Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3562c936-4f86-3b90-98b6-6358a53ba8c5.roa
File: 3562c936-4f86-3b90-98b6-6358a53ba8c5.roa (raw, json)
Hash identifier: Z2GPseE1awiD1jTZsRF0PmwwOCWcBN9rb6ULFeZ8Wgg=
Subject key identifier: 3F:85:5A:CF:B5:7B:B7:E2:1C:5C:A3:B1:C6:4E:7E:E1:2F:FF:B7:37
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858447408D691735826943420D400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3562c936-4f86-3b90-98b6-6358a53ba8c5.roa
Signing time: Fri 05 Jan 2024 14:30:43 +0000
ROA not before: Fri 05 Jan 2024 14:30:43 +0000
ROA not after: Thu 04 Apr 2024 13:30:43 +0000
asID: 25198
IP address blocks: 2001:470:136::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 15 Mar 2024 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:74:08:d6:91:73:58:26:94:34:20:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 5 14:30:43 2024 GMT
Not After : Apr 4 13:30:43 2024 GMT
Subject: CN=90602fc5-9942-43b9-babb-53904b85317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:26:16:bd:cd:b9:54:38:61:53:80:63:e5:
f5:af:bf:ff:a4:b4:32:4d:d2:1d:23:73:3c:e3:ec:
18:cf:51:44:d8:bf:ad:0d:ac:9c:d2:d2:88:b0:fb:
35:bb:82:9a:de:79:ca:18:cd:bc:e3:ff:06:81:5e:
8a:2c:2c:df:37:c8:e1:a3:e9:6f:0e:2e:d1:a7:f0:
06:30:ae:38:48:32:1c:35:96:df:c2:34:06:df:c7:
5e:af:48:54:6e:97:49:cc:11:d5:96:d4:de:e4:51:
3c:a4:df:e7:3a:2b:ce:24:ad:f4:48:51:7d:91:3a:
48:02:1e:2b:59:6e:58:dd:22:9f:50:17:4e:47:08:
b5:e1:9d:73:32:8d:7b:6b:b5:3f:d3:f5:97:bf:a1:
26:53:e8:9b:99:81:e8:27:76:31:c9:5d:0a:e4:01:
3d:54:53:ba:79:d4:46:f4:b8:16:87:14:e0:2c:48:
e8:27:82:00:15:f7:31:31:6c:44:f9:9b:53:dd:bb:
99:e4:71:d7:eb:e4:1f:36:16:96:ba:c4:e8:b0:75:
d8:ab:fe:32:32:6c:27:77:6d:17:65:98:7c:c0:42:
d1:1d:19:c1:7a:70:e7:ab:ff:bb:b5:44:e5:6e:d6:
3d:84:db:77:81:f7:9b:7d:34:fe:c1:10:38:9c:6d:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:5A:CF:B5:7B:B7:E2:1C:5C:A3:B1:C6:4E:7E:E1:2F:FF:B7:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3562c936-4f86-3b90-98b6-6358a53ba8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:136::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d2:a4:7f:df:d8:65:78:33:ae:1b:80:95:02:54:fe:57:19:
3b:83:c9:99:51:f3:cb:04:1c:bb:56:bc:5c:28:6e:d0:d0:05:
89:47:b1:41:26:4c:7f:28:f9:1d:37:78:11:d5:73:97:f4:be:
2f:87:36:e6:a7:63:56:53:e0:00:46:d9:d1:26:8d:8b:49:f5:
ad:c8:b6:b7:d4:a0:8b:90:95:81:56:30:02:87:a4:a7:33:c6:
9a:8d:e9:07:40:5f:b1:9e:10:61:74:e3:6f:ef:b7:bf:4c:0d:
c7:c5:f5:90:5c:1e:f9:e3:77:da:9b:e9:64:84:b3:1a:03:6e:
66:19:bf:40:46:7f:c9:e2:25:b3:61:0b:42:43:df:79:b2:96:
06:06:2a:e5:f3:51:ca:aa:57:36:36:42:44:8e:1f:ce:ac:95:
ac:45:68:f1:65:cd:58:23:d0:36:e7:43:0b:e7:e9:45:3b:bf:
1c:72:4b:ff:49:71:46:45:be:d7:fd:ac:64:00:cd:77:50:ac:
87:e2:72:fc:b6:5e:44:93:79:1c:78:64:05:3d:ed:9a:9e:c3:
5c:3b:75:9c:c6:9e:65:f5:8a:95:98:d9:32:b5:7e:c8:4a:fa:
da:57:eb:23:93:f5:be:57:e9:e5:01:9b:0c:07:a7:b7:22:a8:
8c:8c:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 21:23:10 2024 by rpki-client on console-fra.rpki-client.org