Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34a72433-236c-355d-a55e-f6bbc643f3ce.roa
File: 34a72433-236c-355d-a55e-f6bbc643f3ce.roa (raw, json)
Hash identifier: CDo/f9/MAks8VY7xctjhwHXnMpn6vhaVc4FqdABndPw=
Subject key identifier: E4:3C:9F:7C:49:1F:2C:0E:0A:E5:65:92:50:13:C3:44:AD:23:DC:36
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618DF3FBEC26BE9AFB45E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34a72433-236c-355d-a55e-f6bbc643f3ce.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.31.0.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:df:3f:be:c2:6b:e9:af:b4:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=058a37e1-a542-4126-b5bb-b1ed21ff55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:62:60:42:e8:30:95:65:3f:27:78:7b:28:9f:
2e:c4:f5:d0:48:c2:dd:c6:32:3e:62:fe:21:e3:95:
be:f2:e1:4f:16:0f:aa:b3:f7:4c:d5:e2:d9:37:c9:
56:b0:85:34:53:06:43:35:d0:8a:b5:23:e9:ff:ef:
52:4a:8c:e8:d1:46:a9:ba:f6:96:d7:68:0c:bd:1a:
8c:13:f3:52:9d:cd:8a:c6:37:19:82:e3:5e:c3:a3:
a5:86:ce:a0:c6:38:5f:ba:72:ca:ee:fd:02:b2:fa:
17:02:8e:a2:a1:e2:9f:fc:07:e4:f7:14:99:a3:c2:
09:28:a1:78:e5:c6:94:3d:0c:ab:34:70:7b:e1:c8:
1d:11:97:74:ce:9c:f3:0d:22:d1:f7:b2:be:92:98:
19:df:a2:2d:3c:b5:41:51:09:f3:22:a0:c6:2f:af:
04:62:5b:88:0f:e2:e7:c6:fc:fa:b5:b2:f1:9b:2f:
4a:fe:e2:4e:40:1d:0b:3f:ce:fb:23:83:c4:f3:83:
41:e3:59:b7:95:d8:ab:e4:96:f1:e7:f9:94:63:bc:
58:1c:7d:60:eb:c5:ac:a7:8e:e3:f4:bf:96:a5:95:
d4:f7:1d:96:65:bb:6d:d1:c8:c3:1e:51:42:db:6f:
07:b9:c5:15:c6:e2:9c:48:8b:b1:f3:9c:19:d3:28:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:9F:7C:49:1F:2C:0E:0A:E5:65:92:50:13:C3:44:AD:23:DC:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34a72433-236c-355d-a55e-f6bbc643f3ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.31.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:c8:ce:90:1d:32:4a:0a:7d:4e:fd:95:2a:b1:37:ef:94:df:
8d:32:0d:04:54:c3:ac:f9:c9:b1:10:2b:54:e7:37:cf:98:fd:
5a:0e:b0:63:3c:0a:8e:10:f4:e1:3c:ec:c4:e8:dc:cd:d7:55:
c7:e5:f2:c1:0b:31:fe:0d:4c:1f:6c:7c:03:b3:27:f4:4d:a9:
43:51:d3:59:1d:6a:7b:ed:a4:47:d8:07:68:e7:71:e2:55:4f:
54:4f:36:53:07:ea:23:5c:6a:cc:cd:66:46:70:a6:79:f3:e1:
ca:a2:ef:9e:70:08:12:0d:2f:08:7d:d1:16:9f:cb:34:cf:d9:
a2:a0:7d:2d:57:4d:38:cd:7e:85:0b:4e:61:a9:b8:02:63:3c:
42:e7:f5:09:a4:66:cb:2b:ce:0b:32:44:bf:a3:29:a9:26:4f:
ee:8b:d9:1d:23:ad:a7:37:5c:88:7a:ab:ba:30:47:18:60:47:
4a:57:27:38:66:15:99:47:fa:41:b4:0f:ba:8f:aa:75:4b:c7:
1a:58:86:ee:7d:a3:d7:90:9b:2c:7e:c1:e7:38:dd:a2:d8:a9:
85:8b:b0:29:70:f3:db:41:dc:26:93:a4:af:b0:9d:87:bd:3b:
90:5e:26:85:7c:eb:fd:46:31:d7:64:8a:79:72:a4:4c:2f:26:
7e:31:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:19 2024 by rpki-client on console-ams.rpki-client.org