Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c3701f77-df4f-39ba-a7c1-1438988ffdd1.roa
File: c3701f77-df4f-39ba-a7c1-1438988ffdd1.roa (raw, json)
Hash identifier: ER/FLO3WZ2VQwVDyEUGZGBysHfQwORuFirXMzmTM5Jg=
Subject key identifier: 02:05:0F:CC:06:0D:2A:3A:BA:CA:56:B6:04:59:45:54:12:63:F5:8D
Certificate issuer: /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial: 010D0C9F43285844C0C71FC763692FEB8E64F300
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c3701f77-df4f-39ba-a7c1-1438988ffdd1.roa
Signing time: Fri 02 Feb 2024 02:15:33 +0000
ROA not before: Fri 02 Feb 2024 02:15:33 +0000
ROA not after: Thu 02 May 2024 01:15:33 +0000
asID: 16509
IP address blocks: 2607:28c0:f0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 02 Feb 2024 15:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c0:c7:1f:c7:63:69:2f:eb:8e:64:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Validity
Not Before: Feb 2 02:15:33 2024 GMT
Not After : May 2 01:15:33 2024 GMT
Subject: CN=65fc5784-ae8c-4dcb-af99-39d69473d432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:e0:04:67:15:5c:90:7b:40:65:02:28:d8:
85:1c:8f:7c:be:67:fa:ac:80:0f:47:ff:14:d3:72:
60:f4:0d:b5:4c:83:94:5d:9f:40:18:b1:ab:3e:92:
bc:c0:a0:f6:4e:d3:f7:80:4c:37:62:29:3c:ed:88:
b2:f1:f4:48:59:98:1a:2c:14:31:90:82:0b:43:4b:
cc:a3:35:64:49:de:4f:85:94:aa:06:06:3f:84:40:
b8:ae:91:56:f8:a9:65:c4:b7:cd:71:6c:8a:b7:52:
90:3c:5e:03:60:d8:13:e6:9a:e3:d6:69:b9:7c:f3:
80:ef:9d:85:dc:40:9f:b4:af:4e:97:5f:bf:99:5a:
11:6b:e2:50:2c:56:4a:8e:9a:24:b5:93:e2:97:75:
89:79:0c:93:35:a4:31:ee:2c:7c:3e:06:cb:e7:a6:
34:91:a2:b7:25:b7:85:91:a1:19:4a:63:a0:03:30:
95:37:ea:0c:d3:f2:a3:8f:b8:de:10:8e:51:5b:9f:
28:4d:65:92:26:b4:e0:0a:d8:b9:e4:48:56:28:18:
0e:22:3a:db:cc:f2:95:4d:22:cd:97:ad:49:c7:e2:
e1:a5:62:a5:3d:f9:d1:9b:a3:e7:80:a9:79:d9:3e:
90:58:71:23:51:27:a0:aa:d1:fa:3d:dd:f4:d4:49:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:0F:CC:06:0D:2A:3A:BA:CA:56:B6:04:59:45:54:12:63:F5:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c3701f77-df4f-39ba-a7c1-1438988ffdd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl
X509v3 Authority Key Identifier:
keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:28c0:f0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:de:61:cf:5f:3c:5d:2e:84:9a:71:b8:4f:91:e2:f0:e2:90:
f7:02:6b:85:6c:03:73:60:2f:c5:45:79:b5:09:ce:c7:ba:dc:
9b:91:d4:be:59:d5:fc:8c:14:c9:05:89:4e:a4:0d:e0:3d:a3:
61:06:fd:d8:54:04:66:2a:7c:58:52:f5:65:07:63:59:97:e8:
05:dc:8e:3a:37:45:3e:77:13:f8:b9:86:a6:e0:f7:d0:24:80:
f6:bd:5e:a1:27:ef:cd:c0:11:36:1a:3b:63:9a:98:8c:9a:23:
e2:a1:ce:f6:8d:12:59:2b:0b:06:4f:41:f6:81:e2:44:bf:e1:
ae:04:f7:52:a7:0a:c3:29:59:7f:a4:8a:8b:59:72:0a:53:5c:
34:8d:36:40:d0:76:c9:4f:2f:de:60:12:52:c3:f3:48:cd:c2:
27:63:49:97:fe:a7:0a:96:d4:90:e2:11:3e:a9:08:95:ed:f9:
c9:d9:53:17:b4:bb:ec:e5:f7:90:14:cf:8a:ec:46:7d:3f:2f:
9b:0c:6a:83:e9:b8:64:e1:80:1c:69:1d:99:68:9f:44:62:ac:
0e:bb:96:bd:e1:a1:65:1d:3d:98:34:e8:89:3b:b6:c0:7a:35:
03:9c:55:12:fc:2d:80:0f:d8:3f:c9:b8:39:61:39:fe:f3:15:
c1:7a:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:33:29 2024 by rpki-client on console-fra.rpki-client.org