Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/98c28988-1dc1-34c6-a25d-bfc6878a1711.roa
File: 98c28988-1dc1-34c6-a25d-bfc6878a1711.roa (raw, json)
Hash identifier: q/a7Gs91yoeBXovYyWu+8xC7oP4l2XREpOlWwNhiwdY=
Subject key identifier: 5D:37:12:3A:FF:60:98:5C:2B:0C:95:36:59:68:32:0B:62:B3:3A:10
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F432858480D3FCAD4481D23EEB5C26200
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/98c28988-1dc1-34c6-a25d-bfc6878a1711.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 15169
IP address blocks: 2605:ef80:c090::/45 maxlen: 45
Validation: Failed, certificate revoked on Thu 23 Jan 2025 02:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:ca:d4:48:1d:23:ee:b5:c2:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=2db1d5d2-6374-4de8-b9e4-7abb02418b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:35:39:ee:a5:0b:36:cb:0b:7f:47:5c:66:
df:16:60:4f:93:73:33:af:0b:01:f5:c0:e3:c1:8b:
4a:92:16:c5:eb:35:49:c2:77:75:2f:24:94:48:ac:
98:35:a3:df:fb:f7:ee:37:1c:ce:e6:5b:57:ce:6b:
89:dc:18:d4:e1:3c:36:9b:0f:6b:83:33:e0:4d:bd:
78:a6:46:7b:87:d2:a0:25:50:2a:e2:24:4f:71:37:
46:61:8f:2f:1b:4a:12:b3:0b:b4:0e:fb:09:9f:ad:
73:04:be:1a:78:fc:50:a6:fd:e2:da:68:0d:c3:63:
3b:e6:ac:44:89:d4:d4:5d:dc:00:bd:03:cf:e2:8b:
19:5b:b1:1d:f3:88:2b:62:07:bf:84:84:18:f0:9a:
a0:d6:2b:9f:4e:db:f4:af:dc:44:e1:c1:f9:fc:1d:
db:f8:88:7f:26:c0:76:16:3b:b6:b7:cf:af:3f:4c:
1f:ce:fa:c0:35:1b:bd:53:9e:9c:11:a1:d8:1b:46:
87:ae:e3:8c:d1:b1:a4:17:04:be:da:47:c9:ce:b7:
5a:cf:d1:74:34:85:3d:7f:9c:30:c8:f0:21:ae:6e:
c3:a4:d5:9b:aa:e8:91:66:e9:6d:89:1a:e0:74:09:
25:f5:94:9c:0a:4c:f6:0c:08:2a:13:f8:8a:e4:77:
dd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:12:3A:FF:60:98:5C:2B:0C:95:36:59:68:32:0B:62:B3:3A:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/98c28988-1dc1-34c6-a25d-bfc6878a1711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:ef80:c090::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:47:02:30:b4:16:f1:98:8e:18:1a:cb:f2:de:56:42:83:53:
4e:1b:d4:ee:85:86:49:45:16:16:0a:7c:7d:f4:a6:37:24:bc:
6b:a1:50:d7:e7:03:c0:64:14:dd:6e:7f:6d:44:6d:33:8e:93:
39:fb:45:bd:6c:7f:4f:68:52:cb:b2:67:28:ec:77:ed:ab:86:
5b:a7:be:97:63:8e:a4:99:80:12:5f:5f:f0:f3:31:1f:d5:0b:
c6:0d:aa:ea:12:f2:7d:c2:dc:fa:70:e0:ee:6c:61:ea:e8:9b:
bf:77:4f:f7:fe:c1:0e:99:2b:99:39:ae:8e:57:2c:2d:7a:e0:
9a:cf:aa:64:06:8c:b1:0d:00:b0:66:39:b1:a9:49:b2:a2:40:
8c:f9:82:c5:aa:6d:e3:2c:2e:a9:18:40:f6:30:38:ed:67:c8:
fe:c3:f6:cf:69:af:5b:9c:40:36:e8:e8:9f:53:5e:3d:fc:ba:
06:08:a3:8d:95:48:6f:7a:8d:e1:e4:54:4a:78:c8:14:01:f5:
04:0d:33:e2:b0:3c:74:d0:87:c0:8a:fd:cd:98:b8:ae:32:4c:
b9:46:16:d6:90:de:f2:7a:6c:a0:ed:81:df:64:44:9b:26:6b:
3a:40:9f:16:ee:68:bd:4e:46:af:c8:70:26:41:42:0f:72:31:
19:08:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:51 2025 by rpki-client