Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3f2dffaa-7883-3ff7-95ab-a6a48d96910a.roa
File: 3f2dffaa-7883-3ff7-95ab-a6a48d96910a.roa (raw, json)
Hash identifier: 23NWm7g1bINgsUmyyCdxNlbK1LlMZEYBgXq8gz3qS+4=
Subject key identifier: F3:ED:EE:CB:1D:47:88:96:96:4E:7A:1A:31:E4:55:EB:79:A6:18:DC
Certificate issuer: /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial: 010D0C9F43285844B821B53583D741FB70EC4068
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3f2dffaa-7883-3ff7-95ab-a6a48d96910a.roa
Signing time: Mon 29 Jan 2024 23:55:47 +0000
ROA not before: Mon 29 Jan 2024 23:55:47 +0000
ROA not after: Sun 28 Apr 2024 22:55:47 +0000
asID: 20473
IP address blocks: 2602:fa02:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 30 Jan 2024 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:b8:21:b5:35:83:d7:41:fb:70:ec:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
Validity
Not Before: Jan 29 23:55:47 2024 GMT
Not After : Apr 28 22:55:47 2024 GMT
Subject: CN=2149d4d2-1a37-4fd1-8799-4ce20434ac25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:5d:a3:cb:bb:d2:69:4b:45:d8:a1:84:73:
69:63:3d:a5:39:96:fa:dc:7c:16:20:cf:af:0a:04:
b2:dc:d0:2a:7a:ff:6b:80:f7:b4:03:94:0a:1b:59:
99:59:e6:9c:c5:45:06:db:a4:41:eb:1e:87:8b:43:
84:4d:36:27:d6:9e:91:4a:50:8e:d7:28:6e:28:0e:
e4:8b:bc:de:ef:67:a1:b2:1e:8d:97:25:b5:ef:80:
9f:7f:84:ea:93:a2:6c:9c:dc:61:dd:d2:08:3c:d9:
2b:72:6c:2b:8e:22:9a:b2:78:24:89:20:45:86:57:
ad:be:a1:c7:16:93:c1:0d:41:d5:e9:fa:58:24:b0:
76:19:94:77:7a:42:ec:ed:ea:c8:3b:f2:2b:78:9c:
d8:a4:d0:60:8a:22:75:8c:60:18:05:65:a3:35:b7:
1e:45:d9:46:5e:d4:5f:b9:80:24:0d:09:4c:3d:65:
c4:e4:50:d0:fe:63:56:f8:de:08:96:a6:a6:d8:0d:
ac:c7:f7:f0:7f:6a:7c:fa:f4:b6:96:e4:fd:00:32:
fb:0e:5c:2d:2e:31:08:1d:49:a9:bb:54:35:9a:c6:
ac:d9:51:71:42:15:a9:49:a1:70:26:e0:37:2c:bb:
f9:1f:b7:b0:f2:40:3c:5f:2e:3c:2b:ca:c6:72:8b:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:EE:CB:1D:47:88:96:96:4E:7A:1A:31:E4:55:EB:79:A6:18:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3f2dffaa-7883-3ff7-95ab-a6a48d96910a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
X509v3 Authority Key Identifier:
keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa02:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:c9:a7:06:a2:34:10:dd:e4:ab:fb:5a:fc:f7:d7:1b:a0:f1:
e0:05:65:ea:2e:e2:b6:52:a9:7a:e8:e5:f3:ba:08:c2:87:c4:
63:5b:b0:8a:4d:40:61:6e:6e:98:7d:ca:27:4f:84:bf:a1:d3:
95:bb:43:d3:68:9f:10:4c:4f:cc:5d:a2:7d:aa:3b:a0:17:8f:
62:7d:f1:3e:f8:f1:f2:64:84:f3:cc:f9:75:5f:dd:a1:f6:9f:
38:d3:d1:6e:ee:f7:a8:47:d2:19:b2:02:d5:51:da:15:38:03:
c0:45:25:04:de:27:a0:5f:59:a8:07:ce:48:ce:65:0f:49:03:
cd:e5:b2:70:7a:a9:0d:ec:60:cd:3f:8e:cd:0f:f5:f5:7f:31:
c1:17:12:12:dc:a2:50:43:1e:10:ba:6d:5e:8e:48:26:ac:2a:
74:fa:33:d8:ca:bf:17:a4:98:75:5c:3a:4b:88:d1:f0:cb:ca:
4e:08:43:19:23:48:cd:a4:df:eb:1f:33:ee:3d:35:07:67:4b:
91:e9:9b:8d:68:5c:ec:87:2a:6e:c1:bf:c8:86:42:da:44:00:
40:dd:05:3e:42:71:02:98:b6:cf:42:a3:f8:06:d0:e0:d1:44:
31:cd:ee:85:f3:aa:96:a3:38:f6:99:83:e4:2d:69:5e:71:50:
e2:41:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:53 2024 by rpki-client on console-fra.rpki-client.org