Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2efdae70-3aaa-3650-933f-597ffdb36e58.roa
File: 2efdae70-3aaa-3650-933f-597ffdb36e58.roa (raw, json)
Hash identifier: 30tTn7E7O269eQ78lw4ke3Fbr1QMY/iVOvTvs5UF6AI=
Subject key identifier: B8:72:09:A6:06:8A:85:AA:35:C4:DD:C6:28:31:26:71:4C:F2:1D:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847BEF6C33F132E5983B1976700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2efdae70-3aaa-3650-933f-597ffdb36e58.roa
Signing time: Sat 02 Nov 2024 13:00:42 +0000
ROA not before: Sat 02 Nov 2024 13:00:42 +0000
ROA not after: Fri 31 Jan 2025 14:00:42 +0000
asID: 397103
IP address blocks: 2001:470:35f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Nov 2024 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:be:f6:c3:3f:13:2e:59:83:b1:97:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 2 13:00:42 2024 GMT
Not After : Jan 31 14:00:42 2025 GMT
Subject: CN=ae67411c-fbde-44a1-9d59-eaa8dbeeb28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:0b:c7:37:ee:17:63:c1:93:a3:45:2d:98:
44:d0:68:78:04:79:a9:17:3e:f2:a4:90:18:ca:7c:
f0:cf:18:5b:2f:be:be:1c:d0:df:a5:c6:a7:b4:ec:
47:4e:f6:22:ec:97:b1:7a:eb:33:eb:d5:6c:68:23:
1f:8a:31:c3:0d:f6:e4:e7:30:d5:d0:5d:cd:b8:e8:
07:1e:51:85:ce:e1:cf:fd:6d:50:13:12:f2:93:86:
e0:48:49:cb:d0:f1:a7:15:87:f2:34:3e:3f:35:b3:
34:6d:cd:84:f8:4f:74:de:d6:b5:78:d0:bd:30:0a:
93:04:aa:0e:aa:71:e1:79:af:05:9c:04:99:aa:95:
86:f2:29:65:d1:7f:3c:8b:4e:1a:a2:5e:75:a0:e4:
a1:49:67:24:75:93:e0:f2:c3:39:aa:36:f4:d1:99:
f5:71:f9:91:6a:c3:9f:87:08:3c:c5:3b:45:0e:8e:
da:3e:aa:d0:ad:87:08:fc:14:76:cb:db:eb:0e:ea:
fa:aa:36:e2:55:45:cd:04:88:bd:9a:09:d8:7f:b6:
ef:81:53:69:1e:03:fb:4f:24:95:56:e8:11:b9:43:
4a:62:96:47:85:2e:b8:3d:e2:62:c3:f2:66:d0:e5:
fe:16:f0:54:67:ee:19:55:90:d2:6b:b6:89:94:6d:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:09:A6:06:8A:85:AA:35:C4:DD:C6:28:31:26:71:4C:F2:1D:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2efdae70-3aaa-3650-933f-597ffdb36e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:35f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:88:6a:5d:ed:41:a4:1f:4f:96:e3:79:c6:06:63:53:60:9d:
3d:79:ef:9c:bc:b1:58:0f:0d:d4:6a:7f:2f:f4:22:73:d8:31:
d1:53:40:b9:38:aa:f8:60:f5:1c:4c:99:c6:9f:53:f3:80:4b:
2a:26:ae:7f:cc:57:46:1e:d3:78:d5:82:a9:bd:3c:13:93:75:
06:5b:7e:48:48:28:1d:00:78:a2:35:56:86:0d:a7:8d:e6:0b:
87:09:e1:7f:b3:0b:5a:27:9e:b5:04:b5:8a:30:a8:9a:fb:bf:
49:39:98:a4:cb:b2:9a:84:ae:5f:77:ca:01:bc:c3:13:fe:cd:
43:47:6e:79:49:32:6b:99:ad:34:cd:3d:06:60:73:c9:9a:53:
88:51:e0:2a:74:5b:da:96:5d:d1:12:9e:1a:ee:4d:6e:d2:3e:
d4:67:57:0f:33:2c:67:6f:7b:3f:fa:eb:95:94:6b:5f:64:cd:
2a:55:a7:f6:79:5c:23:bd:a1:de:63:a5:4a:af:d6:d8:db:5b:
cd:8a:16:f2:5b:de:ac:f1:77:d1:44:40:90:07:99:83:ec:60:
2e:da:9e:f4:c1:71:45:c8:64:9c:ee:31:01:55:4e:a9:3e:a1:
9f:42:ae:1d:e4:5a:ea:e5:d9:c3:7d:60:7e:e9:50:f1:00:0c:
67:ef:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 22:07:17 2024 by rpki-client on console-ams.rpki-client.org