Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/19afc4b5-012b-38d4-9751-4a524d83b6ab.roa
File: 19afc4b5-012b-38d4-9751-4a524d83b6ab.roa (raw, json)
Hash identifier: qP/aB3DZNA0GHtWCqW0fwYIJjTkQODBRUmxHSAEhO+k=
Subject key identifier: 85:D5:05:6F:D1:3D:32:78:C0:DA:C6:23:F9:F1:E1:1B:7B:AE:11:AC
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F43285844580EF0E67535B2917D3D8A00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/19afc4b5-012b-38d4-9751-4a524d83b6ab.roa
Signing time: Tue 26 Dec 2023 14:00:20 +0000
ROA not before: Tue 26 Dec 2023 14:00:20 +0000
ROA not after: Mon 25 Mar 2024 13:00:20 +0000
asID: 11055
IP address blocks: 2605:4a80:ef50::/44 maxlen: 44
2605:4a80:ef60::/44 maxlen: 44
2605:4a80:ef10::/44 maxlen: 44
2605:4a80:ef20::/44 maxlen: 44
2605:4a80:ef30::/44 maxlen: 44
2605:4a80:ef40::/44 maxlen: 44
2605:4a80:ef70::/44 maxlen: 44
2605:4a80:ef00::/40 maxlen: 40
2605:4a80:ef00::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:58:0e:f0:e6:75:35:b2:91:7d:3d:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 26 14:00:20 2023 GMT
Not After : Mar 25 13:00:20 2024 GMT
Subject: CN=097e8689-f77c-4f98-a560-b1019feb5ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:f3:57:bb:55:56:df:c7:92:29:c8:65:59:
af:97:f3:b8:f8:53:21:87:87:41:de:42:55:40:45:
a2:51:a0:f6:70:94:74:0a:8f:0d:15:b2:3a:0c:7b:
e3:bf:32:74:af:7b:66:34:51:c0:bb:e7:12:80:35:
05:ab:94:05:26:68:8b:3e:f7:f5:23:8a:3d:f9:ba:
75:fc:e5:6c:6d:35:56:4e:ca:7b:a1:e1:74:dd:80:
ba:b1:43:71:4b:91:f4:dc:a7:2a:bd:35:3c:0b:fd:
23:13:1e:f8:1e:1d:61:49:4a:87:75:3d:7d:84:34:
cb:7c:77:84:da:8d:59:6b:46:19:b7:3b:4f:9b:88:
79:fc:e3:2c:dc:42:03:ce:88:29:03:c7:3c:ab:74:
b0:ea:c6:9f:e1:68:05:c4:74:97:87:8a:1b:1f:e0:
2d:e7:0e:94:cf:4f:68:d1:7e:02:6b:91:63:12:b2:
51:a9:d3:d3:2c:2c:b9:eb:b5:1d:b6:d9:89:8a:35:
12:3f:6f:e8:7d:9d:66:4c:a0:55:d5:13:d0:14:fa:
d3:e5:e7:5b:ae:f7:d0:e1:81:4d:56:ea:08:f2:9c:
5a:14:fc:27:6d:33:9d:82:5f:e3:4b:5f:98:fb:65:
e0:8e:ed:d5:ef:6f:e3:2c:f5:af:6a:c6:47:84:95:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D5:05:6F:D1:3D:32:78:C0:DA:C6:23:F9:F1:E1:1B:7B:AE:11:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/19afc4b5-012b-38d4-9751-4a524d83b6ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4a80:ef00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:e4:e1:81:15:02:b2:3f:a8:ac:5e:1a:04:9e:09:aa:48:d3:
1a:84:e4:bc:b9:af:5e:9a:99:54:f6:1e:2a:d2:a0:10:43:92:
fb:ee:40:e9:1b:71:59:39:d7:2c:b8:4e:e5:d3:f1:de:78:47:
06:f3:b8:be:b3:85:12:9b:56:a2:50:f1:31:ef:96:de:79:36:
57:59:03:6d:5f:9f:37:10:53:61:93:f4:48:4c:f5:65:dd:92:
6f:99:41:f8:a3:36:87:4a:15:69:51:97:be:93:39:bb:90:22:
cd:43:ce:69:e4:8c:3e:81:b4:d2:1f:21:77:77:4e:9b:ba:84:
af:6f:6e:46:65:eb:40:2e:80:4b:d9:b3:b6:1c:b8:21:d3:91:
c7:42:bb:9c:0e:46:52:89:ba:8e:c9:bd:84:28:0d:61:40:ac:
8c:f0:4e:b4:b5:58:68:a1:d6:39:a7:f8:11:83:2a:34:93:04:
6e:d7:cb:99:a5:83:8a:6f:3e:69:3a:60:47:59:f4:99:27:d8:
18:fb:85:3a:d6:cf:dd:ee:fe:a8:40:d0:71:81:3f:ec:0a:3d:
70:bd:69:f0:ac:cb:6a:ac:f0:e6:f2:fc:26:61:57:50:2c:1a:
65:e9:f4:aa:d8:c0:b6:da:73:85:0d:30:94:4f:19:dc:cc:55:
7c:9c:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:53 2024 by rpki-client on console-fra.rpki-client.org