Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/20fa6fc2-2905-3553-9e3e-6fee8393fa48.roa
File: 20fa6fc2-2905-3553-9e3e-6fee8393fa48.roa (raw, json)
Hash identifier: zvi2MRqOjazXv9adVCjdjlW3X6Ouqz2R4BNY/wyp/nY=
Subject key identifier: 4C:6A:09:AA:8B:4C:C2:F7:BA:13:95:F1:C0:95:DD:C8:CF:F0:B8:BF
Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial: 010D0C9F432858478217FB760A82405B807F9F20
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/20fa6fc2-2905-3553-9e3e-6fee8393fa48.roa
Signing time: Fri 11 Oct 2024 17:43:21 +0000
ROA not before: Fri 11 Oct 2024 17:43:21 +0000
ROA not after: Thu 09 Jan 2025 18:43:21 +0000
asID: 5009
IP address blocks: 2605:e300::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Oct 2024 21:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:82:17:fb:76:0a:82:40:5b:80:7f:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
Validity
Not Before: Oct 11 17:43:21 2024 GMT
Not After : Jan 9 18:43:21 2025 GMT
Subject: CN=e7cbdae8-f664-465d-8980-df0ace324726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:bd:18:76:f9:de:42:6e:33:a6:b9:76:73:
27:c0:69:82:52:df:6a:93:6c:ee:e9:fd:07:0b:81:
2b:3f:06:e7:72:3d:78:aa:ba:fe:c4:f8:89:25:6a:
15:f3:ff:61:cd:6f:10:ce:ca:c0:c8:b2:f8:0c:cd:
83:72:46:73:84:e7:c8:ca:45:9b:75:ff:0d:f2:68:
7f:19:9e:e8:f1:80:8c:24:9b:2f:c0:45:87:93:e8:
cd:2d:94:56:e3:4d:6c:74:04:61:93:cd:d3:ca:85:
1c:77:9f:c4:f6:48:a3:b0:b7:1b:f2:35:20:79:fa:
90:3e:b7:ee:8f:8a:41:93:7e:b8:04:7f:f1:f0:f2:
dd:85:88:ab:5e:c4:4b:99:1c:1d:a3:d1:6c:76:b2:
92:41:c7:98:19:13:46:f1:3d:3c:bd:7e:a0:2b:68:
97:86:15:fd:66:5a:06:fb:ce:85:3b:f8:b6:77:de:
18:99:26:78:65:51:16:72:67:8f:da:23:11:55:36:
6f:d3:33:8f:87:62:a3:30:8f:4c:56:c9:8b:79:34:
e2:56:a4:f3:19:f1:a7:b9:bf:13:7c:06:63:0e:2b:
a5:3f:7e:91:52:c5:19:74:86:01:53:bf:74:96:a8:
81:4c:ab:76:9a:da:7b:42:d7:27:d4:55:b7:e1:7c:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:09:AA:8B:4C:C2:F7:BA:13:95:F1:C0:95:DD:C8:CF:F0:B8:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/20fa6fc2-2905-3553-9e3e-6fee8393fa48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl
X509v3 Authority Key Identifier:
keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:e300::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:8a:70:5e:b3:32:67:13:13:47:c1:f1:2f:57:20:07:4f:60:
19:13:05:7f:ee:1e:9a:f2:a4:1a:e4:04:64:5b:39:2c:66:07:
a6:3e:1b:bb:6e:0b:93:ad:c6:a4:08:b5:4b:7e:6c:87:ac:6d:
78:2e:62:36:8c:e5:5f:f5:50:cc:94:39:86:24:82:a5:57:18:
b2:8d:94:21:0f:2a:80:49:a8:86:b6:f5:66:33:37:aa:d5:4f:
20:0f:60:3a:0a:7e:86:52:88:1d:83:53:0d:32:f9:9a:c8:69:
a1:af:87:67:ab:eb:5b:c0:b5:06:92:07:c7:b3:bd:a6:27:dc:
a2:61:7c:a5:93:5e:8e:0b:79:61:d7:86:e1:7b:62:de:45:af:
fc:14:5b:67:45:61:a8:6f:db:d4:30:8a:b3:05:02:b0:78:e8:
5d:fe:6a:8c:4c:3d:84:3d:9b:22:b7:01:ed:4a:c3:62:94:e9:
39:8f:47:b3:81:61:00:5e:92:ef:08:40:97:6a:60:bc:dd:f4:
96:7f:0b:dc:5a:ee:4c:62:06:31:60:47:db:3a:db:d9:07:5c:
2d:9a:b5:fd:a3:b8:67:64:8f:0c:db:e8:d7:95:9a:d0:85:be:
92:7b:fc:f7:f7:88:1c:94:d5:bf:b8:1c:d5:ed:61:a4:3c:5e:
71:8d:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 23:20:15 2024 by rpki-client on console-fra.rpki-client.org