Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e78ad28-b741-3ecc-a580-859404abe563.roa
File: 3e78ad28-b741-3ecc-a580-859404abe563.roa (raw, json)
Hash identifier: vHJ8IrPLccEX2wvH1+8veZLRCPKm6kEmGPyKBDJzNlI=
Subject key identifier: 8C:B3:C1:63:0B:FA:6A:1D:F6:BA:C4:60:50:4C:7A:C7:52:46:A8:65
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FA9CD867851F0F1563B8F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e78ad28-b741-3ecc-a580-859404abe563.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 207.220.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:a9:cd:86:78:51:f0:f1:56:3b:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=1041e1f9-a113-4250-8e08-ad98c8e30285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:48:59:a2:5a:0e:e8:9b:d0:32:a0:8b:4d:
98:2c:72:f0:c6:7b:14:8a:b2:4b:0a:ce:b0:7d:49:
f4:3c:1b:49:b8:24:2d:1e:9e:64:59:56:87:07:a1:
da:81:20:fc:f4:eb:b9:e6:7c:34:63:d1:aa:bf:1e:
78:c9:b2:ec:94:9d:f0:f4:49:a9:b0:b0:7d:31:43:
5d:b8:32:e7:7f:aa:08:59:39:17:6f:a4:85:1c:36:
a2:fa:cc:33:b6:3d:83:45:c8:0a:0c:30:1c:8d:df:
6d:fc:14:4a:a8:9c:42:32:0b:e8:cb:04:ca:f5:55:
e7:c1:4c:0e:db:8f:76:25:24:5b:d8:25:74:9d:56:
6c:41:b9:36:81:ed:de:fc:dd:ad:71:2c:ba:05:59:
d1:39:a9:06:a8:d1:dd:b6:3c:d8:79:f0:67:22:4b:
0a:0c:81:07:87:6b:d8:c2:e7:45:13:78:0c:34:53:
87:01:03:2b:dc:98:c5:ad:f5:66:d6:d5:9a:83:5d:
87:ea:f5:03:80:d2:53:f7:5d:10:dd:fa:5b:fc:c1:
72:7a:32:85:a0:1d:de:28:43:00:12:0b:fa:4e:a6:
02:1e:02:9d:15:c2:6b:5c:ec:cd:2b:37:16:d1:9e:
35:7b:2f:44:e1:81:3a:22:b9:86:ed:e5:09:8c:29:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:C1:63:0B:FA:6A:1D:F6:BA:C4:60:50:4C:7A:C7:52:46:A8:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e78ad28-b741-3ecc-a580-859404abe563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
207.220.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a9:70:a1:22:2b:5e:f6:90:0a:1d:3b:c4:c7:79:97:2e:b0:
9c:03:c5:4f:4a:12:41:b7:2e:fa:20:62:dd:b1:27:93:00:74:
a1:ae:99:38:19:96:3d:84:b5:ad:a0:5e:3a:7b:05:17:df:50:
8d:3f:23:05:71:d3:23:81:f5:13:30:e2:bf:00:b8:b1:2f:4c:
59:0f:29:08:8d:e0:5b:59:e7:91:ab:9a:2e:53:46:75:9f:dc:
62:65:39:66:7a:af:ee:57:01:e4:d2:eb:b7:16:4c:6d:00:7a:
9b:7a:b1:22:34:11:74:aa:13:ca:c5:8b:9f:a7:6e:45:12:17:
57:8b:b9:d5:80:ee:af:86:44:1f:aa:61:55:e1:00:86:5d:ba:
cd:d6:a0:12:61:e4:4b:c8:93:19:84:1a:a0:45:43:4d:da:b0:
05:87:dd:3c:cf:69:27:be:d7:e3:27:4c:f2:c2:dd:b1:1d:ad:
0c:0e:91:a0:87:09:32:0c:ad:2a:f7:dd:e4:b9:89:26:1c:83:
89:ff:83:5f:82:3a:3a:49:14:4a:c5:72:98:d7:5f:57:53:7f:
24:7b:2c:1e:39:42:1f:e3:93:25:64:b3:3b:82:5c:be:33:b4:
3d:2d:06:f3:ec:5a:bf:a2:70:e2:5d:48:43:b4:21:87:33:64:
42:72:b1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:20 2024 by rpki-client on console-ams.rpki-client.org