Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9901e6aa-1947-3fea-909f-b6ce7c827082.roa
File: 9901e6aa-1947-3fea-909f-b6ce7c827082.roa (raw, json)
Hash identifier: VJGopu5SGSMd/KtLMgRp29y/DcScspyo1qiYeq2WEJ8=
Subject key identifier: 36:D5:F5:5D:A6:F0:81:77:85:C3:51:83:B2:C0:30:41:CF:2A:A8:BB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DDC5C099EEABC0EEC7DEC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9901e6aa-1947-3fea-909f-b6ce7c827082.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:4832::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:c5:c0:99:ee:ab:c0:ee:c7:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=6e7d9135-7f24-4010-aca9-504db7879c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:0b:b8:7f:9e:11:bd:bb:ae:41:74:dc:9e:
a5:fa:99:f0:18:49:ec:91:83:ae:7c:1a:4f:24:2e:
f1:bd:3e:30:45:fc:94:af:b8:4f:77:16:c7:bf:d1:
3e:60:88:2c:ec:11:11:a2:2d:b9:b1:fe:a2:71:a5:
f5:f1:be:16:1c:ed:3d:c8:ef:b6:06:e0:5f:14:f0:
07:6a:bc:8e:20:af:cf:6b:ff:0a:88:1b:fe:a2:08:
60:db:b0:47:fa:c6:ae:4b:14:0c:dd:99:75:eb:e7:
fc:f5:d9:03:e2:1d:d6:1f:d9:e8:be:ff:c5:3b:4c:
e4:ac:48:fa:c4:2d:ff:54:7e:b4:88:81:f0:0a:97:
56:76:3b:73:de:30:d6:f0:ac:07:19:c1:b5:72:56:
74:d3:70:c9:ba:15:35:ea:4f:b1:78:be:5b:10:4d:
9a:26:11:1c:8a:42:18:ac:5b:9c:04:3a:bd:32:0f:
fc:0a:7e:b5:b7:6e:40:3b:7a:90:d2:86:2a:8c:1f:
aa:89:93:f6:11:e2:8e:d0:4b:db:37:4b:80:35:86:
b4:93:ab:9b:f9:35:71:f0:aa:4d:15:2e:ef:94:11:
c9:f9:fa:bd:70:39:e5:e5:28:8a:d3:4c:22:4b:53:
d3:bf:11:5d:2c:9e:01:7e:2c:e7:6c:ba:1f:46:1a:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:F5:5D:A6:F0:81:77:85:C3:51:83:B2:C0:30:41:CF:2A:A8:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9901e6aa-1947-3fea-909f-b6ce7c827082.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:4832::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:42:fb:22:9a:98:0c:24:d5:61:84:a0:4a:39:2e:a8:bb:49:
c5:15:2c:99:ca:b0:4e:e6:8e:33:dc:30:25:e1:a0:70:ea:c9:
ab:82:53:c6:0d:49:f4:50:3d:72:3a:6d:2a:ad:86:fd:a5:c3:
90:8c:1c:a7:91:a5:02:59:48:4c:15:7e:31:77:d1:21:34:3f:
fb:66:21:25:db:8c:7f:0a:5b:2c:18:fc:77:2f:3b:9a:2f:47:
f2:4d:af:e1:50:53:64:48:05:ba:49:aa:fc:67:09:3d:83:fa:
6e:b4:61:59:eb:3f:37:4a:75:ee:62:d6:c5:a7:59:94:7d:96:
40:56:16:12:f6:76:1a:04:9d:ea:59:b8:5b:12:73:d5:60:60:
9e:1b:cd:4e:5a:e1:2e:34:7f:e7:66:de:a8:31:47:b3:97:64:
11:c2:ad:7a:7a:05:74:7f:f4:d5:cd:4c:9c:f4:da:2f:9d:98:
df:96:9e:95:d9:96:f0:8e:5d:4f:ca:77:fb:dd:a2:03:c4:68:
72:ee:0c:c4:03:6f:b3:70:7e:ad:9b:b2:b4:e9:d5:29:93:25:
9a:d4:2c:0d:fd:36:af:42:d5:9a:6b:c4:e0:d3:3a:11:d5:dc:
ba:18:53:f4:df:ad:a9:44:4b:8e:83:ca:25:63:16:8b:5e:44:
65:25:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:47 2024 by rpki-client on console-fra.rpki-client.org