Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdb1da9-3f6c-3529-ae80-c6c2cf1a7acc.roa
File: 3bdb1da9-3f6c-3529-ae80-c6c2cf1a7acc.roa (raw, json)
Hash identifier: AytVU3rbU+3SeDrpuVae9oQMldeHB+HF4x/hCDJQciM=
Subject key identifier: BB:BC:29:51:3C:FC:06:DF:B0:84:EF:46:D3:EB:28:60:FB:56:EF:69
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D1B13E40817B0EA2EE7F13D90
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdb1da9-3f6c-3529-ae80-c6c2cf1a7acc.roa
Signing time: Wed 02 Mar 2022 05:00:00 +0000
ROA not before: Wed 02 Mar 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2028 05:00:00 +0000
asID: 7029
IP address blocks: 2600:5000::/28 maxlen: 28
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:1b:13:e4:08:17:b0:ea:2e:e7:f1:3d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 2 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2028 GMT
Subject: CN=365768b4-c3dc-42c4-bd99-a2eac5784330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:bd:41:f5:27:64:82:90:d8:f2:ff:c0:91:
c8:d4:61:b5:d4:5a:89:03:bc:d7:79:a5:b3:34:87:
d3:9a:3a:11:ac:9d:cc:8a:4a:df:4b:ed:54:48:76:
34:24:79:a6:a7:86:c2:54:88:36:a3:77:03:36:ea:
b3:f9:13:12:2a:58:36:ae:d8:6e:ae:39:cc:5f:0b:
f7:a3:7d:08:d9:50:0a:ab:27:48:fa:63:76:b8:6b:
4b:54:8b:5a:eb:50:9a:ae:9a:64:46:a4:97:f9:3d:
78:bd:a7:9f:e5:05:c1:f2:47:4e:a6:b8:83:6c:b6:
e5:ca:58:e7:7b:98:2d:49:a9:1e:71:b0:f1:8e:c6:
f8:66:16:ac:d9:cd:20:06:16:4a:4d:cb:7b:2d:b9:
29:3d:ef:54:b5:a5:a4:e1:a3:69:a4:f7:91:4f:4a:
78:2d:ed:34:c7:7b:19:27:4f:a3:f0:8d:c8:75:b7:
f8:4b:fc:ea:a7:1f:f0:60:bf:5e:2c:9a:6d:f2:fd:
92:c3:43:56:56:aa:86:bd:f9:9e:0a:32:18:80:7c:
f0:be:b7:95:27:32:22:3e:d4:39:b5:b4:c3:ed:4c:
b1:b3:78:02:f6:29:84:ff:07:26:92:f1:af:6f:8e:
83:67:a2:3a:89:2d:51:25:47:4f:48:3a:ba:33:fb:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:29:51:3C:FC:06:DF:B0:84:EF:46:D3:EB:28:60:FB:56:EF:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdb1da9-3f6c-3529-ae80-c6c2cf1a7acc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:5000::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:fe:ca:88:66:19:c9:af:5f:77:64:17:1a:4d:3f:2b:2a:8c:
1f:a5:a8:89:fc:6b:c9:0f:c5:94:7e:a1:4c:0c:89:93:6a:ff:
5c:2b:28:d3:18:b8:19:69:ce:38:f6:d4:bf:b4:b6:0e:af:02:
a9:86:2a:f3:6f:70:28:c7:97:1a:1b:1b:27:02:04:e9:df:e4:
77:f6:e9:a5:e5:8f:1b:cd:14:f3:4c:8f:5c:a5:98:a6:8c:61:
55:62:b4:db:e3:e1:61:da:66:26:c9:60:11:94:e8:82:0c:d9:
8d:e8:ad:80:ef:74:bf:82:4d:45:17:1a:4f:42:ec:38:f0:3d:
e7:f9:33:a5:5c:d1:b1:05:32:5e:4d:c5:d3:6e:96:d2:48:08:
bf:9f:6f:de:14:2c:c7:1b:9b:1a:76:60:b6:91:ed:f6:69:a6:
88:52:fc:5a:68:bc:52:2e:5d:31:0e:d7:df:82:e2:2d:39:33:
52:2f:3c:ef:48:b9:19:d0:c5:fb:62:a2:97:f2:61:30:3e:b5:
3b:42:03:05:df:ab:9c:37:d8:c8:1b:88:6c:f3:61:6b:f7:3f:
89:26:8a:de:14:b8:4e:a3:46:07:74:84:27:35:49:20:49:80:
56:6b:e3:90:03:79:f8:c4:1a:ed:33:d7:fd:aa:a0:31:4d:5d:
35:7e:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:57 2024 by rpki-client on console-fra.rpki-client.org