Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/b721c125-3c5e-379b-b572-391a3e6302e6.roa
File: b721c125-3c5e-379b-b572-391a3e6302e6.roa (raw, json)
Hash identifier: QI3R9apdQd8OqrY45fnoV1wR4y3/86DmQTOxic0jvlE=
Subject key identifier: CA:20:45:4E:C8:C1:90:1E:26:C3:08:08:ED:7E:73:D0:3D:44:C4:04
Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Certificate serial: 010D0C9F43285847466AC9D4A0DD144A9CF03B00
Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/b721c125-3c5e-379b-b572-391a3e6302e6.roa
Signing time: Fri 20 Sep 2024 08:41:42 +0000
ROA not before: Fri 20 Sep 2024 08:41:42 +0000
ROA not after: Thu 19 Dec 2024 09:41:42 +0000
asID: 3573
IP address blocks: 2610:b0:41d8::/47 maxlen: 47
Validation: Failed, certificate revoked on Mon 23 Sep 2024 10:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:46:6a:c9:d4:a0:dd:14:4a:9c:f0:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd
Validity
Not Before: Sep 20 08:41:42 2024 GMT
Not After : Dec 19 09:41:42 2024 GMT
Subject: CN=1aaffec9-9851-49e3-a016-c15c09b6a238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a9:f7:36:30:70:83:0f:c4:b0:ef:42:53:36:
e3:a8:4c:b6:b8:65:9d:1c:b1:2d:b7:db:83:3f:11:
25:53:21:8e:78:9d:0d:0e:23:13:ce:c2:15:be:1d:
5b:c7:ad:07:be:97:be:4d:7a:ee:a8:02:d1:f6:18:
5c:d6:8a:40:ae:53:cf:4d:2b:61:20:6a:a6:e8:85:
8c:23:4d:cd:29:e8:17:b5:4b:cc:60:7b:d4:8d:28:
5e:c2:34:0f:0c:eb:0b:af:06:d2:44:fc:b0:a8:dc:
3f:7a:7a:6b:4e:9d:cf:6c:0c:3a:81:65:ea:ce:77:
05:64:4d:ec:3d:40:86:25:0f:60:e4:02:f2:cd:55:
e9:e3:0a:64:21:61:e5:1a:14:29:72:56:78:4b:6f:
5f:0c:79:d0:45:9a:69:48:5e:6f:12:38:39:5f:83:
78:a7:5c:4b:8e:1a:3e:69:a6:60:e6:9d:01:5e:d9:
d7:32:9d:41:32:fe:4a:27:2f:83:4e:28:03:3d:e6:
74:27:da:f8:94:5a:4a:9f:bc:3d:1d:3a:1f:23:02:
0c:8b:6e:7a:69:d1:0c:90:42:b8:bd:15:ed:90:c0:
3e:a3:d9:73:c4:58:23:ba:3f:b6:ee:af:d9:91:e8:
33:fa:2a:83:87:dd:5a:20:04:43:4b:c8:95:79:ab:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:45:4E:C8:C1:90:1E:26:C3:08:08:ED:7E:73:D0:3D:44:C4:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/b721c125-3c5e-379b-b572-391a3e6302e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl
X509v3 Authority Key Identifier:
keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:b0:41d8::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:10:95:f7:54:a5:55:b2:3e:1b:23:97:41:30:50:9b:7d:85:
10:a1:18:fc:09:29:fd:c3:ef:95:3e:84:84:ee:02:e9:d2:5f:
3a:72:cf:f7:ab:59:db:5d:52:cb:a1:b3:a7:6c:58:e5:45:84:
1a:90:a0:cb:f6:db:bc:37:5f:64:65:22:ee:44:e5:3f:2b:f2:
6d:a1:5d:17:79:2b:a9:89:2b:44:d8:15:a4:c5:54:79:35:6e:
10:95:e6:10:fd:bf:95:7e:0e:b9:90:0d:7c:0e:d3:a3:d3:13:
7d:ac:26:a0:44:57:8e:b8:18:62:d9:d7:4c:79:d8:3d:e0:ef:
1b:c9:eb:f1:dc:39:05:29:0a:0e:87:1e:9c:f3:68:67:7c:88:
ba:24:f0:3a:f6:17:60:aa:e2:05:89:f9:96:e1:36:44:0b:be:
38:e7:52:1b:04:6b:05:44:df:35:72:2e:91:bb:9a:1f:d1:b9:
61:7d:a3:85:19:54:83:16:54:ff:b1:e2:89:18:4a:8f:2c:20:
98:19:91:9a:9f:31:f6:dc:f7:d7:63:b9:c2:dc:aa:bb:08:78:
c1:8f:62:39:3e:93:5b:c8:24:05:f1:28:c8:62:d8:93:b6:b0:
ca:10:af:5c:a6:59:61:b4:a8:98:02:6b:be:dd:ba:80:35:01:
cd:79:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 14:19:11 2024 by rpki-client on console-ams.rpki-client.org