Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1697170-166f-34df-8012-3d91c34ad1b5.roa
File: f1697170-166f-34df-8012-3d91c34ad1b5.roa (raw, json)
Hash identifier: FGoxuYa9yJhoFCZnc5KKIK4cXYG+7biPQz7jvXqUTHs=
Subject key identifier: 34:50:02:8D:E7:BF:FE:2F:B3:BB:92:0D:92:09:E7:07:85:18:B4:42
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F432858485F9AEF9F87410AF4303F3358
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1697170-166f-34df-8012-3d91c34ad1b5.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 209242
IP address blocks: 2607:8940:3f60::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 16 Jan 2025 02:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:ef:9f:87:41:0a:f4:30:3f:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=8fb4d702-6541-45b5-848b-f9ac485c771a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:78:f9:fb:13:e5:f2:eb:53:13:f8:ab:40:b5:
a3:47:28:8f:a7:c4:13:55:6a:64:56:d9:12:24:0f:
46:80:82:c2:37:6a:8b:20:4e:06:8a:cb:71:f1:c3:
eb:3d:5b:73:2d:37:d6:a7:4f:56:ec:7e:be:66:f8:
38:30:72:e0:af:cf:13:be:90:85:5f:50:0f:4b:0d:
3e:b1:e0:c3:46:f6:38:46:4d:05:dc:aa:da:c6:39:
65:06:5f:f1:5f:90:7e:b6:75:54:73:15:d2:24:cc:
a4:a1:08:6f:2c:06:95:5b:96:da:6c:49:d9:fb:70:
4e:4d:e9:e0:8e:77:cc:99:60:d9:b1:db:f6:6c:13:
7b:4a:7f:ef:24:5d:26:99:a4:6b:50:c1:4a:c7:29:
ed:c9:3b:1e:d0:d6:01:27:35:45:a1:03:ad:f7:27:
90:75:4d:6d:3b:ee:49:d8:f6:6e:80:aa:f5:84:7b:
03:44:f4:c9:79:f7:0a:9d:e0:4a:40:d0:c3:d8:54:
f5:1d:6d:09:98:ac:3f:d4:e5:0d:28:eb:8f:dd:fb:
d1:d3:19:7b:01:66:70:11:35:a3:fe:b7:95:52:86:
e8:b6:1a:25:6f:8e:d0:37:0e:38:c5:0c:f2:52:7f:
5e:d1:82:75:f6:32:cb:64:f3:03:02:30:1b:f1:94:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:50:02:8D:E7:BF:FE:2F:B3:BB:92:0D:92:09:E7:07:85:18:B4:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f1697170-166f-34df-8012-3d91c34ad1b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:8940:3f60::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:e1:a4:83:ae:7b:fa:2c:05:79:b3:bb:04:91:61:4d:87:53:
45:67:fa:78:74:c2:76:40:28:e5:4f:86:a5:c8:e7:94:80:ed:
cd:22:8f:9c:cd:3a:33:2c:0c:f1:e5:6f:87:7f:20:ba:58:fd:
dc:5c:c1:c9:6f:0e:0a:0d:b2:88:ee:37:46:1d:eb:ea:1e:54:
69:00:bd:86:55:54:00:12:31:69:84:cd:24:e9:a7:58:f8:b3:
73:2b:73:eb:f9:55:35:c1:71:97:84:95:45:72:33:d8:3b:2c:
0c:fa:1b:a2:62:dc:39:29:3d:22:30:f7:ec:6a:5c:4f:01:e6:
47:f3:08:de:f4:a4:f6:c2:80:c9:5f:a1:02:55:34:f8:ec:56:
a8:12:65:1b:90:78:29:b5:a0:9e:84:4a:46:f6:5a:d0:99:f0:
a6:2d:37:92:a2:56:ea:0e:82:0e:cf:ae:e9:e6:fc:80:8e:95:
d6:54:f5:be:41:d4:b5:6c:04:2d:17:16:17:b6:ff:b3:fe:ae:
57:57:d1:d4:19:2f:2f:e3:7b:06:f2:72:29:b8:74:19:ad:2f:
c7:f7:c9:47:5f:c5:4a:96:1e:fa:b5:7c:fc:94:b0:4a:eb:b2:
99:57:e2:5e:00:85:05:61:31:0b:8e:1c:53:3a:61:ee:e8:ad:
d5:4b:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:07 2025 by rpki-client