Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb69f2a3-65b9-3ad5-b1d4-0db84dab74c7.roa
File: cb69f2a3-65b9-3ad5-b1d4-0db84dab74c7.roa (raw, json)
Hash identifier: MS/frEarpSBGkmy9xIepUr62mvt9iJi8sa18RTzOWzk=
Subject key identifier: D0:DF:8D:2C:AE:01:22:A9:80:8A:0F:60:B6:4D:35:99:98:BF:F2:9C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FA0EB0E1D9A857B461AB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb69f2a3-65b9-3ad5-b1d4-0db84dab74c7.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fa:0e:b0:e1:d9:a8:57:b4:61:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4cf93a7e-6be5-4c51-977f-86755d3583a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:e5:70:0e:20:bd:21:1c:3e:78:40:89:40:
3f:d4:4d:2d:0b:70:1d:d5:04:0b:e3:04:8c:41:a1:
ef:7e:31:cc:0b:9a:35:93:a2:3d:66:0a:33:34:17:
6d:50:21:4d:e9:10:0b:fe:1a:5c:be:04:7e:a5:b1:
7e:54:04:84:27:c2:e2:08:e2:a3:91:bc:33:ba:d2:
60:3e:2d:bc:c9:25:ed:37:12:74:d4:52:fb:c1:11:
e0:70:00:fa:5b:89:2c:50:68:55:59:23:d4:46:dc:
75:60:23:cf:46:a2:64:45:11:f5:91:bd:87:64:50:
f8:7d:4a:12:db:4b:23:4c:2c:a9:51:52:79:a8:80:
2f:13:b8:a7:b9:34:bb:c0:09:85:17:30:ab:75:79:
0e:e7:6d:04:15:ce:42:4c:84:b5:5f:00:22:2c:13:
35:49:dd:db:77:3f:c0:d0:ae:9d:3d:a1:11:a0:ab:
22:94:c3:87:7d:ad:ab:87:da:26:f7:c1:f7:91:f2:
bf:e0:02:28:4d:e9:9a:5e:0c:74:b0:a3:ec:b7:88:
cf:d2:be:f5:3e:62:35:91:59:ae:e2:1b:52:b7:7c:
a2:bd:4c:0f:1a:16:d4:7b:68:41:73:86:af:c3:8c:
90:0a:19:dd:8f:c7:02:9e:99:20:95:e9:5b:3e:e5:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:8D:2C:AE:01:22:A9:80:8A:0F:60:B6:4D:35:99:98:BF:F2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cb69f2a3-65b9-3ad5-b1d4-0db84dab74c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:30:0e:c5:8e:90:81:bb:ed:ea:dc:c3:bc:85:d8:3f:62:b5:
36:0b:dc:f4:de:76:bf:f0:9f:28:a7:17:14:87:7a:75:24:4e:
2f:c4:09:91:35:95:0b:d4:02:a8:23:e9:5f:a7:e0:fe:35:78:
3e:60:0b:74:29:17:81:de:a8:35:91:b4:14:69:25:df:7d:48:
50:51:82:5a:47:4c:10:7c:86:0f:a0:b2:f0:30:4a:b1:5a:92:
29:42:b8:02:e7:b4:5e:6f:d5:78:76:96:30:9d:61:f4:f8:d0:
81:59:1a:08:0e:03:a7:0c:1d:01:4d:35:d9:d2:69:d9:b2:02:
77:ac:aa:8d:7d:d1:87:08:fc:be:5a:08:6a:30:18:44:c6:c1:
f7:e3:fd:4f:d7:35:1e:89:ac:62:3f:94:bf:19:be:f5:68:4b:
17:85:2b:38:55:8d:42:ec:f7:68:c9:9d:0a:4e:a4:c3:27:51:
6e:2a:59:e2:a7:34:9a:a2:9c:d7:64:3e:d9:e9:21:5a:87:52:
43:41:2e:1b:fc:6f:fb:7d:d6:41:41:20:9b:ad:8d:50:2b:85:
e9:19:1e:45:b5:45:d4:44:4b:09:c6:c5:84:20:4a:09:df:9f:
aa:36:e6:a0:3d:9c:0b:a3:ae:51:3b:9e:fc:37:b3:f6:d8:fe:
90:5d:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org