Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92de2721-f6e9-3c84-827e-5ab8b80eb8dc.roa
File: 92de2721-f6e9-3c84-827e-5ab8b80eb8dc.roa (raw, json)
Hash identifier: WksEYhIDxlxZebkabXjp7lh5crqYfFa/3xZHg2EujFo=
Subject key identifier: AE:48:7E:F1:94:8C:05:09:4B:C4:4C:73:73:F5:AE:73:45:15:ED:CA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285842B065A2496C4193E7D1AF3280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92de2721-f6e9-3c84-827e-5ab8b80eb8dc.roa
Signing time: Wed 26 Jul 2023 12:00:00 +0000
ROA not before: Wed 26 Jul 2023 12:00:00 +0000
ROA not after: Mon 29 Jul 2024 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4864::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:b0:65:a2:49:6c:41:93:e7:d1:af:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 26 12:00:00 2023 GMT
Not After : Jul 29 04:00:00 2024 GMT
Subject: CN=21fb94c3-229c-4af5-a167-b939af2403aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:94:5b:69:09:18:98:1b:80:9a:29:67:77:
12:d4:34:0f:29:a7:17:19:d0:63:b5:52:36:c9:49:
12:1c:c9:5c:a7:cc:c9:60:a5:ff:45:d2:62:d4:d4:
74:cd:5d:cf:d4:92:14:10:01:d5:09:b4:b1:ae:fa:
7c:95:c0:d9:02:a8:b3:29:dd:78:a8:21:c0:8a:7c:
76:20:b3:d2:df:e1:ff:c6:52:3b:8f:90:d6:3b:f8:
08:af:e6:d8:29:a5:2d:05:f1:cc:a1:74:f5:b1:59:
02:42:c9:ab:5a:40:e9:a4:87:f7:91:36:19:c4:bf:
ec:c2:b4:0e:55:19:38:16:8f:2a:29:95:75:2b:92:
3d:60:5e:9d:26:24:e1:a1:32:ae:95:16:1a:f5:4a:
6c:eb:70:77:01:da:85:4c:db:8e:63:8b:a8:e6:5b:
2e:12:bd:60:ed:7d:4b:f8:be:0e:d0:82:28:2d:9c:
28:9a:b7:7d:28:d4:ff:3c:6a:17:fd:68:72:03:d5:
6b:51:50:24:c6:bd:91:1c:4b:89:f7:c7:77:c1:f4:
4d:6b:0a:77:c5:68:03:13:30:87:3d:27:c0:e4:e4:
c6:a7:70:73:bc:df:da:dc:be:f4:e0:e6:93:b6:a5:
27:cc:8b:f0:5d:59:28:ea:dc:40:a3:e5:07:28:16:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:48:7E:F1:94:8C:05:09:4B:C4:4C:73:73:F5:AE:73:45:15:ED:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/92de2721-f6e9-3c84-827e-5ab8b80eb8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4864::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:40:3c:bd:12:2c:c6:c6:05:59:1c:67:61:7a:f7:c8:84:03:
7a:7c:d1:44:61:55:f7:e6:eb:b2:83:93:80:fe:a9:6f:2b:70:
f4:64:23:d8:07:d0:0b:f9:a6:13:df:9d:08:54:9a:68:30:9a:
80:5b:90:62:53:7d:de:24:0c:3e:83:6c:0f:0c:84:0f:ab:90:
19:81:db:f4:94:29:b8:67:5d:25:7e:40:6c:0e:ed:ae:da:28:
5c:84:2b:a3:8d:91:9c:04:92:a3:b7:6b:1b:d2:9f:6e:22:89:
4e:68:fe:bc:c8:eb:af:1d:aa:34:84:19:3e:36:44:25:4c:be:
05:ca:0a:ae:80:a1:a4:60:53:53:48:d3:92:87:80:2b:d9:f1:
b0:45:4a:4d:9f:32:0e:0b:5b:32:dc:49:36:c9:57:de:51:3f:
76:7b:17:99:33:a1:33:61:2d:9b:2a:06:99:df:e2:94:c4:c2:
17:b3:28:54:79:5a:56:de:55:e4:52:e3:0a:f9:d4:db:0a:c8:
ce:73:4e:0c:bb:e1:e8:2f:17:69:05:8b:21:36:dc:2e:ce:64:
a0:f6:99:38:a7:cd:dd:0d:b5:05:18:d0:53:5c:a9:47:3c:5f:
1c:66:6f:cd:cb:b6:35:ee:6b:32:e5:c2:b2:54:fd:f7:be:52:
89:b0:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org