Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7c467c6-1add-305a-b59c-404a4e483a4a.roa
File: c7c467c6-1add-305a-b59c-404a4e483a4a.roa (raw, json)
Hash identifier: Fb8H1sys67v5j1wQLo4i0rVrpbG9EljoJy412H6DV1w=
Subject key identifier: D1:F8:AE:5C:75:DE:61:4E:54:55:80:3E:AA:02:2F:7E:B2:8C:02:48
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858428197D845BF6017F9F0D149C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7c467c6-1add-305a-b59c-404a4e483a4a.roa
Signing time: Sun 09 Jul 2023 12:00:00 +0000
ROA not before: Sun 09 Jul 2023 12:00:00 +0000
ROA not after: Wed 10 Jan 2024 05:00:00 +0000
asID: 56554
IP address blocks: 2001:470:112::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:81:97:d8:45:bf:60:17:f9:f0:d1:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jul 9 12:00:00 2023 GMT
Not After : Jan 10 05:00:00 2024 GMT
Subject: CN=5d3a08f1-cd6d-4ec2-80f7-a84a6b9ba296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:82:fc:3f:4c:6d:4f:76:b4:ab:45:f5:1f:
df:7a:17:16:69:ea:c3:55:06:58:de:06:29:dd:cc:
64:da:28:e6:aa:be:2f:1d:81:93:81:73:d0:25:d8:
99:83:51:58:35:2f:e3:f0:46:96:3e:96:ce:45:45:
e2:3d:e7:74:38:2b:3a:4d:ca:14:0d:09:a3:f1:e4:
77:24:ba:74:c7:5e:1d:dd:dc:cf:36:a0:a7:ec:3a:
55:42:a8:0c:12:c4:86:9e:01:8e:22:29:2c:7a:dd:
cd:b8:ca:14:46:27:fa:18:20:47:67:54:d6:15:d9:
48:ee:5f:5e:65:3a:0d:99:80:d8:10:b0:df:58:32:
85:d4:b4:ef:6f:7f:b0:1c:ce:5a:b6:73:f1:5d:81:
d7:12:2c:cb:86:40:78:3e:6b:50:78:f0:fd:07:24:
11:3f:8d:d4:33:79:2e:db:6f:71:03:ec:84:dd:30:
83:f9:2e:1a:04:16:15:73:07:10:94:ed:d2:2f:e1:
73:66:91:5f:b8:1e:96:bb:c1:d5:70:da:d6:76:ef:
fc:e5:82:94:b2:90:6b:ac:41:38:25:c0:c6:f3:c6:
2f:72:f7:74:fb:7b:d6:3c:fa:01:03:47:03:2f:9e:
5f:6f:40:b6:cf:c0:3f:4b:16:09:fd:28:26:a2:73:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F8:AE:5C:75:DE:61:4E:54:55:80:3E:AA:02:2F:7E:B2:8C:02:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7c467c6-1add-305a-b59c-404a4e483a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:112::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:e1:1b:ff:4b:db:dd:9f:3d:c2:c4:13:22:9a:e8:1c:28:c8:
d4:bc:7f:86:73:ae:f2:c6:a5:10:37:fd:55:df:db:d2:2c:5b:
29:64:c9:3a:76:c2:8a:19:91:44:96:da:fc:e2:e0:c8:19:06:
30:a7:aa:2c:21:3d:31:2f:52:87:d1:02:63:0b:19:c4:f1:7f:
ca:8d:ad:a1:17:1a:9a:2f:3f:82:02:95:29:a5:73:43:53:15:
b9:1c:2c:3d:99:0b:3c:f0:65:51:5b:f4:65:dd:8f:bc:e8:cb:
c3:87:cf:f7:f4:32:12:7f:3f:e1:8d:cc:8c:7d:ff:fb:3f:a8:
be:4d:90:44:cd:7e:11:7a:8a:e0:37:db:25:a2:4c:a0:c2:21:
44:fa:97:bb:08:e7:a9:96:6e:10:3b:10:ff:35:40:ad:2c:22:
4d:b5:2d:cd:6b:94:b8:49:90:7f:e6:c2:5b:b6:06:c0:62:d9:
f8:af:93:ee:b5:33:1f:cd:18:ed:6b:7f:6c:c2:ce:3f:20:ef:
72:52:19:d7:ea:8e:33:10:ed:27:d2:22:87:cc:45:07:d5:2e:
9e:c6:a0:88:a5:59:e1:b6:4f:3b:b0:18:6d:67:bd:c7:cb:63:
d9:5b:21:da:fd:03:14:ce:fd:d2:de:57:57:3c:40:ed:76:34:
87:2f:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 19:25:01 2023 by rpki-client on console-ams.rpki-client.org