Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/beb2d548-3781-350e-ab49-0190a1029c55.roa
File: beb2d548-3781-350e-ab49-0190a1029c55.roa (raw, json)
Hash identifier: Xon/zOAmPGqZ4Wocdv7KYk4+EbkNK7a7HkJMh9R38T4=
Subject key identifier: 7D:F2:DC:10:72:C9:43:47:47:C8:C9:5A:1C:D0:B4:63:7C:65:45:93
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285841D3DD798356A7F4F93009B420
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/beb2d548-3781-350e-ab49-0190a1029c55.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 15169
IP address blocks: 2001:4860:482d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Mar 2024 23:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:79:83:56:a7:f4:f9:30:09:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=b8b29592-7840-4c28-acd1-41d9c79be9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:ce:e2:55:2c:f5:08:54:34:69:f0:30:5e:
7d:9a:58:91:35:75:e0:5c:fa:25:c8:07:e8:aa:64:
dc:9e:bd:0f:30:98:a2:51:1d:90:86:9e:f3:34:6e:
c0:47:e0:72:fb:ae:5d:8d:60:05:20:80:ac:c5:d0:
78:68:8c:22:39:37:cc:d9:5c:94:88:b0:10:ce:b7:
2b:c4:97:3a:1e:d7:63:c0:eb:ee:c4:9f:9e:ef:41:
a7:e0:26:64:9b:c6:64:47:51:16:63:62:72:f6:ed:
68:73:9b:9c:d7:b2:1c:c0:9e:5a:56:12:e3:12:c4:
32:0d:1c:9e:9f:1e:e9:3d:e0:42:b1:3d:c0:5b:ae:
46:c8:ff:0e:10:f6:64:bb:f2:e7:8d:0c:4c:b4:84:
be:cb:74:98:8a:d6:fd:98:7f:d8:a4:f2:b9:d7:67:
c4:11:4c:e8:43:72:d0:91:5d:64:bf:4c:57:a9:a1:
8f:4d:81:46:7c:6a:b8:57:91:2a:14:8d:1b:d8:42:
91:fa:09:91:18:57:c5:60:93:aa:e1:e0:1d:af:a9:
f0:6f:fe:fb:74:5c:6e:b2:4b:1f:89:46:aa:1f:9f:
59:54:3a:ef:64:29:be:9d:93:74:a3:07:ef:e2:18:
8d:a3:3c:64:76:4b:39:74:79:31:c5:07:67:ec:af:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:DC:10:72:C9:43:47:47:C8:C9:5A:1C:D0:B4:63:7C:65:45:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/beb2d548-3781-350e-ab49-0190a1029c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4860:482d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b6:5e:c0:6d:cd:54:91:68:17:3d:4a:ab:26:b6:1b:ae:54:
d2:82:0e:32:c5:22:a9:af:79:4e:dc:b4:bb:46:71:6f:65:e4:
17:3b:71:4e:b4:fc:2a:91:a8:ac:6d:b3:d7:f2:ff:c8:c2:fd:
41:b7:f6:60:bb:c3:02:d6:94:c5:a1:f4:78:d8:5e:42:0e:01:
14:f2:98:fa:36:68:b8:a1:1c:cd:2c:1b:69:6d:bd:8a:74:ab:
4e:3b:87:34:52:b3:ef:95:aa:ec:2a:e2:e7:05:cc:ab:03:b7:
41:ff:1f:ff:5b:95:2d:bf:d5:44:d9:f4:d9:9b:b0:a3:28:71:
37:ee:dd:8a:aa:7c:e4:59:21:97:7e:3c:2c:0e:fb:f9:7e:f9:
5d:ea:68:e5:5d:eb:a8:6c:3f:81:aa:a6:9c:25:d8:94:8f:a9:
04:42:df:cb:d5:68:b9:95:1a:fc:8a:09:a9:00:7c:1d:a4:08:
c7:6f:50:ac:a1:bb:00:eb:21:6b:f3:ba:df:34:24:09:e7:62:
20:a8:34:37:fb:ce:9b:05:43:84:70:c6:bd:97:9f:55:60:df:
34:04:66:30:9a:b5:8c:f7:4e:6c:0f:34:27:6c:ea:ef:74:2c:
30:14:49:d4:26:10:b8:ea:bc:b5:e7:67:6d:91:b0:7c:a1:87:
91:34:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:42 2024 by rpki-client on console-ams.rpki-client.org