Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0a414892-c892-3dae-9c4d-928ac54a843f.roa
File: 0a414892-c892-3dae-9c4d-928ac54a843f.roa (raw, json)
Hash identifier: cFgq/R2FxxhrwyeojlvMzRemEG1/0SGjhCcpmRmcOA8=
Subject key identifier: 8B:F2:70:07:8A:4C:D4:89:60:01:82:00:C6:E2:D1:89:59:27:2B:70
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F43285843625D20B50EC35EC4C6B75480
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0a414892-c892-3dae-9c4d-928ac54a843f.roa
Signing time: Fri 29 Sep 2023 13:49:04 +0000
ROA not before: Fri 29 Sep 2023 13:49:04 +0000
ROA not after: Thu 28 Dec 2023 14:49:04 +0000
asID: 17378
IP address blocks: 2607:f1d0::/32 maxlen: 48
2607:f3f8::/32 maxlen: 48
2607:fc38::/32 maxlen: 48
2607:fdb8::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:62:5d:20:b5:0e:c3:5e:c4:c6:b7:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Sep 29 13:49:04 2023 GMT
Not After : Dec 28 14:49:04 2023 GMT
Subject: CN=cf304eff-874a-4c30-add7-c82363bb2504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:02:52:67:26:81:2c:1a:54:08:09:6a:68:
06:ff:09:0f:1e:46:ec:31:51:0e:d4:a0:1e:4c:1e:
1a:fe:ef:ce:cd:6c:17:a7:ad:b2:77:bf:12:fc:f0:
46:dd:da:ab:c7:11:08:a7:fb:0c:af:17:b1:c7:98:
ee:57:56:02:ee:74:12:c8:3f:e5:ec:26:b9:d2:a3:
5a:f2:c3:01:8d:5a:66:1d:19:5b:2a:2b:3a:b5:63:
41:46:98:fa:89:38:42:f4:71:02:98:a4:c6:b8:4b:
79:4e:01:f2:3a:9b:08:46:53:70:ad:2e:5a:55:ab:
09:df:a3:a5:4c:b8:61:0f:ad:38:a1:c0:e2:a1:55:
99:03:c3:36:85:ba:f2:87:f3:a8:85:3a:0f:9c:2b:
bf:5f:9c:97:a8:66:26:80:9b:40:79:e7:01:3c:bc:
59:56:46:a0:3b:40:88:72:e0:51:08:d3:f2:0a:0f:
88:14:e3:64:d2:c4:aa:99:0b:87:7f:3f:f4:79:45:
06:48:13:13:0b:62:44:c1:97:92:c4:0c:0a:86:79:
f4:6c:f0:79:17:4e:b3:56:ec:53:fb:9c:8d:d6:64:
71:5b:9b:b4:55:88:4e:28:a7:7f:33:ff:c8:09:f7:
51:04:11:37:60:e5:98:37:07:b0:97:95:0e:f0:69:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F2:70:07:8A:4C:D4:89:60:01:82:00:C6:E2:D1:89:59:27:2B:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0a414892-c892-3dae-9c4d-928ac54a843f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f1d0::/32
2607:f3f8::/32
2607:fc38::/32
2607:fdb8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:51:fb:ad:94:69:e0:e6:cc:fd:e7:76:d4:59:b7:57:35:a5:
5d:0e:84:f3:f3:29:61:9b:08:53:df:95:63:9e:f9:d2:0c:27:
f6:d4:60:a3:79:f9:d6:50:8e:47:97:d8:29:3b:06:70:36:85:
f3:b1:56:7d:7a:29:a7:0d:bb:98:0b:87:ff:ce:3b:ce:b2:4a:
c5:66:ce:17:b3:f0:cf:69:8e:a8:a9:2c:d8:5a:bd:c5:88:77:
a3:13:13:2c:02:3c:f1:9e:af:34:f8:e3:66:29:d9:32:88:14:
60:a1:bb:6c:06:58:fd:10:24:be:fb:0a:fb:de:a9:4f:00:f5:
f8:69:52:e7:b9:26:ff:be:7e:d2:3c:0c:07:dd:9c:f0:e6:3a:
1c:c9:62:bb:a6:1d:12:f1:86:e6:2b:87:42:ad:d4:6f:6c:a4:
04:d7:c7:1a:8e:58:a6:59:45:b2:00:e4:95:d5:80:9d:36:a4:
7a:53:d3:ac:9a:eb:1f:2b:7b:01:d2:96:0e:a7:eb:54:41:9c:
39:c0:20:89:ef:3a:04:36:de:58:eb:d9:a8:8d:b9:28:c4:f0:
f5:45:bd:3d:a4:17:51:fc:c0:52:9f:d7:a7:70:b4:1e:d9:26:
28:7a:54:a4:35:4b:94:55:e0:b7:ec:ec:8e:d6:94:ea:3f:20:
e8:6e:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 17:17:04 2023 by rpki-client on console-fra.rpki-client.org