Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9b909e6-879e-38df-a9e5-d34cdffb864b.roa
File: a9b909e6-879e-38df-a9e5-d34cdffb864b.roa (raw, json)
Hash identifier: qgJn5+V0ftMrP0oPAStCOk1ALmgNeTuJh8nLZpoMcGU=
Subject key identifier: FF:19:D8:9F:34:3F:C7:6F:C9:A5:1A:82:4C:17:A2:A4:D3:25:DF:A7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583C9A0A7751B20274DC0268D240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9b909e6-879e-38df-a9e5-d34cdffb864b.roa
Signing time: Sat 15 Jan 2022 05:00:00 +0000
ROA not before: Sat 15 Jan 2022 05:00:00 +0000
ROA not after: Thu 18 Apr 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:9a:0a:77:51:b2:02:74:dc:02:68:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 15 05:00:00 2022 GMT
Not After : Apr 18 04:00:00 2024 GMT
Subject: CN=15b73a98-ed38-49ea-b785-c5f50cc0f1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:a8:cc:28:d4:0c:b8:62:33:52:ab:58:59:
f3:d1:7e:54:b2:6b:02:0e:1e:68:4d:0c:80:b0:79:
cc:b7:c3:23:1d:2f:46:2c:98:71:a9:fc:b8:11:0b:
64:d6:98:20:50:55:0a:12:2d:55:13:6e:84:e7:be:
08:d1:94:d6:b0:40:4e:f4:1b:13:b1:38:bd:0f:51:
53:25:66:b5:a4:32:c8:3e:01:e7:f3:bc:69:e2:91:
b4:e1:b5:e9:f4:55:a8:14:84:21:5f:12:66:be:9a:
a0:e2:ae:ca:cf:8e:9d:27:0f:d5:9f:98:79:6a:c0:
68:39:5f:60:05:c9:4d:63:5d:89:6b:61:ca:27:55:
96:42:38:07:63:50:8e:b4:1e:0d:ad:0c:88:65:0c:
05:56:5f:0b:e3:b1:95:40:cb:51:ee:aa:ee:25:0f:
66:70:ca:ff:93:00:98:0f:02:90:aa:57:05:f3:7e:
5e:e8:fb:c3:bd:fb:6e:a9:e5:03:e6:1f:b7:60:66:
0e:23:fa:0e:f3:58:96:65:0f:89:b6:0d:90:af:ec:
26:f5:a4:ff:cd:31:35:de:3c:57:5a:7f:7e:52:11:
6e:8d:64:ae:bb:7a:14:9d:fd:6e:cc:a7:5b:25:e8:
b6:53:b2:8f:e1:a6:32:7b:84:5a:3d:21:6a:70:03:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:19:D8:9F:34:3F:C7:6F:C9:A5:1A:82:4C:17:A2:A4:D3:25:DF:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9b909e6-879e-38df-a9e5-d34cdffb864b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:8c:4e:cc:ff:ee:50:43:11:16:00:e7:29:ad:37:3f:96:ae:
04:66:f1:f5:69:2d:a2:cd:7f:f6:1f:4d:1d:2f:85:33:41:8d:
36:f2:64:ec:40:e0:22:16:29:d3:da:53:95:0e:fe:99:9b:5c:
10:75:29:0e:b5:55:15:c5:94:51:43:4f:1d:da:42:e5:47:06:
ee:7c:c7:0b:e7:c9:2e:55:f9:ce:fc:0e:00:09:5b:1e:36:75:
c1:58:30:b5:9c:12:a0:53:12:02:ab:ea:29:27:d4:21:e5:8c:
04:74:10:29:98:97:8d:7f:09:06:00:fa:00:be:f9:ff:34:48:
43:b4:cf:8a:bf:ac:b3:2f:fd:b1:38:49:ba:ff:4d:2a:5a:07:
11:d7:60:e5:ac:27:0b:31:80:61:24:f7:12:4f:83:b9:c4:35:
f6:58:a8:8b:04:e5:df:69:ad:62:4b:1c:d5:5f:f0:aa:05:98:
b2:da:2c:2e:16:f1:c9:dd:52:20:56:dd:f8:fd:06:3f:ee:95:
9c:5c:ff:b7:22:31:c1:2e:91:2d:fe:7e:83:7b:1b:ea:28:9f:
4a:eb:22:5b:20:20:f2:54:86:1a:97:1b:b7:6a:92:c9:9e:2b:
fc:f2:fc:21:68:49:4e:ab:a6:15:f5:29:7e:27:37:1b:d0:e5:
6f:28:0d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:48 2024 by rpki-client on console-fra.rpki-client.org