Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e30708b4-33b6-3ef4-8185-73f88c27a333.roa
File: e30708b4-33b6-3ef4-8185-73f88c27a333.roa (raw, json)
Hash identifier: Wsqt/OubeHN3JS3ynIqBHjikTbUId+bM6mqan4EowOo=
Subject key identifier: 47:9C:33:A8:8B:36:22:14:FA:13:97:83:40:27:58:40:F9:3A:D5:57
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FD8072B2F82144921BAD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e30708b4-33b6-3ef4-8185-73f88c27a333.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.152.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:80:72:b2:f8:21:44:92:1b:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=f3fb816b-c8f4-4e5d-b341-9e3a048c6082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:ce:39:f5:85:2e:c1:33:2a:de:68:99:1b:
20:bd:ee:ed:f2:61:37:b5:81:13:bc:01:32:df:01:
3f:be:a0:f0:7e:d2:bc:a0:cb:6f:3a:e1:40:ba:90:
3e:6b:31:a6:67:e6:a7:e5:92:04:22:e4:fb:23:7a:
fe:a4:1b:4c:ad:e4:e1:96:14:53:a7:33:00:90:b7:
57:19:37:69:86:42:be:d3:5c:2c:31:15:dc:a9:61:
ab:da:c0:3a:31:91:6e:17:60:52:36:a0:57:44:fb:
39:39:b6:88:98:5d:d4:81:3d:aa:e6:d9:8b:66:fd:
54:d4:11:78:0b:c2:f0:68:86:92:c9:79:1a:76:54:
8f:be:91:92:c5:37:84:fd:0b:34:bd:f8:80:5f:f2:
37:de:23:8c:7d:57:11:43:51:5e:12:aa:97:5a:91:
13:ff:ef:ac:cf:fa:0e:ff:a5:ba:3f:c4:04:5c:99:
65:df:3d:99:2c:7f:ff:e5:6f:08:a9:6a:03:c6:3b:
f1:6e:95:a8:56:8e:12:b4:c6:5d:5c:2a:e9:50:f8:
1e:36:78:46:1d:93:40:0d:d2:16:d9:cb:b6:43:7c:
ac:c7:6d:c0:2f:98:2d:1f:1f:76:9f:e3:33:5b:7e:
6d:ee:96:9f:33:cd:dd:eb:df:d3:62:23:ae:7d:6d:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:33:A8:8B:36:22:14:FA:13:97:83:40:27:58:40:F9:3A:D5:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e30708b4-33b6-3ef4-8185-73f88c27a333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:5f:71:41:95:76:90:ef:48:3b:7e:d2:bb:aa:92:11:9a:b6:
1e:4f:28:e4:53:d4:85:d4:29:f5:ec:6f:08:3d:6f:4b:6c:34:
ca:70:bc:90:50:1e:d7:6a:a0:bf:38:df:00:b2:ad:ef:37:b7:
51:4d:7a:9a:84:be:ba:62:b2:f4:3e:aa:dc:81:a1:89:53:fc:
dc:9c:5a:ed:24:88:45:3b:a3:5b:d4:fe:31:41:68:41:5f:5f:
c7:f6:32:24:32:a1:d4:74:23:d9:12:4b:e9:45:cd:49:7e:ee:
78:c7:38:40:fe:94:11:67:35:e2:1b:0c:1a:cc:03:04:30:54:
82:c9:fa:2c:16:8f:2a:9a:72:28:25:83:b1:61:b5:91:e5:b3:
e5:95:50:5d:cb:f8:cb:45:f0:4d:05:f1:f6:94:6e:bd:21:8d:
64:18:31:6a:c9:a8:be:a5:19:42:f0:46:8a:b9:7c:0d:b1:30:
bf:52:1c:5d:61:39:fb:60:87:29:d1:44:de:b0:c8:cf:bc:c1:
0e:82:f4:ee:ff:d6:dc:6a:44:6e:77:02:8c:7a:b3:b5:98:16:
40:95:18:b2:77:94:d2:da:c8:0d:8c:d2:46:01:03:76:14:fa:
96:9c:a8:b4:4b:a4:4b:e3:35:9f:0e:0a:fe:78:e5:11:e7:da:
b6:71:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org