Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ac4b3aa-65c0-30d8-9379-9a99549cfccd.roa
File: 0ac4b3aa-65c0-30d8-9379-9a99549cfccd.roa (raw, json)
Hash identifier: iO9IPQhUOIVmAGjFN2u/OASAUOwVZsmlx9ir6zVcUoA=
Subject key identifier: BE:8F:18:E9:B0:3E:C2:02:1D:62:6C:C8:A2:1E:60:DC:A9:F0:F5:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661925B50B16344CEB7E6AF3
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ac4b3aa-65c0-30d8-9379-9a99549cfccd.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.31.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:19:25:b5:0b:16:34:4c:eb:7e:6a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=3ebbc8b5-f72d-4914-a9d3-b6d20c40a2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:85:a6:44:25:6c:c4:c3:09:0f:b5:40:49:
1a:5a:b7:ea:24:51:9b:8e:16:7f:79:85:c0:e5:f9:
ab:2f:a3:ba:6e:ee:56:3b:fa:f4:1f:81:aa:9c:32:
b4:83:39:f0:06:64:c5:32:9b:0e:a4:3f:ce:45:85:
2a:6f:d8:b6:ac:ad:f6:c2:65:08:6d:0b:96:25:74:
f5:29:e8:e7:49:b7:8b:87:04:62:34:19:bc:38:a3:
ea:09:93:3f:4c:d1:b3:3a:18:08:d6:f7:f7:98:ee:
cb:c8:8d:60:08:5e:26:a6:e1:be:36:dd:68:c2:12:
60:60:46:a4:88:46:21:8a:03:f1:eb:3f:ec:39:2d:
61:4a:3f:4b:47:9d:c3:55:0b:76:52:f8:8b:d6:9f:
09:67:ea:e1:d6:bf:d6:4e:73:fb:a2:f6:2f:17:a9:
6e:60:b6:dc:fc:1e:9a:b5:af:7b:3e:b2:62:c0:cc:
9f:80:55:1d:56:33:c3:c0:cb:49:d8:25:ef:78:78:
40:a1:e3:1a:47:79:60:c1:96:02:46:02:50:1a:ce:
90:4a:7d:94:21:be:42:7a:4f:fd:42:8f:7a:15:d9:
21:0d:24:02:a1:56:c1:c3:89:67:45:e6:74:6f:b9:
21:22:89:f7:98:a4:37:ee:20:d2:32:6f:45:d6:e5:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:18:E9:B0:3E:C2:02:1D:62:6C:C8:A2:1E:60:DC:A9:F0:F5:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ac4b3aa-65c0-30d8-9379-9a99549cfccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:61:b9:85:85:f5:91:16:ca:e0:de:bb:a8:7d:a0:f9:ed:91:
19:70:6b:b8:cb:cc:aa:91:89:7d:74:89:44:28:f5:50:0c:9a:
b2:0d:1b:52:91:69:6a:fe:92:7b:78:0a:ab:67:c3:29:6d:ed:
cf:09:5e:28:70:46:ac:b3:c0:c8:16:9f:c7:ae:79:ed:32:b4:
fb:15:49:c6:fd:02:e1:9d:7e:6e:42:a0:9e:67:72:68:0f:c1:
6d:27:b0:e0:ad:60:5b:35:03:9c:72:3f:2e:78:06:de:5a:e9:
c5:01:32:a5:25:9c:94:77:a5:50:81:44:56:99:7b:4e:7a:16:
39:18:a7:94:37:79:29:e6:e6:a5:0f:c5:85:0f:ee:9d:44:35:
d4:40:0b:eb:a7:23:8e:64:1e:32:3f:78:99:00:1a:b3:67:fc:
a0:97:56:92:7b:ac:59:f6:86:83:d0:71:7d:dd:c4:8a:33:7d:
01:88:27:67:9c:2f:d8:ac:b1:13:17:6e:ef:48:a5:7d:7e:bf:
04:36:25:45:30:82:f9:fc:9b:0d:48:ab:b1:ae:ec:8a:94:b1:
57:2a:9b:dc:38:23:8e:60:fd:5f:b3:e1:5a:97:f7:09:12:78:
6c:92:35:5d:40:36:42:84:b9:53:53:b2:ed:c1:4b:55:db:8d:
e7:ea:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:52 2024 by rpki-client on console-fra.rpki-client.org