Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ee829498-c5c1-3d4a-b0d1-7ef5ef670db7.roa
File: ee829498-c5c1-3d4a-b0d1-7ef5ef670db7.roa (raw, json)
Hash identifier: ZWDU7wVCUeaNrmMi6D5Csm8gZFRL6q+Z8dEPoah0z8M=
Subject key identifier: 29:47:50:CB:95:75:0B:43:E2:EC:69:00:4A:B0:C1:8B:EE:C5:13:39
Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial: 010D0C9F432858474E7C95B6CE4ED83836638B80
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ee829498-c5c1-3d4a-b0d1-7ef5ef670db7.roa
Signing time: Mon 23 Sep 2024 06:04:01 +0000
ROA not before: Mon 23 Sep 2024 06:04:01 +0000
ROA not after: Sun 22 Dec 2024 07:04:01 +0000
asID: 16509
IP address blocks: 2607:d540:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:4e:7c:95:b6:ce:4e:d8:38:36:63:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Validity
Not Before: Sep 23 06:04:01 2024 GMT
Not After : Dec 22 07:04:01 2024 GMT
Subject: CN=d361f94e-77ce-453a-a683-c1a41e48cab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:93:f5:2e:81:35:c9:f8:4b:b4:75:15:60:
c3:ea:c3:0c:35:3f:fa:ae:cd:cb:45:22:b1:06:1a:
d9:bf:75:c9:17:a6:5b:6f:90:5f:12:5f:67:b1:3c:
11:7d:a0:34:bc:dc:f3:89:c9:c2:9d:cd:c0:74:7f:
15:86:e3:b8:de:7e:bf:fb:ac:d8:85:4b:36:d6:3c:
1e:4f:29:8a:1b:b7:78:d6:96:31:3b:55:02:3f:f3:
4e:94:1c:65:25:23:c4:44:a7:3e:09:a5:14:db:5a:
73:18:b4:ba:3c:5d:bd:ad:70:b7:ea:01:ab:b7:5e:
47:57:26:9f:3e:a7:e4:9f:55:67:1b:4d:63:3c:ce:
f6:fe:76:bd:ef:00:60:9b:2b:dd:1b:5b:d2:91:89:
51:08:23:60:87:48:cf:2f:4c:14:76:b8:5d:a1:cc:
38:b5:38:1e:63:82:26:96:58:40:79:75:93:bc:38:
de:33:1d:9f:e0:82:c5:fe:89:ad:dd:26:e2:7e:23:
ac:ad:c2:7f:d5:d0:e6:cc:e2:72:7d:4c:97:8c:c7:
1a:1f:da:ef:dd:15:5f:a5:70:ae:25:ea:e0:ff:0a:
ec:21:44:7b:90:bc:12:c8:d8:d5:11:a3:b7:92:f2:
18:93:60:70:11:b0:b7:0a:58:8a:41:6f:d8:07:ae:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:50:CB:95:75:0B:43:E2:EC:69:00:4A:B0:C1:8B:EE:C5:13:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ee829498-c5c1-3d4a-b0d1-7ef5ef670db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
X509v3 Authority Key Identifier:
keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:d540:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:d6:5c:ed:0f:d3:f6:76:6d:1e:39:75:9f:9f:37:b5:db:e0:
11:4c:62:65:87:13:85:6d:82:6a:e7:f1:84:b5:18:90:aa:02:
97:83:61:dd:03:82:04:ca:5a:69:bc:6e:6f:91:c7:94:cc:8f:
52:e9:88:42:1b:bb:a9:32:0d:d1:b8:69:91:0e:7c:04:6b:d5:
e5:77:57:c3:b4:61:62:3a:8f:08:85:2d:46:90:2b:1e:09:b2:
99:b2:bc:b2:7a:3c:54:94:54:2c:4a:00:74:00:df:85:4e:13:
85:1e:e9:df:11:51:28:0a:f5:5b:fa:79:3e:94:f8:27:fc:92:
58:cc:28:48:97:88:e4:10:32:92:1e:a2:d7:62:3a:e8:e3:72:
2e:e4:69:5c:aa:9b:58:5b:62:b3:28:a5:2d:a7:a7:1e:e3:57:
84:a5:e5:b3:a5:b8:18:8d:10:ed:e1:4e:4b:70:5c:35:52:b5:
67:80:43:8a:73:96:1e:b2:02:e8:8b:08:86:02:63:e8:13:d7:
de:1f:1a:6c:93:af:ac:3d:fb:41:d5:32:1d:ce:47:80:f2:bf:
c2:f3:38:b2:1b:c9:91:49:4d:09:f1:2e:e9:12:5b:2a:5e:42:
c6:01:62:9c:64:5b:37:b0:15:dc:2f:f1:a2:a1:33:dd:d2:f1:
f3:02:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:31:12 2024 by rpki-client on console-fra.rpki-client.org