Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30a33a05-55f0-3ad7-beb6-832a02158201.roa
File: 30a33a05-55f0-3ad7-beb6-832a02158201.roa (raw, json)
Hash identifier: nN6DcLCRfvMmgo9FP6FPR2uSq6YtWHvHffedtBlpfX0=
Subject key identifier: 66:1D:46:DB:CC:4B:C3:13:CC:C1:1E:9C:B9:E7:6A:0A:FC:7A:8A:48
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC5C1BE130DF07D82BDD880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30a33a05-55f0-3ad7-beb6-832a02158201.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 5
IP address blocks: 66.32.88.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c5:c1:be:13:0d:f0:7d:82:bd:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=1f4b1788-ce15-4a3f-9c3e-ea1427a2c470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:71:ff:a7:0b:24:e0:93:f2:80:98:5a:72:
cc:27:e9:2a:60:ea:11:77:9e:79:23:17:82:20:7b:
ca:62:74:cb:8f:54:04:5a:0e:f8:c7:b3:60:24:96:
d5:64:a7:dc:e1:d7:28:38:08:01:c5:c8:a3:a3:35:
4a:41:9a:83:6d:f8:bb:60:4b:42:21:94:a7:a2:6b:
50:9c:83:e6:31:e2:2b:a5:3a:6b:fa:21:53:0f:aa:
a6:96:cd:21:05:73:8b:27:3c:4c:46:67:d2:a0:a1:
9e:80:08:05:b6:78:ec:ca:8d:fe:94:03:f4:32:3d:
7f:88:d8:5e:66:50:fa:30:94:84:58:24:42:4f:ed:
e4:ca:a1:b4:70:f6:4c:49:5a:71:a9:58:2b:be:96:
d1:bf:b7:b8:d3:4e:02:96:a2:44:20:c3:84:42:51:
70:f3:7b:c1:36:dc:9b:f1:16:3a:25:2e:fa:38:f5:
72:4e:2a:e7:c6:ec:a9:a4:c7:1a:be:f1:70:ae:59:
95:7e:cc:c3:45:1a:c2:82:e7:7b:ec:5d:ee:8f:6a:
83:33:80:b5:86:d4:8e:16:74:93:04:6d:8a:c0:c0:
c9:67:75:79:f2:58:17:44:ee:72:76:6c:13:53:49:
6b:ec:d0:d0:02:d0:b1:12:13:dc:71:b4:77:3c:36:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:46:DB:CC:4B:C3:13:CC:C1:1E:9C:B9:E7:6A:0A:FC:7A:8A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/30a33a05-55f0-3ad7-beb6-832a02158201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.32.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:17:f3:de:9f:da:b0:ac:41:a7:09:1d:a5:21:eb:20:b2:f6:
c3:a5:5e:cd:0a:6b:24:47:20:07:d7:85:64:80:b8:b9:8b:fe:
b8:ce:dc:1f:72:ef:fe:76:12:e7:01:0d:5f:90:69:15:5d:56:
5a:c4:1a:cf:ef:33:e1:aa:5e:7b:07:8e:e7:4b:62:4e:72:b9:
62:7f:6e:24:17:6b:e3:6d:2e:a8:be:6e:60:5c:81:66:7f:24:
46:66:2c:e0:9a:ef:c0:de:c2:d1:71:9f:40:22:4c:6a:47:6f:
d6:98:67:22:d9:1a:54:05:7d:4e:18:c6:52:86:2c:eb:77:02:
ca:bb:bd:06:6d:d5:7d:13:f5:2a:d8:0f:ed:12:52:00:72:a2:
61:ee:0c:eb:0f:a1:32:41:55:e7:db:ad:7c:0c:d8:70:5f:9b:
33:11:45:b9:2e:d8:f1:41:e2:99:f3:72:9f:05:d3:76:2c:63:
0f:03:a0:ef:40:7a:e1:dd:fb:97:c3:fe:60:ea:6b:69:90:72:
5a:3b:01:d8:f2:f8:34:1a:8b:7a:28:5f:39:c0:33:eb:86:7f:
0e:4f:29:5f:4f:f0:be:02:61:e7:d7:63:aa:e0:34:15:7a:c7:
11:c5:ac:88:6d:57:de:db:66:f8:62:bc:28:df:90:e6:f1:05:
49:6c:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 21:04:43 2024 by rpki-client on console-ams.rpki-client.org