Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0a81e2cf-03d6-3372-98b4-d62f2eafda73.roa
File: 0a81e2cf-03d6-3372-98b4-d62f2eafda73.roa (raw, json)
Hash identifier: ed8xRlcdi0OzVVJWcEwtpmcuRi4eu1LzSL5rTxrvn/Y=
Subject key identifier: DD:18:2E:17:B8:66:FB:6C:81:58:D7:20:62:E1:09:0C:B7:81:E6:06
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F43285845C255432243974CC1B51E5960
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0a81e2cf-03d6-3372-98b4-d62f2eafda73.roa
Signing time: Sat 04 May 2024 08:24:41 +0000
ROA not before: Sat 04 May 2024 08:24:41 +0000
ROA not after: Fri 02 Aug 2024 08:24:41 +0000
asID: 134478
IP address blocks: 2602:f919:900::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 15 Jun 2024 12:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c2:55:43:22:43:97:4c:c1:b5:1e:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: May 4 08:24:41 2024 GMT
Not After : Aug 2 08:24:41 2024 GMT
Subject: CN=9cdc3ed4-045a-493e-ba7f-fbbfbd5565c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7b:bf:cc:23:f3:68:37:4e:4e:cb:aa:01:91:
72:ff:19:b2:3b:9a:0a:e4:48:88:b2:21:cc:31:1d:
bd:b0:8a:67:65:c0:ce:ca:82:10:c7:f5:79:ad:15:
0a:c6:d5:53:68:ec:57:66:63:29:e7:0e:79:b4:4e:
c5:f3:b1:6a:c4:fa:39:83:c2:9c:d8:4f:b9:4d:5e:
a9:83:57:8b:e5:07:fe:d3:95:77:4e:98:9b:b6:39:
e2:5a:0e:1e:35:e4:d0:13:46:ce:fd:83:7e:0d:e8:
2c:93:e2:28:92:4f:79:1f:26:19:c8:98:a2:3c:15:
e5:9a:7c:d5:eb:3c:b0:f4:25:c8:fc:db:61:78:a4:
b6:c4:5e:3f:f6:22:bd:22:02:1f:a1:94:4a:7d:22:
ce:9b:b5:df:b2:80:3d:1c:60:6b:53:c2:3d:17:ad:
9b:f6:cf:02:ed:0a:86:8c:8d:4f:f6:9d:5b:94:30:
1f:01:08:82:fc:c0:14:af:d1:ef:9b:8b:21:76:40:
cb:a4:01:c3:f4:66:8d:b2:b7:ec:ed:d5:13:09:48:
30:ff:9b:aa:24:a3:19:3b:9d:88:c8:19:a8:d2:6b:
b1:f9:5d:98:37:65:b3:4b:8c:36:9d:c0:b4:8b:0b:
97:9c:60:59:eb:f9:c5:a4:a6:fa:10:7a:b2:02:55:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:18:2E:17:B8:66:FB:6C:81:58:D7:20:62:E1:09:0C:B7:81:E6:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0a81e2cf-03d6-3372-98b4-d62f2eafda73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f919:900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:3e:51:40:4e:9a:03:d1:6a:54:6f:ee:d2:f6:ef:5c:e5:e6:
84:66:ba:23:13:48:d4:69:64:01:c9:a2:11:e6:8e:1d:e3:41:
b0:12:dd:2a:65:ff:ba:a7:2e:dc:c9:26:6e:ef:71:29:46:d2:
9c:6e:28:e4:c3:c2:0a:a3:cf:52:1b:25:c7:6d:a1:e8:ee:c9:
51:5e:79:6b:09:69:ed:dd:c3:8a:af:20:de:a3:e9:80:16:61:
f3:98:4b:8d:19:9a:e7:d1:dc:0c:63:55:ed:09:b4:e2:46:3b:
6e:4c:f2:bd:e0:b1:67:91:d5:65:56:7a:b1:96:bf:bd:07:69:
dd:43:b7:5e:a1:f5:66:34:10:a3:81:6f:51:6e:46:67:fb:27:
85:7d:f0:6f:5f:ab:08:9e:4c:16:92:a6:05:7d:0c:ee:7b:6f:
9b:51:e3:6a:a4:03:93:1b:0e:52:7f:a1:7b:3c:80:52:11:32:
7f:60:67:be:65:0e:ef:6c:6c:5c:0f:13:0c:ae:33:08:aa:c6:
65:28:da:4f:49:a7:5a:3a:fe:14:2f:71:00:9e:4b:9a:88:25:
41:33:5e:fe:3a:61:d3:0c:ea:52:25:09:48:0a:d0:b0:e8:6d:
07:bd:2c:2e:94:6d:1d:bf:01:93:65:7e:e0:f5:71:59:d6:2e:
e6:0d:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:42:59 2024 by rpki-client on console-fra.rpki-client.org