Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/0fec7035-c5ca-3bb4-9899-e1424bf03db4.roa
File: 0fec7035-c5ca-3bb4-9899-e1424bf03db4.roa (raw, json)
Hash identifier: X/s4kKmrT0S9r5RH4eRisRnEoG+LppCj8z3ZDbUAhGI=
Subject key identifier: E5:FD:04:DB:95:1F:6A:4C:69:9A:F2:E0:36:2D:FD:10:49:5D:E1:38
Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial: 010D0C9F43285843A5456A6C3896783260DB0A80
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/0fec7035-c5ca-3bb4-9899-e1424bf03db4.roa
Signing time: Mon 23 Oct 2023 13:00:21 +0000
ROA not before: Mon 23 Oct 2023 13:00:21 +0000
ROA not after: Sun 21 Jan 2024 14:00:21 +0000
asID: 2496
IP address blocks: 2001:49d0:8500::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:a5:45:6a:6c:38:96:78:32:60:db:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Validity
Not Before: Oct 23 13:00:21 2023 GMT
Not After : Jan 21 14:00:21 2024 GMT
Subject: CN=98ba983a-6ffa-4a8b-b20f-d04d05fdbf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:b4:d8:9d:f5:3e:90:7a:0e:2c:a2:cf:fc:
20:0d:e1:e1:33:76:23:f4:5f:68:b0:4d:40:9a:a4:
e6:71:65:19:e7:c8:4d:06:dc:02:70:97:fe:10:d4:
fd:5e:9c:12:ec:2b:a3:bb:58:6f:3b:b9:13:41:18:
32:64:0d:f6:c5:14:69:56:1c:55:99:50:2d:7c:f3:
32:3f:2e:ed:ae:54:7a:60:27:52:91:91:ff:98:8f:
16:1c:30:5a:28:92:63:c2:00:76:6d:1f:91:92:56:
2d:7c:f6:38:13:56:f2:5d:c6:f4:e4:9f:1e:44:26:
2e:42:cc:e8:21:e3:70:e0:eb:e8:2e:46:b7:0f:d1:
2c:a0:1e:89:7f:9a:48:d3:95:12:0f:99:10:1b:5a:
84:44:43:0e:18:db:a9:e3:6d:f5:af:04:b9:a8:4c:
d7:2e:10:be:aa:48:5b:21:97:fb:d6:44:ef:9b:87:
96:34:b1:44:b7:2d:76:39:ee:ba:dc:a4:61:33:92:
48:5b:5d:17:fa:3f:85:cc:a4:6d:ca:6d:db:23:22:
f4:05:88:e2:85:8c:82:d2:55:d1:53:2d:72:a2:c0:
96:fb:4e:74:b5:5a:2d:e6:03:ae:09:a5:7f:ac:ac:
05:7b:cc:5e:6c:e0:81:36:02:00:43:01:07:95:d4:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FD:04:DB:95:1F:6A:4C:69:9A:F2:E0:36:2D:FD:10:49:5D:E1:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/0fec7035-c5ca-3bb4-9899-e1424bf03db4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
X509v3 Authority Key Identifier:
keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:49d0:8500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:89:f7:45:32:ca:43:0b:42:56:0b:55:b9:3f:08:a8:ac:ac:
a3:13:3d:61:2f:ff:d2:20:2d:49:e6:ef:b3:3c:d0:d3:84:b3:
67:1c:ec:cd:49:19:1e:d0:33:94:d6:27:ba:54:1a:15:0f:b0:
37:f2:e6:14:a7:fa:7d:6c:9b:d0:79:00:66:53:9c:ee:df:bc:
f6:0a:07:34:eb:91:c7:19:a7:aa:64:78:82:a2:5a:41:91:40:
4f:a6:a8:cd:94:90:c9:b1:bd:39:4f:e9:52:3c:dc:c6:6e:5d:
bd:89:f3:69:53:77:56:8a:28:b8:78:a7:f3:1f:cd:93:c5:0c:
e6:d0:6f:1c:1c:b6:c6:e7:29:fc:83:18:42:12:cb:7f:5f:89:
64:bf:57:42:7e:f2:a9:d4:53:39:53:9a:2d:0a:f3:7b:3f:82:
94:fa:4d:df:cb:c2:bc:41:79:86:9b:63:5f:b8:46:fd:b4:2b:
e8:50:39:9d:15:8b:c5:90:a2:d2:3a:f6:14:17:81:f7:cf:23:
1d:8d:09:87:6a:f5:99:46:55:e7:ba:a9:b9:45:f3:a8:f8:9d:
c0:21:c6:6a:e0:38:db:ef:78:05:50:7c:16:2f:cc:40:10:0a:
e1:e7:0a:0e:ca:f2:7d:e7:31:3b:ef:9d:4c:b0:18:9d:d8:c2:
2c:89:83:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 17:58:15 2023 by rpki-client on console-fra.rpki-client.org