d3:f3:b4:b2:70:cf:5f:
7c:59:bf:ef:7f:3f:62:23:4d:0e:0b:d3:9b:27:f6:46:10:8a:
5b:f8:4c:9a:07:18:07:e6:4f:f4:c2:78:0b:1a:e3:ca:86:40:
3c:f6:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org