Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d998a3b-f9fb-3410-b5b2-05738c187ac5.roa
File: 2d998a3b-f9fb-3410-b5b2-05738c187ac5.roa (raw, json)
Hash identifier: MQK0+WEl8oGwL/RDLo6TsSdyY8PfAhRSdKV4/w23x2w=
Subject key identifier: DD:B8:84:89:3E:76:EC:F4:CF:E4:9A:CA:CB:DB:84:FD:7B:98:88:64
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858472B673E95D8369BC4E42A4B00
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d998a3b-f9fb-3410-b5b2-05738c187ac5.roa
Signing time: Tue 10 Sep 2024 16:27:44 +0000
ROA not before: Tue 10 Sep 2024 16:27:44 +0000
ROA not after: Mon 09 Dec 2024 17:27:44 +0000
asID: 397228
IP address blocks: 2610:a1:30fc::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:67:3e:95:d8:36:9b:c4:e4:2a:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 10 16:27:44 2024 GMT
Not After : Dec 9 17:27:44 2024 GMT
Subject: CN=e0f0bd5d-05c2-4a8e-b563-f2f01c3e708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:25:5d:33:84:9a:d1:a8:18:c1:2d:7d:64:
a4:78:15:63:94:9b:6a:52:04:07:08:a2:1d:fb:60:
70:d6:11:95:00:6c:b9:fe:5e:01:e9:65:ca:c8:5d:
6c:b8:ef:64:d1:8a:74:c8:f6:92:d5:99:ff:0b:14:
bc:df:99:a6:3d:7d:0a:07:cf:1a:25:0f:16:94:c5:
dd:48:af:13:f4:b8:a2:60:ab:da:53:fd:2a:58:5e:
97:dc:e0:99:5f:e6:01:99:e9:05:fa:5f:f4:d3:a0:
94:cd:c0:fd:d5:98:b3:4c:25:74:35:4e:39:da:c1:
6b:70:b9:d7:85:0c:cb:ff:d7:b1:72:44:eb:25:ab:
42:a0:da:27:d1:65:c6:0a:52:0f:15:61:22:c2:85:
51:c0:c4:22:e4:58:31:42:ac:1f:6b:1c:6e:4d:50:
5d:f2:47:cc:2a:97:57:5e:26:4f:95:a8:c6:36:e3:
db:9e:5e:35:77:fa:07:16:22:9c:18:b4:e6:cb:48:
51:b2:37:d8:a9:3d:30:4b:42:96:89:be:a2:7f:93:
d3:22:51:81:21:a1:68:12:91:c7:4c:26:f5:ec:41:
ac:22:90:2c:6d:e6:1f:ef:36:a5:93:94:06:ee:e8:
82:8e:25:d4:11:46:f4:42:9e:d0:e5:f7:dc:04:48:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B8:84:89:3E:76:EC:F4:CF:E4:9A:CA:CB:DB:84:FD:7B:98:88:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2d998a3b-f9fb-3410-b5b2-05738c187ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:30fc::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:3d:be:a8:23:47:f1:c5:85:2d:d2:63:5b:f7:59:8c:de:33:
c8:02:23:76:54:4a:25:45:f8:03:f0:69:65:80:61:d3:2d:66:
a8:58:a7:7a:2c:ae:bb:e8:50:bb:98:68:25:2b:26:29:ab:bc:
cc:a5:99:7c:82:93:36:46:2e:1e:e4:35:0c:04:8f:57:79:ec:
e1:fe:8b:57:50:51:23:46:18:1c:1f:df:30:c3:20:11:b1:b3:
f3:bb:ce:e7:e7:9c:71:d9:d8:3a:66:df:06:45:c8:f6:86:39:
59:dd:ca:0e:77:83:d9:92:f1:e5:8f:53:d2:dd:04:a7:a9:11:
e9:73:fb:5b:2b:13:32:17:3d:12:07:2e:f4:0d:60:54:e0:a2:
ca:e5:67:8e:19:e0:9a:f2:e8:e8:a8:db:34:07:b7:53:7d:24:
0e:79:14:0d:3e:82:28:76:a8:51:99:2e:92:8b:e7:60:7b:84:
bd:dc:04:bc:a2:be:63:1d:75:ec:7a:1a:ba:f7:19:f8:fa:0b:
30:5e:c8:5e:a6:7b:ac:43:22:e8:2d:73:00:ab:5b:69:bc:44:
e2:69:dd:7f:68:c2:9f:27:2f:ee:f1:56:58:4a:bd:54:d9:84:
44:5f:b3:c6:6b:b0:21:f7:c8:1c:e6:12:96:54:7e:a4:f0:fc:
e0:38:a6:22
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcrZz6V2DabxOQqSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI0MDkxMDE2Mjc0NFoXDTI0MTIwOTE3Mjc0NFowLzEtMCsGA1UEAxMk
ZTBmMGJkNWQtMDVjMi00YThlLWI1NjMtZjJmMDFjM2U3MDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJQlXTOEmtGoGMEtfWSkeBVjlJtqUgQHCKId
+2Bw1hGVAGy5/l4B6WXKyF1suO9k0Yp0yPaS1Zn/CxS835mmPX0KB88aJQ8WlMXd
SK8T9LiiYKvaU/0qWF6X3OCZX+YBmekF+l/006CUzcD91ZizTCV0NU452sFrcLnX
hQzL/9exckTrJatCoNon0WXGClIPFWEiwoVRwMQi5FgxQqwfaxxuTVBd8kfMKpdX
XiZPlajGNuPbnl41d/oHFiKcGLTmy0hRsjfYqT0wS0KWib6if5PTIlGBIaFoEpHH
TCb17EGsIpAsbeYf7zalk5QG7uiCjiXUEUb0Qp7Q5ffcBEiYDQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN24hIk+duz0z+SaysvbhP17mIhkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMmQ5OThhM2ItZjlmYi0z
NDEwLWI1YjItMDU3MzhjMTg3YWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAoTD8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACk9vqgjR/HFhS3SY1v3WYzeM8gCI3ZUSiVF+APwaWWAYdMtZqhY
p3osrrvoULuYaCUrJimrvMylmXyCkzZGLh7kNQwEj1d57OH+i1dQUSNGGBwf3zDD
IBGxs/O7zufnnHHZ2Dpm3wZFyPaGOVndyg53g9mS8eWPU9LdBKepEelz+1srEzIX
PRIHLvQNYFTgosrlZ44Z4Jry6Oio2zQHt1N9JA55FA0+gih2qFGZLpKL52B7hL3c
BLyivmMddex6Grr3Gfj6CzBeyF6me6xDIugtcwCrW2m8ROJp3X9owp8nL+7xVlhK
vVTZhERfs8ZrsCH3yBzmEpZUfqTw/OA4piI=
-----END CERTIFICATE-----
Generated at Tue Sep 24 18:50:59 2024 by rpki-client on console-fra.rpki-client.org