Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fab85fa9-87b7-3639-ab76-abcb405dc72b.roa
File: fab85fa9-87b7-3639-ab76-abcb405dc72b.roa (raw, json)
Hash identifier: 7TRjYs72EG5dZDt7Uf/gRNLJa322lbKZdL/CsuMXQNw=
Subject key identifier: 9F:71:C5:D5:FF:82:31:95:AE:68:C0:F9:A7:B8:5B:6C:16:A5:31:7A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A1B0A4E13FDD15754AE7B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fab85fa9-87b7-3639-ab76-abcb405dc72b.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.250.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:1b:0a:4e:13:fd:d1:57:54:ae:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=4b7f18a7-f480-4dc3-9e4b-05f5c1537b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:98:31:8a:50:61:0d:34:20:26:07:7d:50:
ba:c9:d6:35:4d:7c:13:21:92:10:ad:00:ed:dd:29:
6f:36:8b:e9:55:3d:b5:5b:ca:83:39:29:41:e9:ab:
37:66:31:e7:27:e4:40:7f:19:15:a3:fb:f3:0b:20:
f8:ec:9b:1f:16:18:6c:a0:2d:50:ef:76:c3:dc:5a:
73:ba:3f:65:46:bf:42:7f:81:86:bb:06:b1:b3:d4:
cc:0f:56:9a:ec:85:f7:12:12:18:59:f5:77:95:e5:
3c:61:74:d1:ea:62:cf:b9:2b:a6:f9:ac:2c:8e:a5:
22:bc:28:f4:66:e6:a1:a7:ae:55:6f:fc:23:70:e3:
39:fc:cc:39:b8:44:37:7b:0f:9a:81:06:23:23:d5:
5a:a2:d4:16:cc:81:25:0c:74:82:11:6a:59:a4:58:
cd:26:da:7e:f1:c2:b2:d7:9b:af:5e:47:19:8a:8c:
89:ad:40:fa:ad:6b:2c:13:e0:78:b9:89:dd:07:5f:
fe:71:a3:e4:f6:e7:e6:76:5e:c8:f0:47:9c:71:ab:
14:2b:4d:ae:8c:59:16:86:71:5f:a0:dd:35:22:e9:
a6:0a:8e:fa:bc:d7:de:9b:f7:1e:c2:ba:c5:87:5e:
de:ea:43:71:3b:fb:a8:4f:de:9e:b0:71:3e:fe:96:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:C5:D5:FF:82:31:95:AE:68:C0:F9:A7:B8:5B:6C:16:A5:31:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/fab85fa9-87b7-3639-ab76-abcb405dc72b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b5:31:20:69:4d:da:fd:8f:0c:55:6f:45:4a:6e:ec:73:64:
1d:a8:5d:a9:87:f0:c5:36:39:c2:8c:a4:e8:2c:db:7a:35:51:
f5:6c:84:f3:5d:ee:a9:c4:33:b3:45:37:02:b0:e4:de:9e:98:
9e:ba:a8:fb:a1:94:b3:50:67:ee:b0:b1:31:ea:3b:40:5d:7e:
dd:ee:44:09:d4:9d:8b:40:c7:ff:49:b7:a6:3f:84:a7:d1:9f:
a5:b7:bd:73:bf:f9:45:e0:99:e5:64:b8:ae:8f:3b:13:ca:1f:
e5:3d:7f:aa:35:89:05:0f:ed:e8:8f:7f:e9:dc:2e:84:e4:f9:
76:cd:88:42:25:b4:6b:d9:6f:25:a0:ba:dd:eb:fd:d1:e7:bb:
42:59:23:50:e1:15:99:a0:aa:a4:de:81:33:75:e1:65:23:fe:
cd:ec:79:32:fe:a0:10:9c:b0:be:95:f3:b0:ea:c3:27:15:7d:
a8:39:63:4d:14:64:aa:f4:c3:8f:f9:08:db:0b:93:b9:a5:3e:
09:c0:41:7c:75:64:bc:8e:44:9d:a3:fb:6c:0b:8c:3d:aa:b0:
18:e6:7a:c1:63:ca:63:39:1c:af:94:15:de:2d:1c:cb:ab:44:
54:8a:19:fd:6f:be:b5:ee:d1:9e:b6:6c:89:cc:37:17:3d:ac:
9c:f5:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:43 2024 by rpki-client on console-ams.rpki-client.org