Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa
File: 2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa (raw, json)
Hash identifier: gVb/sMAOYnUfFi3Lm349PYNb4ybKsVkMo9oPv7Xb0Ps=
Subject key identifier: B5:FD:E3:84:0A:E3:86:AE:F6:D9:1D:F1:09:E0:EF:0E:BE:23:36:9F
Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial: 010D0C9F43285848A29B4ECABF464514C035EFF0
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 401243
IP address blocks: 2602:2b5:10::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Mar 2025 19:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4e:ca:bf:46:45:14:c0:35:ef:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=86a3e83e-899a-4f9d-a19e-03d3276e9527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:a0:9e:8b:cd:8a:e2:01:5b:d2:d9:58:1c:
b4:1f:01:54:ae:63:12:2c:87:82:f9:21:3a:72:1f:
62:e4:c9:d1:e8:74:8b:0d:14:66:5f:55:4b:2b:e1:
34:6f:d8:eb:04:2f:78:8e:dc:2d:ee:9a:5c:17:7a:
9c:43:81:05:ea:eb:00:8f:33:b4:2e:c6:b8:ee:5f:
7a:c7:c1:0e:f4:57:0f:e9:f3:8d:27:fe:49:84:c0:
cc:4e:50:12:60:ad:97:5f:a1:83:d8:1d:b1:a6:dd:
05:7b:22:ef:95:ff:ab:a0:c4:68:b0:b3:ac:33:5c:
2a:d8:e1:c3:5f:c1:6f:a5:d4:94:12:01:1b:bc:e6:
e5:2c:89:da:75:ed:1e:18:25:24:7d:26:df:93:1a:
7d:40:f5:66:a6:da:c9:39:61:40:13:74:13:33:1a:
ce:a4:22:32:d8:41:a1:1f:bb:0f:83:c9:10:52:0d:
5b:9f:2e:ea:53:77:60:67:d1:8f:16:f9:b8:a3:ca:
2e:62:ca:37:cb:37:92:5c:d7:57:98:ef:f4:f5:d1:
46:95:4c:be:0f:48:5d:5d:a6:db:ae:3f:e3:96:9e:
4d:eb:15:59:9c:77:59:3f:cc:26:eb:74:9b:da:4e:
c9:a0:1f:33:0f:27:65:45:d7:c3:a0:c7:29:aa:3f:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:E3:84:0A:E3:86:AE:F6:D9:1D:F1:09:E0:EF:0E:BE:23:36:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/2fe799dd-cf9b-3bf0-a756-5decdff34ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
X509v3 Authority Key Identifier:
keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2b5:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:96:1e:e0:50:b5:98:03:49:9c:11:6b:68:94:2f:bc:0a:a4:
83:aa:22:56:18:5d:05:25:d2:b2:21:0c:c4:38:c9:8e:e6:31:
52:e8:d3:16:a6:8a:3c:a8:9b:c2:41:b2:ed:db:dd:d7:1a:79:
c0:95:a5:77:ca:ff:e4:f1:33:29:27:b5:7d:08:a1:b5:de:92:
c4:b6:77:99:9f:9f:c8:34:84:1d:76:44:b3:75:bb:ed:28:85:
d4:a8:57:e5:06:cc:97:0e:24:9a:d6:4c:cb:36:37:f0:a0:25:
01:5a:dc:77:a8:b3:65:10:1f:ef:66:ff:b8:7c:3f:03:7a:9a:
69:72:0d:89:7f:a0:f4:33:d6:f7:db:98:5b:e9:f6:0f:f6:63:
bb:88:0c:43:ae:47:be:0b:6c:d3:de:01:c9:01:59:19:a1:13:
af:f9:27:57:2b:e1:95:45:e0:0f:50:68:bb:ad:09:bb:08:84:
ad:70:ad:f0:34:04:7d:d6:c0:98:7f:2f:c0:1b:6e:91:54:a0:
cf:01:39:e0:95:37:f3:36:02:a8:80:f8:c0:d0:55:8c:bc:f8:
18:c8:e7:b0:0f:5d:74:a7:47:84:f7:64:d7:bb:d0:d9:8e:79:
0a:11:15:38:03:90:85:0f:76:b3:63:4b:a4:8f:d4:48:a8:47:
bf:12:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:06 2025 by rpki-client