Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3c55b4-dcd5-33ab-afac-e2dcd1ede7b5.roa
File: eb3c55b4-dcd5-33ab-afac-e2dcd1ede7b5.roa (raw, json)
Hash identifier: d9/MM8pUkJVQvWFGEY6SZn3gcg/m9Eaiv80F51qJ3sg=
Subject key identifier: D4:10:E4:F4:33:E9:31:3D:5A:A0:EE:F9:11:95:24:C7:16:E9:F3:10
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DD9B8B7D5656A94594EE00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3c55b4-dcd5-33ab-afac-e2dcd1ede7b5.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:9b:8b:7d:56:56:a9:45:94:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=113d3527-2bc9-4112-8039-8dacd48077da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:06:e2:eb:79:4d:9f:e1:03:32:e2:e3:ec:
3c:84:77:07:35:86:0f:51:85:31:14:5d:a5:ea:d6:
cf:8b:af:50:34:75:93:45:07:01:48:b2:c1:f4:aa:
32:30:c3:6c:6c:1d:de:b0:b2:85:c3:b5:39:e9:bc:
0c:fe:d9:cf:96:58:b4:43:c0:bf:ba:14:4a:39:0c:
46:bc:3f:61:b8:64:82:d8:f0:d7:a1:59:19:f2:a6:
fa:2e:76:bf:6d:94:00:25:6c:c3:51:42:a7:a4:99:
40:ec:06:7c:7d:06:37:17:c2:d1:95:b8:48:c5:e7:
ad:7c:72:2e:8b:58:5f:c5:e8:01:69:c2:e7:c1:97:
65:54:99:75:94:c8:d9:a9:ec:f4:93:32:f7:69:18:
50:6d:0b:50:98:32:9d:5b:00:d0:67:18:d9:a9:4d:
50:59:32:8a:9a:2d:37:31:83:b5:a6:ec:2a:8b:35:
9e:22:b5:f4:47:e9:a9:bf:88:56:13:03:f4:97:32:
36:fb:5b:da:c5:4c:d7:5e:24:92:35:a7:6b:98:e9:
41:0a:b2:65:f0:ed:02:ca:38:1f:71:25:2f:e9:b6:
d7:df:7d:ab:36:5c:6b:cb:b4:ef:a7:c0:4f:01:d6:
04:6a:ed:36:61:99:5e:4e:48:bb:e5:dd:a4:84:38:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:E4:F4:33:E9:31:3D:5A:A0:EE:F9:11:95:24:C7:16:E9:F3:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb3c55b4-dcd5-33ab-afac-e2dcd1ede7b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:06:66:b6:42:ef:70:77:21:05:8d:0f:55:b8:54:da:16:52:
a2:48:14:49:c4:39:9c:95:64:c4:c3:e2:23:9e:5f:8e:ff:2b:
d3:0e:ce:b4:6d:b2:4c:10:e2:7a:f5:1d:e9:41:08:ba:04:e9:
6e:f1:f4:2b:85:cc:a7:a3:f6:25:fe:3f:21:4c:75:cf:a0:c7:
a9:fa:5c:6c:6c:6b:ec:ea:42:28:bc:72:fd:47:d6:ac:9f:e3:
d3:62:6e:a9:47:d7:db:13:3d:4e:64:19:60:cd:4b:63:01:26:
4e:1d:4d:44:4f:36:b8:a2:35:8c:0b:d1:84:8c:92:1a:0b:79:
a1:3d:3c:da:3b:e3:1f:7a:de:fa:86:10:e9:09:ac:5c:66:ef:
90:1c:f6:96:f8:65:c8:91:32:c6:53:d2:67:90:82:d1:78:c5:
79:c5:71:18:33:bf:fb:ee:ab:c2:79:8a:42:56:ec:72:a3:60:
57:1b:6b:92:8d:b1:5f:c5:76:aa:ca:e1:8f:b1:0e:25:a1:41:
d6:41:28:44:e1:95:19:c8:57:47:df:6f:40:e2:c9:c6:1b:67:
f9:f5:83:61:9b:f8:97:34:89:a0:30:97:f0:97:0d:51:1a:41:
35:b3:a1:ca:03:c7:e2:e8:f7:59:86:64:b7:ba:a5:93:3b:84:
d7:6a:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org