Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa
File: 7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa (raw, json)
Hash identifier: QpApwatSmW1/Mq+efB/7IfvBvfzbmOtZUlT3OmffLy4=
Subject key identifier: B8:71:84:AD:79:0C:57:33:75:4E:64:7A:11:91:F2:13:DC:3D:8F:49
Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial: 010D0C9F43285846A0CF8392EC6E77B24DEA23C0
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa
Signing time: Tue 23 Jul 2024 01:00:26 +0000
ROA not before: Tue 23 Jul 2024 01:00:26 +0000
ROA not after: Mon 21 Oct 2024 01:00:26 +0000
asID: 13627
IP address blocks: 2602:fba3:402::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 11 Aug 2024 15:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:a0:cf:83:92:ec:6e:77:b2:4d:ea:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Validity
Not Before: Jul 23 01:00:26 2024 GMT
Not After : Oct 21 01:00:26 2024 GMT
Subject: CN=7717342b-bd57-4fdd-917a-a8a30f725f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:82:c0:e9:d2:e5:5c:4d:14:d6:c1:cf:6a:
7c:23:e3:c9:18:b8:3b:14:c7:3e:73:86:71:24:a7:
f0:0a:68:5f:42:0b:f0:c2:d2:6b:be:c1:eb:9e:f0:
72:18:f7:69:ac:eb:81:a3:08:d3:2f:49:2f:e2:b0:
2b:c0:7f:7e:dd:79:f3:9f:96:19:ca:11:1e:0a:a6:
40:52:a5:73:ba:a6:fa:5f:20:a6:fe:f2:66:57:60:
3b:4a:fb:b5:ef:6c:26:e3:02:90:25:63:6e:a3:67:
c2:fd:8c:f4:18:6f:f8:3f:7c:97:ab:07:d4:4d:98:
56:ab:11:aa:33:a1:b8:50:96:c3:22:eb:18:a6:27:
72:71:ab:3e:a9:b2:61:fb:5c:cd:5b:ac:72:ce:e0:
7d:55:3b:bd:ab:87:f0:dc:c7:4d:37:44:d5:6b:40:
c4:32:34:75:63:52:1c:db:83:d8:6d:67:2e:cd:53:
f5:58:a4:1b:0a:91:9e:52:67:b4:7b:1f:f2:04:d5:
f5:59:e4:df:7a:5e:48:d5:42:4f:35:5f:ff:9b:32:
70:9c:1c:f3:85:bd:fe:a3:c7:94:37:cf:d7:d5:c6:
c4:dc:3b:95:4d:bf:53:7c:df:e1:b7:33:a6:34:23:
3f:e8:a6:9a:3f:f3:7c:91:de:32:2b:08:25:70:2e:
7a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:84:AD:79:0C:57:33:75:4E:64:7A:11:91:F2:13:DC:3D:8F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/7177e3d2-c014-3d45-b0bf-e13884e6e7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
X509v3 Authority Key Identifier:
keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fba3:402::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:85:10:c2:06:b3:d9:2c:2c:ea:5e:e4:ae:41:ea:4d:56:5c:
6b:ec:ad:fe:6b:25:36:ac:7c:63:81:6b:38:38:1c:e9:df:3f:
eb:74:4c:c9:ce:6b:86:5a:7c:b4:b7:8f:f3:d7:54:58:82:13:
99:8e:03:e5:e1:a1:25:e7:54:2c:f7:52:78:bb:5b:48:e1:4e:
82:0c:fa:bc:ff:8b:7e:27:e5:38:13:b9:bd:a1:11:5c:28:b8:
03:8a:19:5a:2f:37:6d:8c:1c:82:1d:c5:58:bb:40:b6:9c:8a:
82:cb:95:31:2a:89:da:59:0d:08:1b:d9:5e:1b:19:c2:29:dd:
69:a0:08:10:ef:28:aa:2a:db:0c:ee:4b:55:f2:ac:c6:b6:47:
31:d8:93:6e:b5:cf:0a:d5:ab:e1:57:56:43:9c:49:11:d6:39:
ad:ad:7a:fe:40:db:82:56:1f:15:4f:d4:ab:54:eb:e9:47:ba:
40:6f:cc:e4:e2:53:a9:bb:03:e8:40:3f:c8:e1:cc:3e:cc:a8:
d3:69:55:15:83:df:f2:e9:85:85:9b:e8:18:e5:a6:aa:01:8c:
15:77:cd:49:2e:fc:dc:76:28:fa:8e:a8:de:d0:e3:86:8b:0c:
36:df:6d:1b:03:58:77:28:db:6f:98:6f:ad:f6:4a:54:8d:90:
6b:93:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org