Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28598a1a-8f77-3d97-80ed-3b4e1ff419fd.roa
File: 28598a1a-8f77-3d97-80ed-3b4e1ff419fd.roa (raw, json)
Hash identifier: 3mvmLYx5+aKAIFBue1UBf6QNGeoEtNkXbr0hzKG7s/k=
Subject key identifier: 3B:F2:EB:B9:D2:54:CE:15:30:61:13:46:01:1E:4D:39:49:F4:12:B1
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F356DE54CB15169A0DFFE40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28598a1a-8f77-3d97-80ed-3b4e1ff419fd.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 66.6.64.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:35:6d:e5:4c:b1:51:69:a0:df:fe:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=81f75771-35d2-478b-bf37-898454ec75ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:3d:99:e4:0e:5e:bc:3b:26:8b:aa:bb:84:
c0:78:b8:b5:00:19:b0:08:e9:d8:e6:96:22:3c:f8:
3e:58:99:07:1d:a7:ff:d8:22:8b:ee:8e:9c:6e:47:
16:53:c3:8f:5b:ac:bc:59:8e:89:d9:e8:4b:c2:fb:
21:07:81:f4:a1:20:cf:bf:60:5d:5f:ba:11:bd:69:
a5:69:31:33:ff:f4:76:0e:05:0d:65:d8:cd:7b:a3:
0b:d1:0f:a0:6a:ee:bf:4e:38:e1:43:57:ef:1f:62:
60:76:54:33:26:55:49:df:65:ec:78:54:e0:6d:21:
8b:c2:a5:15:95:91:6b:a3:d7:aa:15:2d:66:02:28:
02:7c:12:4a:b3:21:2c:d6:6d:ee:13:60:a4:5b:68:
27:05:80:8c:0a:85:63:76:51:17:7c:e3:64:43:34:
5b:d9:18:df:59:c9:62:46:8d:a4:b9:2c:a0:0f:91:
d0:d7:f7:6c:21:29:dd:a1:ff:0e:e8:4f:54:af:4b:
0d:65:c0:12:5a:f1:06:d2:06:ed:8a:83:8f:1e:82:
f2:99:d6:b8:b5:b7:37:7d:0d:9e:57:87:2f:ab:26:
53:df:04:63:1b:d2:03:bf:c8:4c:0e:1a:8f:42:28:
e1:cc:ec:89:26:33:9f:ed:41:c4:28:d4:72:96:04:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F2:EB:B9:D2:54:CE:15:30:61:13:46:01:1E:4D:39:49:F4:12:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28598a1a-8f77-3d97-80ed-3b4e1ff419fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.6.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6e:0e:59:ef:15:8c:8b:2a:31:06:88:c2:1f:19:61:ae:d9:
11:d1:aa:05:4c:c2:69:f8:48:c3:5f:ab:9b:a0:9e:1b:a6:f8:
33:c5:13:93:24:66:19:42:ec:14:dc:9f:ac:1f:9f:ba:97:6a:
55:83:03:b2:4d:63:97:7e:ea:a6:5f:51:5c:53:58:17:37:5d:
38:4b:7e:16:52:e3:1a:5b:3a:09:75:a9:ca:23:ca:5b:7b:23:
39:74:ad:e8:04:93:24:0e:49:e3:c1:52:3d:fb:ba:d1:6d:e8:
ae:61:96:ac:d3:75:87:9a:71:7d:b8:78:07:1c:57:52:4d:87:
e2:51:cc:c8:58:60:c7:3e:2c:be:cf:86:99:1c:1e:22:7a:aa:
81:f1:ee:0f:6b:0a:ff:49:a5:ba:d5:39:0f:8b:e6:e1:15:4d:
91:f1:a1:97:e9:5a:e4:9a:55:1f:0a:87:24:25:8b:6b:2b:65:
93:95:bf:45:8f:8a:35:de:1f:1a:b2:b1:36:4e:c3:3d:4f:2a:
00:77:23:52:b6:29:b9:ba:80:52:1b:43:41:8c:de:c6:02:45:
59:7d:7a:2d:36:f6:1f:22:ed:55:2c:ee:14:c8:b5:b9:62:84:
30:bd:84:91:5d:83:94:12:05:d9:93:e8:10:eb:bc:76:05:b4:
a3:7c:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:55 2024 by rpki-client on console-fra.rpki-client.org