Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47060296-61a8-3d28-8a69-c93a3b7dae26.roa
File: 47060296-61a8-3d28-8a69-c93a3b7dae26.roa (raw, json)
Hash identifier: MFLamuaoJcnJK/jJeZ6n9/yADVBcX+xzgOjqHYrpN4A=
Subject key identifier: CA:3C:AE:B7:1B:0D:76:AB:BE:99:F0:17:EB:D7:4B:EF:7E:D8:C8:D2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66217F914F4196226A177C40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47060296-61a8-3d28-8a69-c93a3b7dae26.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 208.123.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:7f:91:4f:41:96:22:6a:17:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=30857a04-9f04-4c44-b0c5-f4a49fa910e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:2e:3e:9d:43:66:79:b8:d1:32:6d:bc:cd:
e1:85:24:f7:6d:20:b6:07:ac:99:8a:91:26:0c:6d:
b3:9e:a1:0b:45:fc:c3:f4:f9:4a:e1:c9:b9:ac:be:
47:cb:e2:c6:5a:c5:4b:2d:f3:af:c2:d9:33:ea:92:
7c:37:ac:66:68:fc:81:9d:7d:24:e3:96:2d:14:b0:
58:2a:23:63:85:14:35:39:06:11:06:21:34:9d:f2:
b2:5c:33:6d:91:9f:ae:3b:fe:26:98:89:b4:47:f9:
41:13:36:0e:25:f1:bf:8a:2d:22:c0:be:66:d9:f7:
ea:90:95:72:fd:69:d1:d3:18:03:6f:f9:ee:06:43:
4c:87:99:07:9f:03:b7:f5:f7:e5:e7:23:d3:32:85:
df:37:54:bf:00:4b:82:b2:e8:b7:e3:a9:2f:4d:c4:
ea:c1:bc:9e:6f:65:b5:d5:49:3c:18:f1:14:69:ed:
36:0a:0f:38:86:10:07:09:be:28:f2:03:90:00:39:
00:40:4c:d0:0d:42:ed:17:71:81:8a:80:23:7c:4f:
65:dd:4f:2a:cc:3d:e4:56:a0:42:0c:95:0e:22:b7:
34:bd:41:be:33:4a:ed:98:27:53:7a:79:5b:bf:b3:
9d:63:97:1f:39:04:49:6d:1a:59:8a:5e:14:c8:00:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3C:AE:B7:1B:0D:76:AB:BE:99:F0:17:EB:D7:4B:EF:7E:D8:C8:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/47060296-61a8-3d28-8a69-c93a3b7dae26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
208.123.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:74:f5:67:ac:6b:ae:49:13:3d:69:9d:27:09:5e:8f:bb:9a:
e9:f3:3a:30:7a:3a:3e:68:ce:35:c3:25:b7:6e:f3:be:ed:94:
69:9c:3a:0c:73:50:b9:32:ee:e1:2f:e1:c5:c8:fd:02:8e:24:
94:b6:4e:99:40:b8:bf:49:19:cd:21:4a:91:99:e4:34:39:70:
c6:52:61:40:c4:ab:0c:0f:ba:50:d3:f1:41:b8:88:59:b0:4b:
86:64:81:9a:41:f5:5e:80:2b:c5:21:73:6e:01:1f:7a:52:30:
bb:6f:91:7f:58:41:a7:bc:fd:f8:d6:a8:fd:a5:0c:41:81:99:
d3:83:be:d1:89:ad:cb:62:91:1a:7c:63:fa:b3:e2:d7:e4:86:
d7:26:28:c5:78:be:f8:4d:1d:eb:bc:7c:65:08:00:e1:3e:39:
60:54:9c:c0:1f:ea:ec:e5:41:f6:9c:4a:14:2a:15:d2:db:34:
9e:17:7b:ea:73:09:f6:d8:85:67:88:7e:19:c0:74:d6:0f:02:
b4:69:39:8d:ba:63:57:58:3d:6b:f9:4e:03:11:35:c3:db:0d:
43:e1:dc:87:f4:69:5b:e5:50:24:31:a0:d1:46:4b:f1:36:95:
7e:5d:9e:3b:a7:07:40:63:34:82:2b:6e:88:25:53:ab:5a:a5:
85:50:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:21 2024 by rpki-client on console-ams.rpki-client.org