Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/94f1fff5-3527-33ae-a7fd-d1436ffe36e3.roa
File: 94f1fff5-3527-33ae-a7fd-d1436ffe36e3.roa (raw, json)
Hash identifier: 4F40Pvh6C0V42kbEzfqF0kOYCCXE5OYxkDctdkwWJs4=
Subject key identifier: 71:17:0F:E4:B5:A2:7B:33:79:8E:AA:81:05:5D:1B:EF:BC:4E:21:F0
Certificate issuer: /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial: 010D0C9F4328584322C42A7ACD1895FBF6FA8DC0
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/94f1fff5-3527-33ae-a7fd-d1436ffe36e3.roa
Signing time: Tue 05 Sep 2023 12:00:00 +0000
ROA not before: Tue 05 Sep 2023 12:00:00 +0000
ROA not after: Sun 29 Dec 2024 05:00:00 +0000
asID: 15169
IP address blocks: 2606:73c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:22:c4:2a:7a:cd:18:95:fb:f6:fa:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Validity
Not Before: Sep 5 12:00:00 2023 GMT
Not After : Dec 29 05:00:00 2024 GMT
Subject: CN=c66ef7fc-e914-4ab3-a2ff-960bdcab36e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:c9:3e:22:db:a2:bd:7b:42:b3:fd:ca:8c:
f5:14:b4:8e:1d:12:17:cc:6a:1c:3f:05:cb:78:b0:
74:9c:3f:21:1d:6a:1e:8d:76:82:e8:3e:43:2e:e4:
ed:9b:56:b4:88:0b:37:a8:85:43:dc:32:b0:e2:a3:
d2:85:ff:76:fe:2a:62:9f:b3:be:a8:5e:26:d5:7e:
3e:b6:4d:46:c2:9c:80:3d:64:6d:16:0b:e4:61:22:
24:32:c1:5e:e3:f7:d5:d7:79:cd:0e:2b:37:10:c2:
8e:38:ee:e9:f5:78:ab:4d:7e:3e:0e:6d:d6:e5:92:
a1:e6:5a:47:7b:14:e2:5a:f8:0f:08:1f:63:f7:81:
8e:ab:3e:0f:7f:47:7d:cc:16:cb:5f:27:87:7b:63:
d6:82:92:b3:92:a5:9d:d4:69:43:9e:b1:e3:cd:03:
c0:0f:74:56:80:5f:fc:1d:7a:22:21:91:33:45:42:
e3:b0:bd:f9:e7:e4:60:2e:ae:ae:35:9a:88:28:93:
e9:6f:32:42:fa:48:65:cd:41:07:ec:0a:5b:5f:d2:
b5:6d:5a:8b:17:a0:3a:3f:7c:76:c7:50:0c:b1:53:
62:a4:38:bb:38:2d:10:16:9c:0d:2f:89:91:a4:c3:
ce:41:02:88:54:1f:75:8a:0e:c2:70:f0:56:6e:4f:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:0F:E4:B5:A2:7B:33:79:8E:AA:81:05:5D:1B:EF:BC:4E:21:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/94f1fff5-3527-33ae-a7fd-d1436ffe36e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
X509v3 Authority Key Identifier:
keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:73c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:e7:15:1f:2f:17:63:c8:3d:6f:31:87:9a:e4:7e:37:37:9d:
2d:29:9d:8e:d0:f3:f2:dc:04:8d:ea:a1:34:b2:62:c9:0c:18:
3f:54:ae:26:4d:ff:8f:23:c9:0e:e3:7c:3f:f5:59:35:51:3f:
ce:83:76:70:9c:7d:74:a1:5e:ee:49:3b:d3:47:d4:9a:3c:56:
f4:04:9d:29:e1:5f:8c:2a:a0:23:25:70:88:43:a2:a5:94:12:
7b:7e:f6:f1:5e:1d:cc:88:e9:97:04:5d:36:3e:1a:b5:52:af:
8e:3c:35:07:a2:50:3d:13:bb:55:ed:57:5b:8f:03:46:f6:57:
bb:68:b3:aa:e1:08:10:94:bf:8f:a2:22:e4:6e:df:2a:81:3b:
53:cb:89:89:f7:48:aa:25:f2:d1:dc:be:5b:b0:49:55:ef:9f:
04:07:1f:70:ad:2f:44:0e:9f:e8:75:dd:16:16:a4:38:e3:af:
cb:16:c7:30:aa:8a:64:c0:64:76:65:97:28:4b:42:56:30:f3:
20:d9:5b:2d:fd:3b:53:17:81:ea:65:7b:99:c4:4a:7f:03:46:
c7:fc:64:02:09:ac:76:bc:47:55:eb:40:b6:79:e2:09:85:19:
9d:b0:53:3e:8b:47:7e:ce:80:a9:ec:b6:fb:08:15:61:db:76:
87:9b:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:10 2024 by rpki-client on console-fra.rpki-client.org