Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0df50032-224f-3b0c-a370-899e1f9110e1.roa
File: 0df50032-224f-3b0c-a370-899e1f9110e1.roa (raw, json)
Hash identifier: L2/6h6TcfJdwweO2qVuGyRNzI8tb2W15HAIN7gRdKeE=
Subject key identifier: A4:E3:D0:26:11:8D:A4:3F:61:36:49:C5:66:B9:5B:98:59:CB:58:E5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DD5FE595F90F80D8546980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0df50032-224f-3b0c-a370-899e1f9110e1.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4822::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:5f:e5:95:f9:0f:80:d8:54:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=54790ad6-ef25-4802-816e-1f043671060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:e6:0b:3a:38:48:8c:81:d3:61:4a:2a:a7:
1d:8d:71:89:46:75:30:fd:ce:1b:b7:90:e2:8d:74:
ad:60:2b:2b:e1:65:7e:92:24:db:50:40:8d:5a:da:
12:82:8c:67:1e:8e:ca:d6:76:89:47:93:95:05:21:
a9:18:64:b2:d8:16:0f:6a:4d:80:90:ea:8a:66:21:
d4:3c:68:d3:80:45:ee:fc:65:5a:67:e9:de:72:16:
3a:f8:23:ae:a6:c5:75:4d:90:43:53:34:90:64:e7:
5f:a1:3d:05:68:33:b5:bb:be:91:70:41:0a:23:71:
ef:4c:7b:7e:5c:2c:06:8d:9d:0a:ce:1f:cd:60:d3:
41:73:ce:05:a7:13:0f:64:44:00:4c:6d:53:4a:82:
4e:3b:90:d7:71:0d:c1:db:5b:5b:03:c9:10:15:d5:
80:9a:80:4e:11:07:73:75:05:80:58:1d:f0:25:83:
25:3a:61:56:0b:f1:5e:38:9f:48:26:a7:d8:23:7f:
47:e8:6a:68:19:3d:8b:23:6d:c4:50:fb:11:34:76:
34:a1:9f:73:d8:34:b8:1a:35:0c:1c:3f:42:32:03:
d2:13:c3:f0:42:b9:27:1e:98:5a:78:6a:38:64:a7:
5c:db:5a:3c:5f:10:12:b4:90:1f:75:0d:78:1d:93:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:D0:26:11:8D:A4:3F:61:36:49:C5:66:B9:5B:98:59:CB:58:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0df50032-224f-3b0c-a370-899e1f9110e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4822::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f5:e2:a5:28:f1:46:c0:9a:84:f9:cb:13:17:c0:a5:30:d2:
bc:80:47:08:bb:1d:c3:35:26:7a:7e:22:b1:dc:4e:db:56:3d:
0b:1e:a9:f6:b4:92:f5:b6:9a:85:ad:09:39:13:6f:01:87:86:
d1:c9:29:92:88:af:4f:5b:3a:f1:71:33:06:4f:27:28:a3:97:
70:0d:3c:86:04:56:69:11:2c:6a:8b:63:7b:74:91:21:45:2d:
27:fe:3c:00:f9:03:64:7b:4d:2e:75:3e:6e:11:47:97:67:00:
ea:a5:0c:3e:65:17:cd:55:d0:b0:a0:af:1d:e2:d9:65:72:76:
ad:1d:7c:c7:a1:83:10:a2:a9:f6:84:ac:48:4a:a4:cc:76:1e:
c2:0e:2a:5e:63:57:69:33:d1:06:ff:6c:59:5f:38:55:9d:48:
a0:83:c9:0f:96:fb:45:08:57:42:f2:05:01:bb:5d:51:c0:5c:
c3:88:c4:9c:f1:61:1b:67:af:f5:14:b1:f5:7c:27:33:49:50:
71:9d:a3:d7:5f:10:64:9d:b7:59:92:96:00:c4:a1:45:d5:5b:
ed:8c:0a:23:ce:db:8c:e3:ce:4d:71:7c:91:4e:49:d4:cf:31:
7f:b0:56:c5:a8:1a:cd:ef:f5:0a:be:58:aa:c6:75:f0:8d:e8:
d9:c2:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:42 2024 by rpki-client on console-fra.rpki-client.org