Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/a84099cc-a8bb-3991-ab0d-6f51bb0e893f.roa
File: a84099cc-a8bb-3991-ab0d-6f51bb0e893f.roa (raw, json)
Hash identifier: Ks0HPK271/VPrkNwIUSEpXCR6xY1DwDcqBEbytwEOEI=
Subject key identifier: 38:50:FF:80:37:A0:AA:BD:CA:82:72:1D:BF:40:F4:70:8A:88:89:DD
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858474E7C55F30F4B14B1BD39E980
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/a84099cc-a8bb-3991-ab0d-6f51bb0e893f.roa
Signing time: Mon 23 Sep 2024 06:03:31 +0000
ROA not before: Mon 23 Sep 2024 06:03:31 +0000
ROA not after: Sun 22 Dec 2024 07:03:31 +0000
asID: 14618
IP address blocks: 2607:d540:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4e:7c:55:f3:0f:4b:14:b1:bd:39:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Sep 23 06:03:31 2024 GMT
Not After : Dec 22 07:03:31 2024 GMT
Subject: CN=3854fc25-56cf-4a1e-ac7e-21092f20098c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:9f:2e:ae:ad:3d:7c:24:91:47:27:bf:3b:
56:c7:df:de:ae:cc:bf:aa:ac:6a:3e:f9:28:3d:24:
62:e3:25:6a:a7:9d:53:ef:8f:eb:4e:c1:bd:f5:a3:
41:55:d9:e3:e6:de:67:54:5a:5f:c5:56:70:48:f3:
d8:59:fd:12:98:6c:51:ce:2a:c6:88:79:8d:b2:9b:
a5:46:72:68:3d:86:f7:08:9c:ed:5a:1f:35:20:b9:
ff:29:35:de:3a:ac:c9:25:af:ba:9d:cb:93:fd:42:
70:d6:b2:f4:2b:2f:20:9b:03:93:25:5a:4a:06:e2:
05:29:98:76:1a:60:ca:b1:e1:46:93:22:84:85:d2:
fb:16:23:46:e5:46:5c:9b:0e:c0:cb:ed:87:59:00:
f1:6b:0c:da:fa:d9:73:1b:65:49:f9:be:11:f2:b6:
47:dd:99:d2:b0:88:0a:13:29:fe:19:4f:2a:6e:b5:
74:81:87:ff:46:38:af:37:ff:d4:b2:4c:f8:22:fd:
f4:6d:db:0f:0f:d1:7d:18:b7:f6:6c:e1:c4:18:e9:
75:ee:5f:c1:d6:5b:aa:cf:eb:a0:1e:ea:7e:d7:8c:
97:21:da:d0:56:e4:58:53:f6:4b:1f:ad:2c:bc:48:
3d:cf:34:bf:97:9b:f9:a1:34:4e:11:58:3c:1f:95:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:50:FF:80:37:A0:AA:BD:CA:82:72:1D:BF:40:F4:70:8A:88:89:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/a84099cc-a8bb-3991-ab0d-6f51bb0e893f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:3d:0c:4d:9d:98:69:63:54:40:9b:d4:ac:fb:9b:73:a9:4d:
e8:c2:62:2c:3c:19:48:05:64:ae:4d:17:9e:fb:e9:04:01:c2:
0f:bf:29:38:d3:69:b3:54:75:f5:d5:f5:dc:12:10:61:4f:cf:
e0:f1:ce:38:d7:0b:a2:99:62:56:0f:a1:71:ed:83:0d:d5:0a:
6e:4e:01:5e:41:f0:92:37:36:ad:1c:be:cf:fa:b2:f7:2c:e5:
bf:18:f1:4a:2a:34:18:d6:8a:a5:15:a2:c8:f8:6e:78:7c:29:
19:13:95:d5:d3:9c:82:d5:1d:00:d3:49:77:2e:df:53:de:77:
d0:52:84:0b:ef:e6:5a:77:48:07:15:e3:cd:9e:54:af:1d:59:
f6:11:9e:86:98:3b:1a:27:1a:10:cd:f2:a4:2a:50:76:26:7f:
e9:9e:02:ea:c2:71:cb:da:9a:6a:49:f7:2c:53:ac:62:ca:5c:
4b:f0:6d:64:c1:84:c3:10:9e:4b:4d:77:7f:94:1d:fa:fd:05:
3f:4c:5f:06:0e:30:7d:75:00:3f:8b:8c:44:fd:2d:09:a4:a8:
c1:aa:fb:47:f9:3e:ac:e9:73:fd:5e:d0:ac:37:7f:41:6e:1a:
46:62:c5:5f:5a:8a:39:f7:13:22:14:42:42:fe:45:f5:1b:37:
dc:c3:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:35 2024 by rpki-client on console-ams.rpki-client.org