Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6594d6c2-ae8c-3be1-9f02-a81446750f78.roa
File: 6594d6c2-ae8c-3be1-9f02-a81446750f78.roa (raw, json)
Hash identifier: 3MgqY0wobGY/+M4YAqxVYt5Dm6uPURKl9hE6XndgOV8=
Subject key identifier: 41:E4:86:63:C0:F5:05:9E:EA:15:BF:1A:82:40:56:9C:D4:83:1A:06
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F43285848100A9C01CF7A6914BD4FB840
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6594d6c2-ae8c-3be1-9f02-a81446750f78.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 15169
IP address blocks: 2605:ef80:c01c::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 23 Jan 2025 02:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:01:cf:7a:69:14:bd:4f:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=025648f3-5339-48a9-868c-64fd2af2e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:fa:13:c0:11:dc:2b:b5:4f:ae:0b:8d:36:
4c:49:44:eb:42:ad:e8:a6:0c:3e:2a:5f:ba:4b:b8:
92:9a:10:6c:58:03:56:d0:f6:4a:f1:60:5f:b5:d4:
67:cd:36:f9:03:01:76:9d:3d:d0:f9:73:51:56:41:
8a:83:62:61:fa:0b:2d:fe:d4:e2:10:eb:bd:d7:e9:
95:04:e9:b9:85:01:c0:22:d7:16:80:66:49:f0:59:
5c:d4:64:25:67:60:a6:28:4e:a9:1e:d4:16:a5:ce:
d0:2e:28:21:6f:14:ce:66:67:b0:4c:f9:93:29:5e:
26:20:6c:11:51:bc:a2:84:26:29:2c:2b:bc:d1:ef:
72:d3:95:59:4c:10:e4:4a:bd:44:8e:b1:f5:0b:a0:
44:a9:ee:a1:57:d7:52:a9:43:b1:b7:55:bc:fc:3a:
9f:26:1e:56:0b:8e:97:ce:c3:69:5a:89:24:b8:1f:
cc:dd:96:a0:8f:60:56:3f:c7:70:d2:2a:b5:1d:21:
4f:0f:f2:ed:f6:50:3e:00:92:84:05:24:48:3f:79:
67:b9:48:8e:85:10:17:4f:01:3a:c3:d2:d7:40:60:
09:b9:80:ab:96:39:07:43:0b:54:89:cf:70:2e:2d:
ce:7a:fe:ab:be:a6:04:69:57:dc:cb:c1:2f:a0:c0:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:86:63:C0:F5:05:9E:EA:15:BF:1A:82:40:56:9C:D4:83:1A:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6594d6c2-ae8c-3be1-9f02-a81446750f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ef80:c01c::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:62:e6:3a:ce:76:a9:76:04:43:21:7a:00:d7:a1:09:50:0f:
8a:6e:25:bb:5c:be:c3:35:d0:e0:f1:9e:94:c8:4f:7f:2f:e8:
27:1f:ae:68:2f:76:3e:e2:11:85:f9:d0:32:78:ec:51:34:c9:
da:53:9f:b8:20:1b:8e:1a:c4:91:b3:91:ae:82:f6:48:e0:18:
87:74:9f:c2:9d:c1:b5:84:48:fb:1b:a4:b3:52:1e:b1:51:13:
87:0f:96:75:fe:43:b9:b0:34:1e:f6:52:ee:e2:61:45:36:0a:
9a:23:f3:de:23:b4:80:13:e4:8d:3d:14:5f:0f:be:35:31:e7:
23:5c:07:f0:ff:6b:f1:7b:85:20:95:99:b2:c4:84:ae:b1:c7:
91:80:53:ab:6c:cd:e2:5c:3a:13:c1:dc:19:53:90:e6:21:b1:
db:f3:13:f2:32:37:72:1e:27:93:e4:45:9a:75:ce:bc:1f:6c:
46:4d:fc:25:8e:f1:cd:7a:c9:2e:4d:f6:1d:01:5b:51:c1:b9:
a9:c6:c5:44:1f:2e:3b:ab:0d:89:5f:41:28:ab:c8:ad:2e:7c:
9c:de:50:5e:13:f6:43:29:17:ec:c8:59:09:d8:39:e5:37:12:
03:09:c0:d1:53:f2:83:ab:12:b1:0a:df:7e:de:7d:a6:75:e7:
4e:f0:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:26 2025 by rpki-client