Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa
File: 4fd6c997-d93b-3cbd-a718-bd53e7401577.roa (raw, json)
Hash identifier: LkTs8QBsMP3PEcqH48P6ZHE4Q4DHzudUOkna9ODTcHI=
Subject key identifier: 69:C0:B5:47:68:12:84:BE:C1:97:C4:9F:91:8E:94:55:9F:0C:C6:68
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9AFCBA17FDAF012C42C280
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 209242
IP address blocks: 2607:8940:3fd0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 16 Jan 2025 02:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:fc:ba:17:fd:af:01:2c:42:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=07ac90bc-c5e8-48b4-991e-6e6455e3139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:24:1d:cb:0f:d6:78:67:aa:c8:93:d4:7d:
db:1c:f2:77:25:3d:01:8c:90:3f:fe:25:ac:f0:c3:
d0:16:18:f0:7a:5f:f8:91:14:da:cb:11:d1:bd:a5:
c0:50:15:af:1d:ae:be:72:96:a5:01:b8:04:8c:7f:
94:51:83:9f:41:a8:8e:a3:18:0f:63:8f:25:60:36:
a8:ee:c1:00:5e:87:30:87:66:c1:a9:9b:e2:8b:5b:
4a:1b:cc:1f:30:60:63:20:e9:f1:d7:28:02:dc:23:
91:52:6d:9e:84:b0:2c:2a:b2:21:57:5b:71:b3:78:
cb:e1:c7:23:21:bb:0b:d1:f9:68:8f:86:f1:8f:37:
7d:d7:8e:0a:5d:f7:fc:3b:44:3c:59:8a:2d:20:e2:
89:34:fc:2f:5c:30:1a:38:cc:27:a6:32:56:7b:fd:
58:a7:e0:ac:2e:60:08:6d:32:26:49:77:ca:88:61:
1a:8d:d9:bd:d0:80:c6:7f:ca:ff:18:c2:03:62:e5:
d8:f3:88:a1:aa:dc:1c:ad:7a:d1:3a:47:46:bf:ff:
a7:80:06:ce:9d:ee:03:e0:fc:2b:94:e8:e4:f1:53:
8a:27:b0:a1:b0:08:11:52:05:a0:7a:c0:d1:2b:fd:
ec:d0:78:13:4b:dc:b3:fc:38:fb:09:59:20:98:5e:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C0:B5:47:68:12:84:BE:C1:97:C4:9F:91:8E:94:55:9F:0C:C6:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4fd6c997-d93b-3cbd-a718-bd53e7401577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3fd0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:1c:94:c7:28:0f:12:54:33:1d:a2:18:ab:b0:08:4d:03:70:
9c:f8:3e:43:75:3f:c4:25:b6:f6:eb:31:d9:ae:4b:aa:5a:6d:
6c:ae:57:6e:d6:64:48:70:da:5d:4a:98:e3:7b:db:37:58:40:
b1:0a:b0:da:68:07:84:03:63:c9:9b:5d:16:67:54:72:83:e9:
06:a0:86:e6:d3:e3:e4:6c:15:7c:19:6b:98:85:02:39:ac:56:
0d:fd:11:8c:1b:04:bb:30:da:9a:92:2f:6b:d5:b7:bd:6e:a5:
cc:0d:60:29:4c:01:c0:72:25:1b:4d:3b:59:95:25:30:1e:79:
da:e0:38:a6:0a:47:b7:4c:e6:80:09:85:77:55:8b:ac:b7:32:
88:ed:27:da:bc:ba:a8:e0:ba:76:c1:20:6d:90:6b:00:f1:e9:
9a:0c:9e:94:f6:bc:2e:15:d0:e5:63:f8:c9:b1:65:b8:7c:5e:
7f:01:9c:d1:1c:03:f4:c2:cf:26:0e:89:5f:4b:d6:4c:9c:b5:
e9:fa:74:00:9d:84:0b:bc:49:2c:78:3f:7e:f2:4a:69:89:ad:
22:82:5f:3d:b8:f4:bf:ea:68:f0:b1:b7:bf:f1:78:34:82:f0:
11:b3:81:aa:e5:7f:51:d9:21:ab:fa:7c:9e:4c:b5:e5:b3:88:
49:4b:13:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:08 2025 by rpki-client