Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/0ed45cbe-89b6-3a23-8265-deba7093bdc9.roa
File: 0ed45cbe-89b6-3a23-8265-deba7093bdc9.roa (raw, json)
Hash identifier: PjkgAJNgllu1yflkk/urJMz4w5day/mOtncRZLUszCA=
Subject key identifier: 83:9F:99:03:59:42:CF:3A:08:A6:85:08:EB:ED:C8:DB:EB:90:1B:9D
Certificate issuer: /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial: 010D0C9F43285846398430E2DFC8BFCF5FDC0000
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/0ed45cbe-89b6-3a23-8265-deba7093bdc9.roa
Signing time: Sun 16 Jun 2024 01:00:26 +0000
ROA not before: Sun 16 Jun 2024 01:00:26 +0000
ROA not after: Sat 14 Sep 2024 01:00:26 +0000
asID: 398355
IP address blocks: 64.112.124.0/24 maxlen: 24
206.168.212.0/22 maxlen: 22
207.2.123.0/24 maxlen: 24
2602:fbdf::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jul 2024 15:49:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:39:84:30:e2:df:c8:bf:cf:5f:dc:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Validity
Not Before: Jun 16 01:00:26 2024 GMT
Not After : Sep 14 01:00:26 2024 GMT
Subject: CN=2ab38aba-0030-4b61-98b0-a2d657d11382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bd:ea:b7:a1:87:34:12:50:93:c4:3e:b3:82:
88:f3:e2:93:7b:0c:73:c3:7b:e5:f0:3f:73:4b:68:
c7:cb:a0:d7:3d:01:83:7a:0a:f4:06:d3:a9:d4:bb:
8f:f4:fe:5b:d7:c0:00:2d:54:64:14:fb:d0:a3:a2:
6f:0f:86:46:00:84:a9:cb:de:87:85:88:35:42:9b:
43:b9:46:75:86:1b:81:2a:f0:83:c7:7a:fd:aa:ef:
80:5f:f3:3a:27:42:ea:0b:f0:67:da:27:92:9c:68:
59:c3:1b:ea:68:2c:d9:f2:15:dc:6c:a5:f5:c0:dc:
8d:8b:f1:bb:04:f0:5f:e2:50:f3:1a:4c:17:9b:fa:
3f:b8:25:42:ad:a1:26:7b:98:f9:35:90:d9:52:18:
57:cb:0c:72:54:c9:ec:82:8d:9e:bd:68:20:bd:68:
d2:37:55:17:25:07:cd:a8:9c:21:21:54:08:9c:3a:
d3:f5:0c:2c:50:df:ff:31:f5:0f:04:6c:f8:82:fb:
1b:9e:0d:d3:91:ef:28:e6:a4:e4:9d:8a:d0:c7:86:
68:14:a5:21:f2:e1:af:b7:21:cf:02:bd:55:92:a2:
86:4b:3d:2a:d8:42:0d:a0:a7:de:16:7a:77:f2:10:
6b:6d:2e:d9:ff:63:ca:a4:a2:b5:47:33:c9:63:b9:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9F:99:03:59:42:CF:3A:08:A6:85:08:EB:ED:C8:DB:EB:90:1B:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/0ed45cbe-89b6-3a23-8265-deba7093bdc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
X509v3 Authority Key Identifier:
keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
sbgp-ipAddrBlock: critical
IPv4:
64.112.124.0/24
206.168.212.0/22
207.2.123.0/24
IPv6:
2602:fbdf::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8a:05:78:b4:cc:35:36:66:68:6b:05:c0:72:db:9e:66:24:
71:af:c0:98:6e:ed:54:6f:4f:7e:2f:67:dd:69:0c:d7:ed:bf:
26:fa:76:15:b0:3c:89:20:7a:bb:e3:fd:bb:3f:7f:e2:55:6c:
de:ac:39:60:cb:bd:90:b0:26:a4:1f:f0:45:46:e2:e8:d3:ee:
f2:78:b1:a6:da:dd:24:78:fb:5e:94:e5:30:8d:25:29:ca:b2:
ad:f7:d1:2b:96:7d:7e:99:44:e4:e4:2c:7b:9f:0e:64:47:e6:
6c:39:e8:39:f7:1a:66:b1:cc:09:db:e4:2a:69:17:92:0f:27:
4d:6b:ef:71:4b:70:56:55:9e:db:6f:5b:4e:a8:d1:eb:aa:fd:
3b:aa:6b:5e:8e:07:bc:8f:8b:b7:3d:c0:c9:31:a6:b4:e2:6e:
b9:d9:5c:a3:68:62:9a:7b:bc:50:e1:7e:50:83:13:93:31:78:
f4:97:8a:05:be:c1:47:3a:f1:99:b4:e2:91:cb:66:23:15:c8:
02:0b:81:52:99:0f:65:c3:59:6e:7f:d4:41:53:43:30:d8:6b:
a1:de:55:35:84:31:33:16:99:ab:ac:10:8c:62:b2:28:4b:df:
ec:71:91:86:69:32:64:9b:47:bb:cf:91:0a:3c:96:5e:72:bb:
bd:a1:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 17:15:52 2024 by rpki-client on console-ams.rpki-client.org