Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/32010b7a-74a6-30be-9e4c-18dc951c1b83.roa
File: 32010b7a-74a6-30be-9e4c-18dc951c1b83.roa (raw, json)
Hash identifier: Vz65kAUTMTOk4in0PGLsBjFv/g9+S4XOw8NRu3ChwyI=
Subject key identifier: 3A:7B:56:EC:94:83:18:D0:A7:6E:8E:71:4F:AB:D0:C0:A0:D5:D0:71
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F43285846F5A5BCFF0C6FAEB478782410
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/32010b7a-74a6-30be-9e4c-18dc951c1b83.roa
Signing time: Thu 22 Aug 2024 10:20:00 +0000
ROA not before: Thu 22 Aug 2024 10:20:00 +0000
ROA not after: Wed 20 Nov 2024 11:20:00 +0000
asID: 203888
IP address blocks: 2602:f9df:120::/44 maxlen: 48
2602:f9df:130::/44 maxlen: 48
2602:f9df:140::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Sep 2024 04:36:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:f5:a5:bc:ff:0c:6f:ae:b4:78:78:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Aug 22 10:20:00 2024 GMT
Not After : Nov 20 11:20:00 2024 GMT
Subject: CN=2b89e2b7-56d5-484f-8e7f-4dde3d89e110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:ee:a6:73:cb:71:73:4a:92:13:56:e1:bf:
74:27:b5:d9:31:cb:32:1b:ff:a2:c0:16:45:f1:92:
f7:24:49:0a:e3:35:70:27:52:f6:23:f9:42:5c:b7:
1d:6a:a2:23:b7:92:62:54:1f:79:c9:63:a7:27:aa:
38:b7:7e:c7:13:e3:78:06:52:61:ac:98:75:b3:a4:
2b:a8:a3:d4:a0:3d:06:64:17:1d:e8:11:48:33:60:
aa:ea:d9:da:21:ad:5f:2c:c6:95:6f:d8:c0:b2:b8:
05:18:c7:1d:ae:ad:11:eb:59:21:0f:c2:8f:0d:5a:
b2:0b:c2:f8:e8:e7:ca:5c:22:5f:99:43:d2:d2:60:
23:d6:4c:d7:c6:11:f0:30:67:c2:6b:66:97:d3:8f:
6c:64:d2:ae:f2:2e:e7:03:f6:40:c7:03:d3:f1:57:
d3:ce:a1:8b:5d:33:ad:14:b3:0b:a9:5e:49:b7:fc:
d0:2e:8a:79:29:ec:19:ef:77:d2:02:52:3d:fe:63:
f6:3b:74:10:ce:9c:aa:b7:ed:cd:8d:97:4c:81:22:
13:5d:3d:95:f6:e1:fb:2b:67:37:55:24:d4:11:96:
15:bb:ea:00:cb:99:09:f1:a7:aa:da:83:a4:c5:19:
9b:e1:98:dd:a8:68:9f:74:36:13:ee:d4:b1:66:af:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:56:EC:94:83:18:D0:A7:6E:8E:71:4F:AB:D0:C0:A0:D5:D0:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/32010b7a-74a6-30be-9e4c-18dc951c1b83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9df:120::-2602:f9df:14f:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:67:fd:50:87:fc:3e:76:c4:2e:80:1e:0f:5c:4c:3b:29:2c:
96:2a:bb:98:47:48:0a:4e:f9:56:91:d5:3b:ba:c1:c4:08:e3:
52:86:dc:a4:88:11:7e:40:c9:d8:a0:6a:be:7a:69:f2:af:79:
e0:ad:b6:f3:fe:89:73:25:ae:08:2a:d5:24:83:cf:7a:bb:0c:
c6:40:e4:63:b7:fd:1f:b3:b0:e6:65:e5:ae:3e:3e:36:dd:7d:
0b:13:a3:b2:69:98:0a:d3:0c:24:e8:be:c3:fe:d7:0e:7a:d0:
fd:60:ed:ff:ea:ac:03:a8:fd:f0:a8:43:16:fe:f5:ad:e3:2f:
da:92:50:36:6b:2c:a2:c5:0b:3f:6d:cb:31:13:d7:37:b5:f9:
f0:0c:ec:96:bf:32:41:2e:6a:ca:ca:61:97:ba:7b:87:ea:a8:
b1:08:7e:db:6f:cf:07:d9:42:d2:9d:eb:43:fe:a2:fa:fa:bf:
d4:f2:f6:f8:a7:74:15:b8:88:2c:20:1b:e5:ac:0a:4c:cb:33:
e5:37:60:94:d1:43:b8:50:a6:62:cc:49:31:a4:8f:cc:8f:f6:
aa:c5:27:45:68:59:f8:bd:e8:7f:7e:8c:60:49:bc:d4:73:d3:
50:5a:6d:13:4b:e7:08:b2:ed:34:b2:3c:f4:b1:b1:6b:41:84:
91:7c:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 06:20:12 2024 by rpki-client on console-fra.rpki-client.org