Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c20166a4-1392-3b0d-9c73-32f12ecaf4b7.roa
File: c20166a4-1392-3b0d-9c73-32f12ecaf4b7.roa (raw, json)
Hash identifier: KSv7/1e/cfshMU0NxUx2EPMs3YHcEFEXEXD1tvfVbN8=
Subject key identifier: 90:79:22:DA:55:91:CB:02:5E:99:80:CE:36:B4:39:04:F1:D3:D5:98
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285848573AD339D72F89AD839EEB80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c20166a4-1392-3b0d-9c73-32f12ecaf4b7.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 398465
IP address blocks: 2601:2000::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 07 Feb 2025 17:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d3:39:d7:2f:89:ad:83:9e:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=f117d81c-1c21-4a1e-b1e5-a754c855307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:d1:ca:c6:23:4f:21:50:d9:bd:78:a0:27:
e1:1e:c5:06:2c:d1:52:8c:8a:66:d1:06:c7:76:bf:
10:27:8f:04:70:94:8f:9d:65:1a:91:b8:a2:3f:3b:
bb:5a:a9:f9:d4:ed:f4:f5:b3:58:09:d4:64:7a:15:
5f:98:a0:ce:f4:c6:dd:1f:cc:80:88:b7:53:5b:55:
96:60:38:1b:0b:c2:9d:f3:0a:24:1e:7b:d9:71:27:
76:a7:8b:1b:40:1c:fb:d7:bb:7a:6a:97:4f:34:ea:
fd:0d:eb:cb:b8:53:56:66:0e:da:91:af:54:65:87:
59:89:08:9d:ad:eb:dd:55:9d:df:7f:a4:ff:b6:70:
e5:f6:c1:db:83:05:f5:17:c5:ac:55:0b:0f:36:2a:
36:34:28:a8:83:cd:80:10:e3:1b:94:1a:2b:98:ce:
df:1d:58:a4:b1:61:e3:f4:21:64:9f:e2:06:94:81:
d4:ac:dd:6a:ca:39:56:14:9f:b4:8a:3b:a4:ae:93:
45:61:7f:b5:9f:3b:13:9b:f0:52:26:af:5e:a2:83:
3d:c8:9d:4a:f0:7f:13:24:f2:1d:0d:64:34:97:cc:
b0:ff:cc:f1:2f:25:fe:de:df:d2:fb:e7:1b:a0:30:
40:25:4d:68:52:c0:a8:a1:28:d6:50:99:cc:f0:b3:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:79:22:DA:55:91:CB:02:5E:99:80:CE:36:B4:39:04:F1:D3:D5:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c20166a4-1392-3b0d-9c73-32f12ecaf4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:2000::/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:21:c0:dc:e9:aa:69:64:70:ef:7c:2d:2d:69:78:c5:f5:e0:
aa:ab:31:11:1a:17:46:14:6e:8a:b5:19:a5:8b:a7:b9:00:08:
4d:8f:28:39:19:91:b8:3a:36:54:9a:72:d4:27:b0:9a:d3:f3:
09:45:ed:24:d7:62:ab:41:6b:29:ee:61:97:54:2b:ad:69:5b:
81:8a:92:f4:00:e5:9b:13:c8:71:de:94:97:32:e3:5d:75:3d:
ba:45:bb:d9:ae:51:6f:3f:6d:9d:27:32:8c:08:3c:3f:6b:56:
19:49:16:46:b8:61:43:cf:08:ae:41:91:53:91:28:53:e7:08:
67:bf:7d:d0:f5:4a:7e:8c:3a:03:58:2a:af:3c:c6:08:ec:01:
39:8d:41:da:27:42:59:11:29:61:aa:da:67:ed:10:94:42:52:
21:0d:3c:ad:33:1b:f2:09:b0:df:e8:ab:33:db:5d:99:bd:02:
7c:08:b6:8c:e3:91:4f:40:c2:0f:df:53:79:5b:de:95:d1:6b:
e3:44:ed:a3:65:6e:21:d3:a7:1d:a4:97:bf:0a:84:57:e4:12:
b1:c6:79:6f:4a:46:23:c0:8c:2f:c7:6e:ce:d5:80:07:a2:84:
5f:5b:0b:18:10:5a:18:68:8a:1e:af:c5:b0:3a:f0:bb:ea:9e:
2b:76:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:47 2025 by rpki-client