Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/5ba1ff3f-0f60-33e7-b1f3-62dd75413b31.roa
File: 5ba1ff3f-0f60-33e7-b1f3-62dd75413b31.roa (raw, json)
Hash identifier: D/6ZpbofdZkk11dpCw9w9kRN8M9kijFvhboHuxnWeao=
Subject key identifier: 15:C9:48:78:FC:69:75:C4:36:D7:19:0C:71:3E:42:F4:0E:50:5B:2F
Certificate issuer: /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial: 010D0C9F43285843D12F535FC7AADDF4D22BC9C0
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/5ba1ff3f-0f60-33e7-b1f3-62dd75413b31.roa
Signing time: Wed 08 Nov 2023 06:31:30 +0000
ROA not before: Wed 08 Nov 2023 06:31:30 +0000
ROA not after: Tue 06 Feb 2024 06:31:30 +0000
asID: 393577
IP address blocks: 2602:291:1::/48 maxlen: 48
2602:291:66::/48 maxlen: 48
2602:291:69::/48 maxlen: 48
2602:291:77::/48 maxlen: 48
2602:291:99::/48 maxlen: 48
2602:291:ca::/48 maxlen: 48
2602:291:ee::/47 maxlen: 47
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d1:2f:53:5f:c7:aa:dd:f4:d2:2b:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Validity
Not Before: Nov 8 06:31:30 2023 GMT
Not After : Feb 6 06:31:30 2024 GMT
Subject: CN=008c3259-b278-40d1-9b1a-a3e63c5b98f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:c7:34:76:22:8e:5c:2c:9b:e2:93:55:94:
90:a7:c9:ae:23:ae:0e:f3:f9:4b:37:c8:d1:ce:bd:
2e:2b:27:48:cc:af:88:88:30:6e:9c:c8:22:d3:ed:
9d:f9:fe:e9:02:77:fe:08:8a:cb:b0:84:27:6f:e7:
24:ee:e2:9b:7f:a0:66:92:12:4e:03:44:7f:ab:c3:
91:ca:2b:75:e6:e3:28:05:a1:ea:21:7e:e0:9c:62:
92:22:dd:ef:4d:5c:34:c6:2a:9e:ef:58:e8:87:3b:
cf:ca:a7:16:48:11:60:96:97:e9:b6:0c:b4:0a:d2:
f4:31:86:5f:19:de:57:da:86:8a:39:3b:b5:24:8c:
e2:91:26:be:b1:ec:7f:a1:d8:d6:a4:5a:bd:55:bc:
82:01:ec:d1:bd:9a:e3:c1:41:59:23:09:1b:be:22:
b2:b4:9a:fc:25:57:62:5a:ed:af:79:2e:6c:d1:f7:
e4:aa:3d:67:1c:24:e1:e3:6e:fb:81:3e:24:08:f6:
14:60:51:49:8d:8b:91:95:ce:87:4f:4c:43:04:0f:
81:3d:22:5a:f0:5e:d1:0c:95:fa:50:37:99:f3:b7:
6a:e7:f9:04:82:ba:66:80:e4:63:e7:a9:09:ea:42:
f1:d2:2e:aa:be:5a:f3:73:e1:3f:dd:eb:4c:4c:be:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:48:78:FC:69:75:C4:36:D7:19:0C:71:3E:42:F4:0E:50:5B:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/5ba1ff3f-0f60-33e7-b1f3-62dd75413b31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl
X509v3 Authority Key Identifier:
keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:291:1::/48
2602:291:66::/48
2602:291:69::/48
2602:291:77::/48
2602:291:99::/48
2602:291:ca::/48
2602:291:ee::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:29:4f:3a:bf:f5:9c:48:f9:8a:57:11:c1:a9:2f:85:5c:e7:
50:e5:4a:53:de:6e:84:10:83:b8:1a:c2:01:6c:bf:b3:79:9f:
62:a5:8b:22:f4:a2:fe:cf:8a:de:4a:09:0a:90:7e:18:32:72:
75:5b:4b:8f:24:25:d3:8e:b8:44:94:25:d6:c6:e9:eb:80:8a:
cc:6e:41:cd:be:6f:45:92:b5:0b:e5:10:65:63:c3:0c:04:27:
9b:76:dc:ce:a1:95:c0:e4:03:aa:b6:1a:72:02:53:9a:bd:cb:
2a:2f:d6:ca:69:fa:be:4f:3c:d7:20:56:76:bc:a8:33:77:ae:
f8:a2:20:d3:23:85:25:6e:d1:d0:fa:22:b7:b3:2c:5e:38:5d:
e2:b7:bc:ca:57:6b:9b:d9:9a:84:24:30:5b:3c:48:ee:12:99:
6e:e1:ba:15:90:d4:96:e5:6b:c9:9f:21:8a:25:5f:82:b0:a2:
d4:67:1a:eb:14:48:60:3e:f0:f5:c9:47:a8:ea:fc:b6:7a:d2:
27:4d:64:b8:7c:0a:d7:de:62:89:ac:68:4d:c8:0a:6f:80:cb:
f4:b9:a2:6b:38:4c:3f:51:a7:e7:46:80:22:0e:52:5c:c2:fe:
ba:74:bc:b7:fb:6d:da:88:4f:e4:35:bb:0d:e4:e3:0e:a8:ef:
d4:fc:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 11:50:08 2023 by rpki-client on console-ams.rpki-client.org