Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de5b84-c6e1-3584-9ab9-3a9de17ae4c3.roa
File: 43de5b84-c6e1-3584-9ab9-3a9de17ae4c3.roa (raw, json)
Hash identifier: C1VMn47mvjauTUjbuVt525crW3NXGKTN72mi/ESXado=
Subject key identifier: BB:6F:75:95:F3:27:19:26:F6:06:AE:7D:12:85:36:BE:A5:22:F5:9E
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F432858472B673FF37AC26E9E9C79D640
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de5b84-c6e1-3584-9ab9-3a9de17ae4c3.roa
Signing time: Tue 10 Sep 2024 16:27:45 +0000
ROA not before: Tue 10 Sep 2024 16:27:45 +0000
ROA not after: Mon 09 Dec 2024 17:27:45 +0000
asID: 19905
IP address blocks: 2610:a1:30fd::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:67:3f:f3:7a:c2:6e:9e:9c:79:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Sep 10 16:27:45 2024 GMT
Not After : Dec 9 17:27:45 2024 GMT
Subject: CN=ef9ccabe-1c15-45e3-b923-62ff2b13603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:24:95:5b:6d:1e:11:23:97:1b:13:20:6e:
c4:73:3d:62:f3:d2:28:0f:3e:74:cd:7c:f3:fc:0f:
a3:34:68:65:1a:d5:02:4a:73:96:d5:56:ab:d8:74:
5c:fb:52:56:41:92:84:be:cf:f2:45:fd:3a:e9:ce:
f1:05:d0:cd:33:ad:7a:93:6a:27:05:ee:81:b2:04:
10:7c:1e:77:1f:40:c6:46:64:ca:24:f5:e8:7f:83:
e4:e0:55:01:a2:69:6b:cc:0d:e6:56:1f:53:0f:73:
54:e6:5d:af:ca:de:78:42:9a:1a:d0:34:c9:3a:50:
ce:9d:0c:93:7e:e1:5b:66:5d:53:c1:aa:ab:ff:42:
23:fb:f9:34:e0:81:cc:36:ac:a1:ed:af:bc:c4:fc:
4f:08:a3:7e:14:dd:b9:1e:4c:1d:eb:b0:e6:2c:77:
67:2e:5e:3a:4c:bc:e8:31:5a:4e:4a:2b:ff:09:12:
1d:a1:aa:eb:b3:2b:de:37:f3:72:a1:e0:2c:31:e1:
e8:4c:91:dc:2e:55:89:40:5f:f0:72:05:48:6d:8e:
b8:99:5e:59:3c:bd:c1:77:f9:ea:da:33:46:6b:6c:
da:2d:6a:5d:ef:ba:80:ae:b0:e1:42:b3:0d:df:9a:
e0:f4:c6:9f:93:5e:40:16:5b:c9:b1:0f:17:ca:95:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6F:75:95:F3:27:19:26:F6:06:AE:7D:12:85:36:BE:A5:22:F5:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43de5b84-c6e1-3584-9ab9-3a9de17ae4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:a1:30fd::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:68:b9:c4:4c:4f:16:f5:4e:20:88:dc:bc:bc:fd:f1:3d:10:
24:ef:9d:4e:2e:d9:80:24:3c:c9:14:e8:0c:0c:8e:bc:9b:8f:
61:c8:c3:eb:63:67:8c:77:c8:93:66:17:d5:0d:67:04:28:36:
05:98:1e:39:08:b3:11:9f:d9:4b:bf:db:25:30:df:ff:25:fb:
68:56:88:72:e6:cb:6c:b3:46:b8:85:a4:69:f7:d7:61:9c:67:
bb:88:f2:0c:fd:9a:23:65:1f:35:c1:d0:23:c9:e9:25:62:e3:
ab:c0:7f:94:d4:09:07:0a:0c:ec:7a:0b:4c:ea:3c:e8:6f:db:
90:a7:54:7b:5d:86:5f:d9:f9:28:fe:1c:14:72:df:8d:df:2e:
f6:37:ce:de:62:3c:fb:2c:7c:81:ef:a8:36:a8:e9:27:da:23:
04:1f:ac:78:7e:1e:a2:27:2f:50:42:b9:a9:02:37:cd:0b:f0:
5e:97:ed:06:6c:31:6c:4d:a9:b7:ee:66:38:84:b5:c7:02:fa:
73:ad:8f:49:40:37:80:2d:a3:d3:dc:ca:7b:81:5f:62:04:4c:
08:07:d0:4a:26:e0:cc:14:db:ef:ae:be:ed:7d:a8:27:ad:00:
b9:32:cd:d4:dd:a9:e6:30:2e:4e:72:cb:e9:8c:81:94:f2:0c:
d1:c9:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 18:50:59 2024 by rpki-client on console-fra.rpki-client.org