Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9061444c-a695-3c40-9f5f-9ffa25c0d2ea.roa
File: 9061444c-a695-3c40-9f5f-9ffa25c0d2ea.roa (raw, json)
Hash identifier: Z4P3WHNtVFk8nRK7/dqRsO6iVOmTy7csNQ1ymNv7gfk=
Subject key identifier: 23:1E:0A:83:CA:B9:C4:3D:BD:E3:49:F0:28:A8:45:D6:23:50:D1:8C
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858474E7DF37B44E6CC8785880080
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9061444c-a695-3c40-9f5f-9ffa25c0d2ea.roa
Signing time: Mon 23 Sep 2024 06:06:47 +0000
ROA not before: Mon 23 Sep 2024 06:06:47 +0000
ROA not after: Sun 22 Dec 2024 07:06:47 +0000
asID: 14618
IP address blocks: 2607:d540:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4e:7d:f3:7b:44:e6:cc:87:85:88:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Sep 23 06:06:47 2024 GMT
Not After : Dec 22 07:06:47 2024 GMT
Subject: CN=2ba0b158-cb83-4272-870a-358de567d9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:21:a9:a5:61:23:10:66:9f:0f:b4:ac:24:
2b:65:52:2f:14:bc:da:a3:43:57:8e:e8:40:bc:bf:
5c:9a:3a:c3:51:69:80:80:74:ca:94:51:7f:92:3d:
17:16:74:74:4f:68:cf:65:62:20:41:05:82:e3:ad:
5d:71:77:c0:ec:67:a1:87:5c:ee:b0:8f:46:99:07:
13:6c:53:7a:32:5c:fd:72:af:95:20:30:b3:de:5d:
b8:7a:05:ba:d0:d4:c7:63:b8:76:b6:40:20:b7:17:
1c:0b:75:0a:64:ed:af:ec:9e:61:86:79:03:c8:b4:
11:82:c6:39:1f:be:45:cb:02:1f:f8:e3:51:2e:86:
ae:5f:a0:aa:ad:3d:bc:49:ac:9e:5f:c6:ed:44:c5:
ee:28:76:0d:d9:41:92:53:c0:65:5c:02:62:81:0c:
de:67:65:a5:d4:7c:8f:be:6a:87:13:32:35:64:ca:
ef:4f:98:bd:7c:50:30:32:f7:33:a2:b6:a8:fe:44:
6b:cb:af:74:e9:12:b4:a2:70:40:82:f4:d4:1b:5b:
db:36:04:9e:4f:61:b5:76:98:85:95:95:5a:d1:01:
18:f3:37:ca:b5:d1:8a:ea:1c:13:4a:68:8a:43:b3:
86:cb:9d:14:41:99:a4:d8:3e:0b:b5:0a:67:d0:d1:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:0A:83:CA:B9:C4:3D:BD:E3:49:F0:28:A8:45:D6:23:50:D1:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/9061444c-a695-3c40-9f5f-9ffa25c0d2ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:8b:08:57:1b:d2:8a:60:06:66:b8:a1:97:c3:23:2e:f9:11:
13:a8:c9:89:eb:d2:19:c3:3b:e4:d6:51:f3:45:2b:07:73:29:
d4:c3:22:2f:cc:01:2e:9e:ae:7a:ce:cb:c8:f3:43:f5:56:40:
11:1e:78:39:96:ab:b3:43:39:dd:d4:5f:72:e0:0c:1e:ae:06:
aa:cf:84:36:51:5e:1d:48:97:d4:83:25:ce:e8:00:ff:74:52:
0d:7b:bf:a5:f1:2e:21:39:14:2a:94:e4:3f:6a:d0:e5:57:75:
57:7f:c0:b1:22:74:0d:5d:fc:c1:78:a9:bd:5f:7c:8c:2e:35:
ad:45:da:2e:db:9b:94:09:80:54:6f:13:ec:b6:d7:dd:98:fe:
56:fd:bb:d5:28:8e:3c:c8:13:30:ec:a4:b4:8f:cc:37:e1:15:
75:11:2e:97:e8:59:c7:70:5c:82:a1:fe:bc:69:a6:1d:81:e3:
40:64:b8:b7:43:d8:b1:69:7b:32:08:2a:c3:74:fd:61:83:77:
27:5a:85:41:57:6e:50:3b:06:5d:81:a5:9e:c1:11:40:69:30:
f8:47:af:17:f3:f4:5f:5f:d5:54:27:f1:1d:79:6c:13:73:38:
d9:c8:20:07:19:ae:95:62:c0:c5:4e:1c:08:6f:cf:c9:c6:ec:
f1:e6:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:35 2024 by rpki-client on console-ams.rpki-client.org