Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b78d6e4-a530-3bb8-b255-dd60f3326dde.roa
File: 8b78d6e4-a530-3bb8-b255-dd60f3326dde.roa (raw, json)
Hash identifier: /iH1mqVZp/SO7eOOyGkjibBXrOGysHnah9CgOPPIZ2g=
Subject key identifier: 1A:69:AD:64:13:A9:02:B2:BE:F5:B5:FE:41:0F:F5:03:25:2C:30:9A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DD9F8EBE2F0D573A9DE0C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b78d6e4-a530-3bb8-b255-dd60f3326dde.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4828::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:9f:8e:be:2f:0d:57:3a:9d:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=6d2bec98-3513-4d95-8ad1-d337babf10f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:85:72:d4:88:ea:07:e7:73:8a:d1:8e:ad:
4f:e9:c6:12:50:29:07:c4:c2:8a:05:f0:c2:c4:67:
e2:8f:7f:05:10:f7:3e:54:ba:ce:97:50:92:70:1f:
34:9b:11:b1:e7:39:45:05:60:fa:e0:8c:0e:73:cb:
b7:a2:5d:2d:d6:c5:77:f7:e6:f3:83:a8:68:9c:c2:
d1:8a:33:ae:22:82:87:28:5a:62:e9:76:3f:69:04:
ad:df:48:d8:58:c2:34:70:10:10:b4:06:02:64:2e:
84:21:c5:e6:9a:a6:7c:f6:e1:b7:a5:e0:88:3b:8b:
7d:a7:8c:ab:03:bd:8d:c6:85:16:f5:88:cc:f8:d8:
f5:27:4f:63:b7:38:dc:d2:fa:c0:a7:ee:fe:47:b3:
67:63:cb:22:a4:c8:65:5a:55:9f:94:1b:78:de:83:
22:e6:5e:00:2b:94:7b:e2:54:0c:ea:02:52:68:2a:
45:f0:6e:e3:83:e0:59:6e:bb:29:97:03:1e:7d:1e:
cc:0c:bc:f9:cf:da:35:cd:d9:9d:21:2f:2e:0a:a2:
fd:59:34:40:55:b9:a2:11:71:d7:91:9a:b2:35:12:
4f:ee:7c:46:67:37:cb:d7:32:58:79:15:cb:af:12:
d0:0e:f0:3c:9e:0d:21:34:8d:94:7b:df:26:fd:55:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:AD:64:13:A9:02:B2:BE:F5:B5:FE:41:0F:F5:03:25:2C:30:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b78d6e4-a530-3bb8-b255-dd60f3326dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4828::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:21:e6:45:23:cf:17:6a:ed:c3:37:76:d9:d4:31:d8:d0:ad:
d3:41:9c:72:74:7b:2c:76:6f:c9:c2:72:10:7c:a0:f5:04:6c:
10:c9:31:a0:ac:df:f2:51:c0:56:2f:bb:83:e6:37:de:6b:18:
70:3f:f5:81:45:f9:c8:6d:1a:61:7f:3a:a2:e7:4b:6f:c2:d0:
3e:d6:5f:3f:cf:53:f0:a9:41:e5:ba:ad:05:1a:e5:54:d0:aa:
50:53:6d:9f:aa:56:20:e8:a6:6b:da:34:dd:35:70:40:c1:3b:
7c:f3:10:2e:35:45:40:fe:7e:20:d0:d8:0d:a7:14:98:3f:26:
dd:22:5a:dd:b7:8e:75:44:92:a5:dc:c3:cd:c4:3c:26:d7:0d:
a7:9c:76:ef:d4:21:5d:fb:39:4d:00:01:e7:4f:68:1e:5a:c9:
a2:0e:8f:14:06:42:da:66:ce:b9:64:26:bd:25:ee:19:76:54:
9b:37:65:05:b7:67:a5:fa:f6:f3:11:a5:50:31:0e:77:04:40:
58:1b:c6:f0:61:f3:23:76:2d:94:a0:00:93:f9:99:c7:9c:c3:
de:a6:9b:b7:88:2c:9f:23:f7:92:bc:7d:c6:88:c8:36:fc:0d:
61:d3:86:1d:87:18:ea:97:38:9c:95:60:74:fa:b4:3e:2a:10:
69:24:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org