Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/409e66f9-83ac-3a15-bc7c-5b98559e02be.roa
File: 409e66f9-83ac-3a15-bc7c-5b98559e02be.roa (raw, json)
Hash identifier: 2I/qbgDT+VgW8AvkvCXTyOb6RgGX3AXJbHvmp2rWE9k=
Subject key identifier: 66:94:25:DE:3D:20:8A:64:A5:28:1E:4F:AF:8F:E2:8F:F1:A4:CE:04
Certificate issuer: /CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Certificate serial: 010D0C9F4328584022E1B81C626C04BB5816A800
Authority key identifier: 80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/409e66f9-83ac-3a15-bc7c-5b98559e02be.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Fri 04 Dec 2026 05:00:00 +0000
asID: 14618
IP address blocks: 2606:cd40::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Dec 2022 02:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:22:e1:b8:1c:62:6c:04:bb:58:16:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be8f23f-3a8c-4822-8996-e4131d203c13
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Dec 4 05:00:00 2026 GMT
Subject: CN=7341c935-e789-423d-ab97-9e39c00fc125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:77:50:f3:33:88:98:1a:27:65:70:36:9e:
7b:c5:40:ff:ae:0a:29:e6:84:a4:1d:e2:6b:33:28:
a6:06:7a:c7:47:78:cb:0a:b3:4f:2e:38:47:b4:d8:
36:99:f8:29:43:2b:55:7d:ff:26:dc:0f:28:d1:db:
f2:e2:1c:a1:05:60:a8:e7:93:aa:64:b1:76:27:a3:
1a:ce:44:01:b9:6a:d5:e0:35:7c:59:f1:26:2c:5d:
55:dc:bb:2d:67:a2:ca:c1:04:c7:32:51:d2:e1:df:
d2:e9:c1:88:da:24:b9:46:ae:f0:a2:e2:9e:c1:fa:
9c:c0:41:53:76:0c:24:c6:51:55:20:e2:ec:0e:c7:
13:7e:a2:7a:18:5a:68:a0:9e:88:14:1e:eb:4d:8d:
07:a5:6a:55:bf:d7:7b:ac:e2:e5:54:bc:df:68:04:
68:1f:18:e5:c3:73:ef:fd:f2:2b:9c:d4:5b:c4:96:
34:31:87:fa:ad:dd:f4:93:e5:7f:6b:99:eb:10:76:
7d:7b:89:92:39:5b:45:a0:7f:fa:8c:87:7b:f9:19:
cf:6c:eb:65:5a:88:0f:a5:a7:d1:88:91:7c:92:01:
eb:4a:f8:66:cf:60:51:fa:20:a4:a9:3e:30:2e:54:
a3:7c:de:ca:2b:29:c1:57:f1:38:55:73:b7:38:8b:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:94:25:DE:3D:20:8A:64:A5:28:1E:4F:AF:8F:E2:8F:F1:A4:CE:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/409e66f9-83ac-3a15-bc7c-5b98559e02be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13/9be8f23f-3a8c-4822-8996-e4131d203c13.crl
X509v3 Authority Key Identifier:
keyid:80:AD:19:B2:F1:CB:42:EA:DC:B3:3D:6C:5D:DE:3C:68:47:48:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9be8f23f-3a8c-4822-8996-e4131d203c13.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:cd40::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:48:04:2b:e0:a0:d2:0a:8a:4a:92:7d:77:22:4b:1d:78:88:
35:c8:4a:e5:31:ed:9e:fa:e0:97:9f:ce:98:b3:5e:a4:93:9d:
80:d0:aa:7d:74:56:4f:1f:e7:32:d0:f2:f3:b0:b9:94:41:f2:
d5:76:92:a0:70:40:f6:af:23:33:bb:0a:16:6b:f9:3b:6f:c3:
d5:87:0c:8b:69:9a:ab:52:61:85:f4:a8:13:ed:2f:93:db:77:
9a:f7:72:26:c0:66:db:56:34:4b:f6:cb:41:f2:98:6d:9b:0d:
f3:db:80:d3:cc:6b:7e:7f:54:3c:73:d9:2b:bf:78:c5:b3:5f:
57:33:f0:bb:a7:64:93:51:99:fc:e9:5e:d3:ed:3a:35:35:cf:
9a:8d:f1:1e:a0:99:59:42:7a:ab:71:ce:fb:c8:c9:4f:4f:d9:
8a:be:9f:df:dc:e9:f3:90:7d:25:1b:12:3c:c4:08:ac:ec:47:
99:b3:bc:2f:a1:df:36:c8:df:f6:e0:1b:30:58:42:13:b7:1f:
76:ad:72:6a:da:b4:e5:65:c7:da:4c:2f:1c:5c:e1:3d:11:6a:
ef:84:11:e7:03:14:bb:fe:4d:c7:21:bc:ee:4c:72:b9:49:89:
c0:9b:50:14:41:fb:8a:69:3b:cd:b8:43:20:c6:ac:a0:ee:13:
cf:e4:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:16 2025 by rpki-client