Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f12ab0f7-2140-3b10-b2c1-ffa4ccfab977.roa
File: f12ab0f7-2140-3b10-b2c1-ffa4ccfab977.roa (raw, json)
Hash identifier: caSHp9MWbYGG/UoTYhd12d0m/yuDKYGPpaesq+hm/OA=
Subject key identifier: F4:95:19:15:B4:70:13:24:4D:FB:39:F9:07:03:E0:8E:2C:70:CE:04
Certificate issuer: /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial: 010D0C9F4328584621C970D099C1591979AB4200
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f12ab0f7-2140-3b10-b2c1-ffa4ccfab977.roa
Signing time: Fri 07 Jun 2024 13:00:33 +0000
ROA not before: Fri 07 Jun 2024 13:00:33 +0000
ROA not after: Thu 05 Sep 2024 13:00:33 +0000
asID: 39937
IP address blocks: 2607:5240:2001::/48 maxlen: 48
2607:5240:2003::/48 maxlen: 48
2607:5240:2005::/48 maxlen: 48
2607:5240:2007::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 14:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:21:c9:70:d0:99:c1:59:19:79:ab:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Validity
Not Before: Jun 7 13:00:33 2024 GMT
Not After : Sep 5 13:00:33 2024 GMT
Subject: CN=a72b352f-06ec-497a-8c1b-2f3fcba85ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:fe:8c:77:26:df:48:07:af:b1:52:db:45:
8a:80:fa:8d:23:67:09:3a:6c:ac:3c:24:2c:da:29:
60:f9:1e:6f:ba:79:db:a7:56:7c:30:2c:f9:46:7e:
b6:6f:fd:9b:2d:fd:58:61:73:7e:bb:e6:7e:0d:05:
07:61:41:bc:82:c1:b5:e0:72:b2:51:48:bd:40:1f:
9b:b1:90:a5:d1:65:ca:73:75:c6:86:90:eb:24:be:
d9:0f:17:c8:53:79:07:7c:21:cb:2b:da:64:94:1b:
25:43:7b:6f:58:9e:76:52:bb:07:11:ff:be:95:62:
be:1b:a8:d4:b5:00:17:0a:67:ba:b3:7f:15:8b:6b:
bc:ad:6c:c9:6b:e6:c2:be:c8:84:91:ed:32:d3:1b:
93:06:ce:c4:2c:06:53:5f:58:e8:05:b0:16:32:c3:
a5:b6:4f:79:23:b0:b1:6d:6f:db:0e:48:be:a6:66:
8b:70:af:fc:90:c8:b0:85:d7:79:a3:d3:96:e0:b8:
25:15:41:cc:af:c2:30:41:d5:aa:85:ce:29:6d:ed:
98:72:50:1e:72:81:7a:68:a0:84:49:f6:13:bc:96:
06:e9:d9:4b:83:1b:43:0c:0e:48:19:48:94:2f:a7:
c4:43:40:39:6e:24:11:1c:2c:40:bf:a4:ad:41:3d:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:95:19:15:B4:70:13:24:4D:FB:39:F9:07:03:E0:8E:2C:70:CE:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f12ab0f7-2140-3b10-b2c1-ffa4ccfab977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl
X509v3 Authority Key Identifier:
keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:5240:2001::/48
2607:5240:2003::/48
2607:5240:2005::/48
2607:5240:2007::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a6:8a:b7:d8:be:ec:f0:2b:5e:08:74:8a:60:6f:de:a3:cc:
d0:74:c8:17:3f:29:40:76:28:2e:45:7e:54:e9:50:4c:6e:60:
2d:50:9f:43:db:ce:4a:82:0f:a4:c0:c9:c5:b4:2a:e1:3a:63:
02:2a:c5:2d:b5:7a:7f:84:3b:08:d3:7b:8d:71:02:b7:11:5d:
f4:33:77:e1:77:29:cf:1d:7e:b7:f6:51:76:20:e3:34:60:da:
d0:58:9f:20:82:4e:2f:c7:de:69:9f:4a:e4:cf:23:12:3e:ee:
07:10:43:b6:97:74:a4:e3:bb:ea:f6:76:ed:bd:93:c7:b8:53:
ff:d8:85:a1:60:1d:2a:d9:e7:3c:48:48:84:0e:de:b8:65:1e:
3b:2c:08:0c:da:7b:b8:9e:23:9d:97:2b:c1:0b:42:c2:48:87:
53:da:c4:37:66:ae:a7:ac:6e:d8:bb:b8:df:e9:10:57:c5:3e:
79:54:57:46:0a:87:df:df:44:39:a1:54:f0:ed:40:87:6f:a7:
f7:44:f1:02:8e:de:84:e8:66:dc:dc:79:a3:96:63:57:4b:87:
b9:b8:6c:4c:c8:69:fb:d5:73:2a:3c:4a:a0:b5:a1:c0:2a:79:
98:71:4c:75:65:23:06:8b:1c:41:3c:87:d7:8a:2f:39:70:fa:
f4:0a:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:06:49 2024 by rpki-client on console-fra.rpki-client.org