Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f06dd8c4-ccd8-34f9-8a8a-fe74db952f70.roa
File: f06dd8c4-ccd8-34f9-8a8a-fe74db952f70.roa (raw, json)
Hash identifier: /zJRrKkHJEFT69SNAe751trQ2MBNuyDC7kskj4r9CPI=
Subject key identifier: 73:F6:72:39:CD:A6:14:1B:3B:06:85:30:EA:17:C4:3D:90:73:6E:F6
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F432858449423BD5BA6DDC519ACE8FAC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f06dd8c4-ccd8-34f9-8a8a-fe74db952f70.roa
Signing time: Wed 17 Jan 2024 02:30:47 +0000
ROA not before: Wed 17 Jan 2024 02:30:47 +0000
ROA not after: Tue 16 Apr 2024 01:30:47 +0000
asID: 38949
IP address blocks: 2001:470:1eb::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:94:23:bd:5b:a6:dd:c5:19:ac:e8:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 17 02:30:47 2024 GMT
Not After : Apr 16 01:30:47 2024 GMT
Subject: CN=45c26cec-a6da-452a-b726-15749180053b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:45:de:d3:e1:7d:45:f9:95:ce:95:b0:4f:
4e:94:00:82:93:3c:f0:b8:7d:49:3d:5d:b9:61:e0:
d4:cf:38:fc:b4:64:e4:00:c5:cd:56:74:de:66:fb:
a2:44:52:b3:a8:26:fa:56:94:1a:f9:93:51:64:89:
63:26:93:62:0b:eb:28:bf:26:99:78:6e:47:70:99:
0c:0f:45:04:bb:a2:ff:af:98:a4:f8:77:a4:8d:e4:
65:5b:41:96:9b:12:95:93:3d:5c:73:d2:ab:02:b6:
01:63:0e:90:be:9d:89:8d:e7:85:b0:c8:8e:b8:18:
68:f2:6f:a6:81:5d:ce:70:4c:09:51:55:14:dd:bf:
6f:33:7d:ae:f0:bb:02:01:30:48:db:e5:eb:10:2f:
9d:03:a6:45:5b:f0:2c:2f:9c:eb:54:75:b0:32:e1:
e4:9c:be:00:0d:e1:d2:f2:03:5f:fa:5d:32:48:ff:
77:ae:dc:cb:02:e5:f7:d9:7b:e0:0c:fc:1c:76:ce:
cc:ba:03:20:f4:be:9f:d4:5f:30:fb:b0:3f:58:9d:
20:17:46:95:25:61:7d:02:fa:8d:17:fb:f2:02:88:
15:0a:80:1f:ab:b0:0d:51:39:dc:fd:a3:13:95:0f:
2c:07:1f:07:53:4e:9c:57:f7:e2:f8:d0:1a:77:77:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:72:39:CD:A6:14:1B:3B:06:85:30:EA:17:C4:3D:90:73:6E:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f06dd8c4-ccd8-34f9-8a8a-fe74db952f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1eb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:2a:3a:62:5b:db:6e:8c:3f:53:28:fc:2c:47:66:c4:51:92:
f1:b0:b0:cf:1d:83:c7:9b:8c:de:72:e7:d0:a9:66:9a:fd:97:
fe:03:51:af:64:64:31:39:bf:ed:1a:9a:9b:88:6d:e5:4e:d9:
84:12:ee:8d:85:c2:92:78:15:85:da:ab:bc:74:b8:bb:8e:cb:
ea:0d:61:79:79:bd:4a:8f:b3:fc:87:6e:06:a1:78:46:60:ee:
45:1b:f9:38:20:f6:32:79:4a:02:1f:5f:6f:c0:c1:f4:7f:95:
9d:c0:2b:ef:35:f9:23:e2:a9:63:ba:1c:f1:ca:45:7f:6c:07:
b8:dc:72:e7:c6:e8:f8:55:dc:40:b2:1f:d9:42:91:aa:e5:e3:
a3:9d:22:12:fe:4e:4b:53:db:31:0b:e7:e1:36:cf:58:d8:7f:
cc:5e:9b:d9:aa:d0:99:a7:80:d0:06:1a:b4:e1:42:ac:41:16:
d4:7f:e7:4f:9a:2a:ce:97:89:a4:6d:e4:c1:9d:0b:30:25:3b:
f2:59:fa:25:35:1c:fa:f7:4f:ad:63:5f:14:07:4c:0b:29:fa:
f7:b6:03:bc:ee:b4:cb:46:f9:cb:32:f2:a5:69:0b:6c:bc:40:
81:c8:4d:48:fc:6a:75:ce:f5:26:45:ca:97:7a:6d:fc:24:00:
00:68:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 23:09:27 2024 by rpki-client on console-fra.rpki-client.org