Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa
File: 546900d9-0d67-3213-876a-d9fed6ce28ee.roa (raw, json)
Hash identifier: hLJOZZqS8Vwvd3aiurWgPuiXtT8owoD/FdnGKsYTFiA=
Subject key identifier: 2A:5D:B4:A2:6D:A4:11:C4:8B:9F:BE:D4:B3:03:AF:52:89:48:62:17
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285840FFC27E49C83A1BB3B3888E00
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa
Signing time: Wed 22 Feb 2023 17:04:07 +0000
ROA not before: Wed 22 Feb 2023 17:04:07 +0000
ROA not after: Tue 27 May 2025 04:00:00 +0000
asID: 21559
IP address blocks: 2604:1cc0::/32 maxlen: 48
2605:5d40::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Feb 2023 22:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ff:c2:7e:49:c8:3a:1b:b3:b3:88:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Feb 22 17:04:07 2023 GMT
Not After : May 27 04:00:00 2025 GMT
Subject: CN=e39e69b8-f81a-45f2-b146-fb9559ca348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:37:8c:4e:bc:28:71:09:fa:01:af:cd:3c:
45:25:8f:76:e2:5a:bb:22:55:a3:5a:16:b7:88:1b:
aa:6a:0c:e3:ce:eb:ce:d6:22:33:cf:7e:a8:14:54:
7e:ea:e9:e1:ae:b6:bc:04:63:8a:4f:cb:6c:16:a4:
72:35:c2:70:d6:53:c7:14:8d:0b:cb:68:ee:0f:6e:
84:b5:e8:01:05:26:99:0e:5f:77:b2:fb:f1:17:a2:
33:62:32:6a:da:24:47:be:b4:8b:00:13:21:ce:a3:
28:e2:66:6d:25:72:96:2d:ba:f1:30:5c:ea:9a:29:
ca:b5:83:41:8c:f5:3a:6c:95:2d:8c:d8:23:40:f8:
9f:aa:1b:4e:7b:6b:a2:cb:f3:d3:26:df:a0:e7:2b:
b3:5b:e7:66:5f:22:56:86:27:65:18:8c:aa:80:38:
fa:bf:26:4e:aa:5c:d9:2d:bd:ca:28:7e:ee:3c:04:
fe:09:a0:02:ef:70:a5:82:a3:ca:5b:a1:dc:06:5d:
71:20:af:e6:47:5b:d8:40:d8:c0:f8:23:3e:54:c8:
17:f4:a1:e5:ef:b7:66:f4:9a:85:82:8b:c0:33:eb:
fa:b1:d6:b0:43:b9:90:de:80:4a:3d:0f:68:28:1e:
02:8b:b8:6f:85:9b:5f:86:74:b9:8c:2a:d8:48:56:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:B4:A2:6D:A4:11:C4:8B:9F:BE:D4:B3:03:AF:52:89:48:62:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/546900d9-0d67-3213-876a-d9fed6ce28ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:1cc0::/32
2605:5d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b2:ae:fe:75:d0:6a:db:73:84:1a:51:10:3a:54:2a:c5:1c:
58:c1:3e:b4:0e:ec:10:6d:b3:64:43:16:04:62:27:49:69:ad:
55:e2:83:b3:4c:83:3c:c0:27:f9:1d:6b:91:4c:42:71:f4:66:
2e:af:d7:2a:7c:04:88:ad:aa:ff:d6:f8:4b:91:f8:96:c9:50:
9e:be:76:4d:fe:21:bb:81:e6:c4:bc:47:42:98:42:0b:9d:95:
fc:e4:46:13:3e:4c:59:22:2e:2d:e8:5a:b9:f8:2a:cc:3a:98:
77:fc:b8:53:6c:b5:48:cc:50:81:4d:63:8b:31:17:ee:14:d2:
ce:70:46:07:31:e5:86:d6:f9:1f:97:59:3c:34:ca:87:1b:ec:
64:c1:76:98:c2:46:36:af:29:78:da:83:bf:89:23:64:91:79:
77:c1:dc:d1:5b:70:4f:03:e3:6e:46:fd:f4:15:bd:0a:c8:ec:
9f:a2:58:81:51:32:26:75:ae:a2:1b:e7:83:ee:d4:55:76:eb:
73:d7:de:ab:1a:9f:f2:14:8a:53:f3:57:59:b2:fb:8f:2f:25:
26:e3:fa:57:fa:bb:32:b3:dd:aa:00:0d:9b:20:25:6d:32:6c:
f5:7f:b0:6c:15:0c:40:f0:46:57:78:7e:22:e9:38:ce:1a:58:
b9:71:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org