Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/c7f8aa86-481e-393e-b5ab-866e4cb88d1c.roa
File: c7f8aa86-481e-393e-b5ab-866e4cb88d1c.roa (raw, json)
Hash identifier: ptR4DA3i4Q7xu1eCsR8wCg7k5Rm66wYHcUZELyHBRcI=
Subject key identifier: 2A:87:DB:F1:AB:3B:41:31:CA:07:99:AD:39:C5:AF:9C:65:0F:D3:26
Certificate issuer: /CN=24664a36-96dd-46d7-9d91-bebf99797af1
Certificate serial: 010D0C9F432858477E0040E83A914F5E20C7C600
Authority key identifier: 1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/c7f8aa86-481e-393e-b5ab-866e4cb88d1c.roa
Signing time: Thu 10 Oct 2024 06:32:19 +0000
ROA not before: Thu 10 Oct 2024 06:32:19 +0000
ROA not after: Wed 08 Jan 2025 07:32:19 +0000
asID: 396982
IP address blocks: 2602:2e1:60::/48 maxlen: 48
2602:2e1:81::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 29 Oct 2024 06:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:7e:00:40:e8:3a:91:4f:5e:20:c7:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24664a36-96dd-46d7-9d91-bebf99797af1
Validity
Not Before: Oct 10 06:32:19 2024 GMT
Not After : Jan 8 07:32:19 2025 GMT
Subject: CN=fbc7c8e0-ebf9-4d8f-90a7-3e5f0b593948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:69:e8:e8:5e:51:9d:6c:46:18:e3:74:77:
2f:7c:ca:49:4d:40:e8:5b:ab:e3:81:0a:d9:f1:4b:
8d:58:8e:ad:24:0f:51:5b:6c:c6:eb:77:6c:ca:80:
c9:bb:ad:ae:c3:79:a0:13:d1:7e:2a:f7:97:31:8a:
fe:74:90:8e:8b:e4:e5:81:f8:3a:e2:0b:12:ae:ed:
b1:55:9e:b1:d5:7f:d6:eb:f7:ec:e2:da:64:65:73:
24:12:c0:95:3e:cd:32:18:74:71:fd:94:6e:ae:77:
7d:b5:9a:c9:4a:68:2a:1f:1b:45:48:f1:ab:43:c0:
16:ca:c6:13:81:2e:84:90:d8:2f:ab:a6:a4:69:71:
38:00:3b:e7:d2:61:75:0e:ae:4c:92:9a:8b:95:ac:
ec:1b:b8:da:bd:8b:ac:67:47:21:7b:9f:2b:88:4a:
3c:c6:2d:b5:8c:06:4a:a5:02:0b:8f:06:3a:80:3f:
78:23:1c:20:ab:22:55:01:b6:48:ce:26:c7:7c:09:
81:95:08:49:28:05:5c:a0:4a:b6:9a:34:06:b8:ea:
9b:a7:ec:ec:44:7e:f4:75:6a:48:77:84:74:ae:b5:
5c:3a:58:13:9d:b4:4b:74:21:04:e9:99:e1:fe:fc:
d3:bf:6a:a1:95:c1:25:fe:c5:d9:b9:43:d4:53:d2:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:DB:F1:AB:3B:41:31:CA:07:99:AD:39:C5:AF:9C:65:0F:D3:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/c7f8aa86-481e-393e-b5ab-866e4cb88d1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1/24664a36-96dd-46d7-9d91-bebf99797af1.crl
X509v3 Authority Key Identifier:
keyid:1B:72:32:4D:98:F7:CD:39:96:E6:96:F3:69:22:0E:02:99:E0:5D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/24664a36-96dd-46d7-9d91-bebf99797af1.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2e1:60::/48
2602:2e1:81::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e5:37:ea:e0:93:73:a6:6d:3b:99:f6:ed:f7:4a:5a:5a:16:9a:
5f:e1:74:03:0b:4f:2f:59:0b:0a:d9:f8:42:45:77:89:23:16:
37:76:df:11:3a:ab:70:38:e0:01:d4:b5:a1:75:14:01:60:78:
f9:6a:95:ce:e9:e1:05:54:68:66:2f:c2:68:25:18:96:84:a6:
e9:97:75:76:17:c0:ca:78:43:76:8e:c4:f3:a3:82:42:56:29:
df:c4:d1:82:33:b3:bf:16:83:32:da:1f:ca:20:05:c8:23:b6:
7d:6f:f8:e5:b3:84:f5:6f:e4:7a:fb:74:25:61:60:01:cb:e3:
12:5c:3c:95:b0:38:eb:7d:7e:cc:41:80:77:23:ea:7c:5e:0e:
c6:20:02:ca:7a:ff:3b:ff:09:1d:5e:65:3c:06:38:73:a9:a5:
66:07:f4:01:e7:2f:23:d2:04:08:da:a9:56:72:c1:fc:91:21:
65:5b:5c:50:5e:db:ee:c5:06:75:f2:7d:a7:88:57:b1:bb:d1:
a2:8b:aa:f4:97:65:50:fa:30:53:31:00:8d:93:1b:2c:9a:1c:
ee:43:a5:88:35:d4:e7:80:58:fc:88:e5:75:2f:02:5a:69:14:
42:9b:a8:24:74:13:d1:29:2a:fe:d1:95:48:80:1e:83:93:99:
cb:85:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:23:25 2024 by rpki-client on console-ams.rpki-client.org