Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/9498ee98-328b-3241-b757-1e9874f372f5.roa
File: 9498ee98-328b-3241-b757-1e9874f372f5.roa (raw, json)
Hash identifier: uSan6Ibbd1/e9dDSSpm1vG/+mB38ycpZlzUzHcwFBGM=
Subject key identifier: B7:6F:55:C2:91:67:9C:60:98:6E:45:97:1B:30:90:77:32:E3:B2:8F
Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c
Certificate serial: 010D0C9F432858475910C37AB177B5E2FD22D180
Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/9498ee98-328b-3241-b757-1e9874f372f5.roa
Signing time: Fri 27 Sep 2024 01:00:31 +0000
ROA not before: Fri 27 Sep 2024 01:00:31 +0000
ROA not after: Thu 26 Dec 2024 02:00:31 +0000
asID: 25819
IP address blocks: 23.181.112.0/24 maxlen: 24
2602:fc6d::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 18 Nov 2024 22:21:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:59:10:c3:7a:b1:77:b5:e2:fd:22:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c
Validity
Not Before: Sep 27 01:00:31 2024 GMT
Not After : Dec 26 02:00:31 2024 GMT
Subject: CN=0c72aa61-21da-4247-87ff-6ebf52f90c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:83:ce:ee:cc:31:4e:05:a9:9b:fc:2e:fa:
ca:7d:80:48:0e:e3:d8:2e:87:7b:13:30:6a:25:69:
da:54:44:3a:97:7a:05:f1:e7:c1:60:8e:aa:e7:46:
94:90:55:da:b2:df:4b:6f:bc:ea:94:86:6e:d8:a5:
cf:b4:25:0e:b9:a5:2a:92:90:cd:db:b5:19:05:49:
40:d2:97:7a:87:88:cd:ec:b8:7e:46:c5:09:3d:ab:
4e:2b:9b:90:47:a8:cf:f3:09:e2:7e:a4:60:fe:b1:
4e:21:9a:27:3a:25:d5:0d:79:66:0b:9d:28:4d:3c:
ee:d8:05:c1:9f:f8:9d:bb:2b:45:0f:72:10:92:46:
e6:64:03:b5:37:00:1c:78:f6:5f:ad:31:0d:7b:2e:
b1:24:09:55:a9:6a:b5:63:12:07:14:7d:1e:15:c6:
72:b8:83:48:c3:1e:c0:92:4a:85:b6:c1:b1:92:25:
f4:4d:8d:10:97:35:25:37:ef:35:28:25:62:6d:cc:
f0:e7:ab:2c:1c:53:88:7e:c6:72:36:88:a3:32:53:
44:88:d9:ca:45:4a:c9:d2:85:63:74:b3:36:a1:91:
e2:f1:69:fd:3b:56:c4:8a:89:fb:00:bc:97:41:d8:
1f:ad:08:4d:8a:ea:f8:af:fa:af:92:68:6b:54:f0:
48:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:55:C2:91:67:9C:60:98:6E:45:97:1B:30:90:77:32:E3:B2:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/9498ee98-328b-3241-b757-1e9874f372f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl
X509v3 Authority Key Identifier:
keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.112.0/24
IPv6:
2602:fc6d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:75:34:8b:31:74:6a:4a:88:33:44:16:2a:e3:7d:d7:95:21:
50:7a:5d:1a:e1:ec:30:69:63:50:6a:96:65:b5:c0:01:04:b3:
98:59:90:18:5d:6a:7f:16:4f:99:95:0a:9b:f6:73:c6:78:b5:
91:2b:59:f3:36:4b:ca:90:47:f8:5d:13:e0:10:98:d5:58:4c:
44:2f:79:7d:45:e2:19:63:45:5a:10:7e:bf:e7:66:19:54:79:
ee:1a:d8:7a:78:ba:a9:e1:26:d1:66:58:fa:e6:cd:7c:26:85:
dd:55:be:95:2a:45:05:61:fe:b7:27:68:56:a6:ad:e5:be:0e:
b7:2c:48:c6:34:b3:20:e1:16:0a:7b:49:88:5d:ff:69:fb:f4:
c4:5e:25:b7:9f:b1:8b:db:a9:d7:d2:cd:97:bf:f1:99:58:8a:
a8:2f:c4:4f:53:ba:88:42:a9:06:f9:97:80:e0:33:ac:2b:6b:
90:b0:e3:dd:c7:e8:f9:1e:83:ad:11:0f:86:5f:45:91:a1:12:
b0:f9:60:fe:73:4f:3c:e2:3d:1a:af:55:ed:1f:ce:67:a8:2a:
25:d0:31:b3:0a:8d:af:64:f5:84:43:01:28:01:d8:95:79:73:
a5:70:2d:b3:cb:2b:aa:27:e6:9e:02:02:d4:cd:cb:74:c8:0e:
c7:72:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 00:19:23 2024 by rpki-client on console-ams.rpki-client.org