Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2ef20bee-90f0-3bc7-b1a8-97841115cdfa.roa
File: 2ef20bee-90f0-3bc7-b1a8-97841115cdfa.roa (raw, json)
Hash identifier: fFqRpunH+/bOkGib0x0r8XWI9ku1Tj06rgF52Md2Tn0=
Subject key identifier: 7E:E0:92:4D:EB:67:A0:B7:DD:08:E1:8C:5A:70:3F:97:82:E8:32:41
Certificate issuer: /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial: 010D0C9F43285847A6E017A2D4AF791709130300
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2ef20bee-90f0-3bc7-b1a8-97841115cdfa.roa
Signing time: Thu 24 Oct 2024 21:55:39 +0000
ROA not before: Thu 24 Oct 2024 21:55:39 +0000
ROA not after: Wed 22 Jan 2025 22:55:39 +0000
asID: 8987
IP address blocks: 192.157.36.0/23 maxlen: 24
2602:f7db::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Oct 2024 00:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:a6:e0:17:a2:d4:af:79:17:09:13:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Validity
Not Before: Oct 24 21:55:39 2024 GMT
Not After : Jan 22 22:55:39 2025 GMT
Subject: CN=6b2fb4c4-cfe9-44cb-8f0f-d3adab137613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:14:6d:ec:77:3e:0c:bd:0d:bc:5b:e2:c2:
15:2d:7b:35:0d:d4:42:d2:28:9a:5f:3b:a9:e3:d7:
bd:b3:8e:61:d3:99:f6:16:41:6b:fd:dd:bd:9c:da:
f1:b0:6f:3c:9b:11:0b:0e:da:2a:0a:b0:fe:dd:4f:
b8:d8:2e:09:13:2a:3b:d9:cd:a5:79:e0:59:75:1a:
d1:5c:8f:3e:91:75:79:ee:ef:20:2f:db:71:e3:56:
d2:92:89:41:25:ab:db:8f:55:c3:48:de:c0:0c:1e:
eb:ea:a3:06:26:b4:69:9c:d4:d7:4b:89:e5:37:a9:
e9:32:80:2e:fb:18:ca:ea:36:02:99:82:61:30:3f:
7d:f3:6f:46:8e:bd:cc:58:50:a9:66:fe:59:a6:16:
57:8a:12:97:ed:ff:c6:4c:b4:fa:41:2b:d8:3d:5c:
f4:91:1b:8e:e1:a0:1a:49:34:db:bc:30:7f:62:65:
3a:c7:3c:1e:48:a8:a4:63:79:fd:0b:5d:53:97:67:
4e:a7:08:34:60:c3:69:f9:69:76:0c:04:f9:b3:13:
9b:a1:34:10:7f:72:80:6d:a8:cd:70:71:4a:c1:6b:
11:83:43:ec:c9:14:7b:b7:3e:f7:b4:2e:04:a3:50:
75:08:7b:8b:01:3e:81:b2:63:65:5b:c1:49:3e:6d:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E0:92:4D:EB:67:A0:B7:DD:08:E1:8C:5A:70:3F:97:82:E8:32:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/2ef20bee-90f0-3bc7-b1a8-97841115cdfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl
X509v3 Authority Key Identifier:
keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
sbgp-ipAddrBlock: critical
IPv4:
192.157.36.0/23
IPv6:
2602:f7db::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:4f:81:c6:a3:0f:b7:7b:37:ef:b1:e6:2c:39:6b:09:c8:f9:
23:8f:10:48:9d:b7:54:77:8a:b6:76:1e:f7:5d:3a:ed:c6:f6:
a0:fd:49:b7:4c:e0:3c:76:37:41:bd:0a:58:dc:94:96:05:38:
d4:19:6d:63:75:b9:52:4d:d3:b9:98:58:2f:24:0a:99:a1:20:
30:27:66:2e:bd:27:31:47:ad:3d:46:19:2d:64:0a:5d:d8:76:
d1:f6:a1:9b:63:a2:60:71:27:13:86:c3:f4:9d:c3:67:72:8e:
96:df:93:a4:db:4e:2b:0e:cb:3f:d3:34:90:e1:24:91:9c:ee:
96:01:b5:6a:1e:e4:ef:07:c9:25:c4:c5:0d:79:e8:8b:69:99:
8c:9c:9c:e2:da:6f:ee:da:2e:3e:f6:46:d3:c8:b8:a0:b1:03:
f3:61:0b:52:7b:15:53:0a:c8:81:45:0f:bb:c3:8a:25:bc:ff:
83:04:65:d4:ae:c4:7f:35:81:f4:36:7d:19:2a:47:b6:79:1b:
7d:90:25:af:2f:79:c3:cd:8b:b6:c2:a2:e1:b8:30:07:fc:de:
27:1d:83:77:77:c3:77:b4:02:86:1f:2f:8d:19:fa:ca:88:73:
d3:53:b7:a3:6e:0d:74:9e:bf:fa:76:ca:48:ba:5d:03:e3:69:
7f:c9:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 01:46:47 2024 by rpki-client on console-ams.rpki-client.org