Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e9149e-31ea-3ae3-813b-15d276aab085.roa
File: d9e9149e-31ea-3ae3-813b-15d276aab085.roa (raw, json)
Hash identifier: FeqKnaC5RBlM+E50P/7ig+qTwAaJqXjfSoYyMMgYoIY=
Subject key identifier: 2E:01:C8:8D:FB:DD:95:62:D2:10:C7:E6:57:0D:A7:38:E6:CC:F1:8C
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328576D51CC73C042CFC171E178DECB
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e9149e-31ea-3ae3-813b-15d276aab085.roa
Signing time: Mon 04 May 2020 20:55:27 +0000
ROA not before: Mon 04 May 2020 04:00:00 +0000
ROA not after: Sun 04 May 2025 04:00:00 +0000
asID: 6939
IP address blocks: 2600:7000::/24 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 15:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: May 4 04:00:00 2020 GMT
Not After : May 4 04:00:00 2025 GMT
Subject: CN=c105ef09-880b-4855-b28f-8c4dcb131c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8a:e2:36:01:0e:7d:83:c3:42:28:6b:76:77:
80:dc:88:a9:21:0d:68:a3:37:67:af:47:5b:8f:e4:
ce:2f:8a:b4:db:25:6d:43:45:e8:8b:6f:ed:ca:06:
57:45:62:23:ec:b2:0a:89:6e:1e:df:d9:74:e5:fe:
9b:f6:c7:9c:93:81:31:14:f2:21:15:a0:8f:26:ad:
73:ac:43:06:24:f5:20:91:8f:99:b1:ce:0b:e0:65:
8c:1a:c4:2e:78:50:f6:6c:46:e9:fd:fe:57:e3:12:
99:9b:87:20:e4:6b:27:15:06:6b:06:84:dd:e6:e9:
98:b1:b2:0b:e2:57:cd:f9:b7:ba:a4:cd:9e:b5:7f:
66:af:71:ff:fd:f5:ef:49:fa:db:c1:05:ef:fc:26:
ac:a9:72:15:c8:fa:04:9f:d9:af:bc:86:76:cb:59:
f9:0b:53:d2:e5:d2:ca:e4:ef:28:92:3d:e6:f1:91:
31:8a:28:7e:f4:95:00:11:c6:dd:35:22:5e:4e:11:
8c:c2:dd:a3:3f:ee:16:05:09:2c:1b:1c:27:18:83:
b2:c2:91:d2:ab:13:db:27:96:c3:f7:b7:55:50:eb:
94:db:35:a1:cd:3a:66:79:e5:2a:13:f7:ac:b6:be:
3a:c7:eb:03:21:40:aa:e5:e5:fb:9e:8b:6d:99:1b:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:C8:8D:FB:DD:95:62:D2:10:C7:E6:57:0D:A7:38:E6:CC:F1:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9e9149e-31ea-3ae3-813b-15d276aab085.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:7000::/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e2:09:a7:4b:a1:40:d7:fc:18:9e:7b:ac:95:15:68:aa:2a:
53:c0:ad:44:8a:a3:26:07:66:58:b3:f5:7d:fe:73:d6:f5:40:
35:32:95:03:65:6e:c6:32:e5:ec:c1:18:25:d6:46:ee:7c:54:
08:cd:b9:dd:86:95:51:57:b9:b9:98:dd:6d:6e:68:36:76:15:
f2:24:e1:f9:a0:2d:59:3d:95:de:ea:45:2d:aa:55:c4:e6:94:
ee:60:c4:37:e8:a4:af:c9:d1:19:5c:65:8d:87:5b:8c:76:a1:
28:b5:ac:c9:4d:16:38:0e:55:84:18:f3:61:05:79:bb:dc:0f:
d3:f9:ef:46:5f:3a:05:33:50:f0:3a:e1:76:23:6a:1e:8b:38:
cf:98:47:0d:58:5b:c8:94:2d:92:37:f4:5c:ed:1f:d6:89:26:
91:c7:54:d2:6c:21:21:d5:f8:f6:5f:1c:a0:db:c3:c6:b6:f4:
4b:cd:e0:cf:c0:6e:cc:32:40:76:20:79:21:62:ee:8c:64:dd:
dc:4f:9d:70:94:9d:2a:85:18:2e:88:1c:fa:a8:3f:91:9f:94:
5b:7f:b5:d6:41:c4:ed:2d:28:73:38:f7:d6:eb:af:0c:96:0f:
f6:6f:41:00:90:a0:42:a8:c4:16:6a:f9:fb:49:f4:3f:72:a8:
8c:eb:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 18:16:40 2024 by rpki-client on console-fra.rpki-client.org