Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b11fec4-b939-3e26-9183-85b26f2fb909.roa
File: 4b11fec4-b939-3e26-9183-85b26f2fb909.roa (raw, json)
Hash identifier: +ap27PyP+uH85ZsXAKvLqh4yQYt603Zrk6KQhzaYY/U=
Subject key identifier: A2:36:C8:9E:03:6C:B9:3C:5F:7D:42:FC:87:F1:E2:76:4E:30:85:37
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDD271FEA84A3C26A55800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b11fec4-b939-3e26-9183-85b26f2fb909.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4821::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:d2:71:fe:a8:4a:3c:26:a5:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=4b7287bb-518b-4c3d-bf7a-b6f8b5cc9485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:36:15:30:9b:92:00:19:55:c1:81:53:11:
4d:d8:28:37:c3:cb:24:7b:d9:8c:11:f4:86:65:76:
34:05:56:aa:0f:2b:a7:7e:f7:1d:7a:ee:78:05:35:
a5:2b:af:ed:87:15:0c:88:a2:22:2e:70:b5:6a:68:
61:a1:ec:dd:81:f9:f0:bc:47:9a:a2:39:43:d8:cd:
fa:dc:d1:f6:92:17:87:85:8b:de:fc:63:c9:26:32:
b7:b4:fe:ba:72:73:d5:26:af:c2:3a:ac:64:58:3c:
3c:8a:6b:99:9b:63:dd:82:38:75:73:a4:88:ba:35:
f1:93:65:b2:f6:83:6d:c1:87:0f:10:da:c5:84:69:
84:97:37:aa:56:89:8b:ba:cf:72:25:ac:59:30:e5:
1f:8a:57:f1:86:03:37:2a:6f:16:8b:46:ec:ec:5c:
56:4f:9e:cc:70:c4:aa:f2:09:36:80:49:96:4e:ed:
60:bc:9c:a9:b4:b9:af:e0:06:0b:40:14:00:04:4c:
70:1a:c6:36:ec:d7:8a:0b:60:e6:80:5e:ae:e9:b0:
8b:4e:2d:5c:11:31:87:69:a1:6b:d9:2e:e9:fa:26:
37:b8:09:fb:17:15:e6:91:e6:5a:29:16:39:fb:92:
ff:74:03:67:60:62:d5:ac:a1:9a:7d:36:92:6d:80:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:C8:9E:03:6C:B9:3C:5F:7D:42:FC:87:F1:E2:76:4E:30:85:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4b11fec4-b939-3e26-9183-85b26f2fb909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4821::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:0a:fe:c3:6b:a0:10:97:81:43:8d:3e:28:b7:7e:65:f4:d9:
2c:1a:98:b7:50:40:6c:55:06:e4:ac:9d:ee:7c:85:41:b4:36:
97:1f:a3:bb:11:2a:c2:d5:5f:a0:16:29:00:48:d9:56:05:b9:
b9:c0:d3:34:6c:ac:be:75:f9:4a:89:e0:23:1a:19:ab:25:de:
2a:5a:64:94:be:82:bc:96:4d:cc:64:02:3e:98:09:98:4f:0e:
b7:f7:3b:c4:fe:9b:29:2f:53:7f:1c:95:14:27:93:2d:1e:75:
6d:56:16:8a:40:13:4e:de:28:ff:e1:07:0c:ab:02:6e:e3:b1:
ea:06:6d:f6:7b:21:4b:c9:42:0a:a0:a6:04:12:02:be:25:90:
46:8b:a0:08:5e:50:8b:be:e3:fa:d8:94:98:52:68:11:b5:45:
e7:b5:de:54:82:ed:3a:59:d5:75:bf:23:01:92:43:0c:e1:af:
16:41:fe:1d:74:d1:cd:49:95:28:7f:b4:95:ea:43:6e:35:57:
e7:79:d1:88:75:47:ba:61:36:04:7e:e4:da:54:d5:87:7e:1b:
5d:62:56:10:3b:38:63:ae:04:95:3d:8d:01:dc:d1:4b:98:eb:
a0:36:fe:c7:a6:40:b2:44:93:43:fa:e6:46:42:64:ec:b6:c8:
f8:f7:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:44 2024 by rpki-client on console-fra.rpki-client.org