Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/3571e248-f723-339a-a100-10f4806c5982.roa
File: 3571e248-f723-339a-a100-10f4806c5982.roa (raw, json)
Hash identifier: Kw5YidnEXnZRrW8nIqvheJMsKE6cMz0opXY9ZeXnE68=
Subject key identifier: 67:AC:D6:5A:FA:E2:24:87:3C:A1:8F:76:93:CF:89:04:CF:71:90:C3
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F432858430F71A87B69907AF36476C820
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/3571e248-f723-339a-a100-10f4806c5982.roa
Signing time: Wed 30 Aug 2023 20:58:20 +0000
ROA not before: Wed 30 Aug 2023 20:58:20 +0000
ROA not after: Tue 28 Nov 2023 21:58:20 +0000
asID: 397994
IP address blocks: 2620:a0:2000::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0f:71:a8:7b:69:90:7a:f3:64:76:c8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Aug 30 20:58:20 2023 GMT
Not After : Nov 28 21:58:20 2023 GMT
Subject: CN=30460845-d991-421d-a72c-6070e1952b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:4a:35:30:62:02:2b:56:9e:fa:be:2c:fd:
c2:8a:78:11:fa:47:7f:ad:05:d0:d2:e0:84:e4:1a:
e7:d7:b5:49:69:6a:ed:5b:0a:6b:4c:65:81:51:4c:
cb:dc:af:dc:20:5c:78:ad:35:15:29:17:f2:3a:a9:
1a:96:2c:3b:85:2f:94:98:cf:f0:f7:4a:6b:5f:2c:
3a:17:f7:27:ce:7b:78:ad:2a:a0:e6:56:d2:35:27:
ae:08:73:a5:d1:1a:98:52:e2:95:5f:cc:12:e3:04:
4c:d1:d2:25:b0:5f:e2:74:54:2e:a0:1c:83:90:9f:
22:c2:fb:44:44:48:64:12:40:88:50:ed:0b:d6:d6:
03:57:9f:17:96:04:e6:28:2f:1c:46:61:06:40:79:
31:bf:47:2f:12:f2:d6:0a:1d:78:5e:a0:87:71:56:
86:a9:0c:26:9d:26:c8:5a:8e:d2:44:a0:31:d7:86:
7c:03:a5:a1:56:88:2f:46:a1:85:ea:62:04:fb:56:
cc:93:90:2f:a8:e1:cf:ec:4d:b9:fd:a6:9a:4d:4a:
af:15:9c:50:39:bf:eb:44:dc:8e:0f:44:15:89:3d:
52:fa:7b:32:1e:64:13:d5:5b:e9:2b:12:bd:0c:a0:
7a:3c:9d:57:6c:f2:fe:d6:41:1c:d5:7b:c2:7f:bd:
cc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:D6:5A:FA:E2:24:87:3C:A1:8F:76:93:CF:89:04:CF:71:90:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/3571e248-f723-339a-a100-10f4806c5982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:a0:2000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:80:d3:30:f9:4c:74:81:7a:56:7c:74:8d:75:32:f8:db:93:
ba:e3:8f:94:ab:59:97:87:98:b5:14:b4:8e:37:44:99:57:96:
a1:83:b5:b0:67:ed:c1:eb:1f:b2:91:47:ce:b5:35:01:4a:22:
76:00:18:da:57:c6:33:2f:ae:b7:80:f7:e3:b8:ae:9a:30:a7:
08:b3:4e:72:75:c4:52:cf:fa:ed:e2:63:0a:fd:e5:94:cf:49:
9b:91:53:e1:65:25:4c:d1:8c:20:11:9a:24:ed:89:18:82:8f:
3f:5a:28:46:24:c0:38:17:da:9e:99:ee:ce:69:f4:cb:1c:a0:
dc:c5:6f:4a:6f:ad:60:55:1a:71:15:51:f1:80:94:ad:c1:02:
9c:77:91:d5:f6:2a:7a:14:bf:83:a5:3d:8b:7f:4d:e0:31:35:
4e:b2:0d:1f:91:a8:fb:4b:51:98:7b:4e:9d:3a:67:30:9e:f0:
80:cb:09:36:75:2b:7f:f6:87:4c:a5:2e:1d:7b:f6:35:85:be:
17:12:e5:96:81:4d:73:8f:65:32:7c:3c:79:b8:cb:ad:38:4a:
da:23:0c:00:a3:71:0b:50:9d:e6:32:52:ff:7d:55:f5:86:9b:
c5:35:a4:4e:99:23:78:bc:f7:1e:f4:03:65:67:5c:8c:df:81:
0b:a7:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 17:28:21 2023 by rpki-client on console-fra.rpki-client.org