Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02ec5796-a794-30c6-8393-21d49030148a.roa
File: 02ec5796-a794-30c6-8393-21d49030148a.roa (raw, json)
Hash identifier: 4KUjE3zYMv+oQYVF0ucGctYaV5NlqFpsN3aMZc0yu4c=
Subject key identifier: FF:63:24:DA:C9:3D:F3:A3:B3:14:7A:4B:20:37:3F:63:D8:E2:30:48
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440DEA06EC906804BA69400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02ec5796-a794-30c6-8393-21d49030148a.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.187.56.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:de:a0:6e:c9:06:80:4b:a6:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=fdbb16a2-d44f-4f79-9323-2b0adfbc7653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:ff:a4:b6:56:53:3e:40:8a:dd:57:0b:99:
4c:6c:90:c0:fa:80:cd:c4:b7:62:05:46:04:99:5e:
a3:f1:2e:8d:8d:a0:57:44:ac:b9:31:0a:46:77:83:
cc:40:ed:82:2a:3d:7e:01:45:22:5b:51:e8:31:04:
4a:c9:ca:e7:29:cd:f6:69:26:fa:ff:6a:e7:4d:55:
ff:d6:97:09:8d:41:0e:1e:45:10:0f:03:fc:02:ca:
df:f4:88:89:15:04:2d:c3:8f:9a:9a:ee:ff:db:9c:
df:97:3e:bc:9d:5d:ff:25:dd:66:3d:28:b0:47:40:
e3:45:67:f1:a3:d5:1c:a3:88:af:db:35:3f:5d:bd:
cb:1e:1f:51:81:b8:c2:12:30:b2:ce:d6:b7:36:5d:
5b:cd:b9:09:12:f3:30:3f:2a:4c:43:95:1d:6d:d4:
74:9c:50:ef:6f:57:22:ea:8e:f1:9b:3c:a0:25:90:
14:5a:b7:55:6b:54:70:67:42:07:64:ac:f3:e5:70:
4f:22:3a:7b:cf:10:d4:cd:26:1b:9c:b6:03:9b:e1:
97:4e:d6:26:bb:d4:dd:3f:7d:1e:1d:22:ab:17:93:
69:58:8c:4a:c9:9e:d8:78:63:24:91:91:6c:29:43:
4d:bd:fa:b3:ef:45:2a:ee:d0:54:07:90:28:bf:53:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:63:24:DA:C9:3D:F3:A3:B3:14:7A:4B:20:37:3F:63:D8:E2:30:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/02ec5796-a794-30c6-8393-21d49030148a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.187.56.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:90:92:0a:95:4e:dd:66:6c:3a:bb:7f:f6:ac:00:4b:4a:2e:
54:94:59:c1:4d:50:6b:5b:c1:6f:b8:70:f5:1a:e5:35:ed:1e:
50:9b:4c:7d:79:dc:90:a7:8a:20:f5:7b:33:f6:15:d9:81:33:
4f:da:d3:60:55:29:4b:50:a1:60:eb:8d:54:b5:5b:d1:19:27:
e7:f8:49:bc:3a:4a:6c:39:8f:4b:3a:c9:f4:ed:05:c6:41:49:
6d:c9:b6:b4:84:03:70:c7:5d:4c:1b:bc:6c:4c:e3:28:9a:a5:
fc:8b:89:94:6e:cb:ec:0c:e9:b5:38:11:d6:3a:6c:16:49:ff:
44:8c:99:97:32:df:84:22:20:e0:60:c4:9c:cb:fc:6c:b4:60:
79:ad:f4:cd:54:e8:97:de:b5:c6:f5:74:8b:36:3c:19:00:6d:
8d:ec:62:c3:a0:71:28:25:04:81:be:0c:43:b6:75:1f:d8:df:
bf:4f:36:3a:7c:fa:51:b7:34:09:21:e6:38:d4:bb:7c:99:6e:
9f:8e:6c:f5:f0:82:2a:1b:0e:bc:95:0d:58:b4:4b:7e:3e:34:
52:5a:ce:b0:9f:f8:92:a8:c9:c7:f0:52:77:ec:ef:54:cf:93:
1f:8a:8a:51:53:f8:c7:ff:2b:fb:13:d7:52:04:89:f4:ff:7d:
3a:12:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:51 2024 by rpki-client on console-fra.rpki-client.org