Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/497f7c58-282d-31ce-9cef-1799089222ec.roa
File: 497f7c58-282d-31ce-9cef-1799089222ec.roa (raw, json)
Hash identifier: +CDetALrvQrq9T/eOALg63BrTh2RnV46nGJBms4C73o=
Subject key identifier: 27:E4:5F:90:9D:0C:FC:7D:6A:69:30:DB:0A:C6:D4:68:0D:C9:8B:1A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F58C971BEDDD8918C889BC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/497f7c58-282d-31ce-9cef-1799089222ec.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 199.119.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:58:c9:71:be:dd:d8:91:8c:88:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=f23c0f9c-f7aa-4e1b-a746-98e46c45e73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:93:da:86:ce:ea:3d:9b:6b:fc:85:10:94:
07:38:68:b0:dd:74:e5:8b:8a:f6:3f:6e:52:aa:24:
7f:69:12:d7:1d:30:9e:3b:e8:55:8c:76:b7:c0:0f:
f1:24:9c:05:50:50:44:ff:4a:0f:e3:66:ea:ec:ba:
24:64:18:86:bc:af:b6:bd:e2:75:c2:93:98:c2:00:
b0:74:43:90:bf:f0:68:15:96:ff:5b:f6:32:e7:98:
08:b4:3c:39:2e:74:6c:2f:1b:9b:9e:09:6b:57:6e:
42:3e:ac:c5:6a:56:00:d0:d4:1e:db:2c:fa:ee:d7:
65:c3:ae:04:02:d3:50:94:6e:a8:d7:ec:4a:41:1a:
4d:fc:69:0f:f8:ce:50:e3:0e:45:5f:4f:d3:02:a6:
de:9d:06:6f:d4:58:31:af:fd:37:ed:cf:77:ff:4a:
b2:db:e7:02:05:c9:be:e4:b8:4a:b5:fe:f8:bc:b1:
5f:fe:74:a2:02:57:9e:f6:a7:70:d8:17:f2:e4:65:
0b:0a:2b:e6:7e:d9:60:04:99:3b:a5:f7:ba:6d:90:
e4:16:e6:a4:62:38:40:d6:dd:d9:6e:58:2d:7f:98:
51:7e:cc:01:00:6a:2e:06:b7:30:34:28:77:4f:bb:
eb:07:4f:12:66:2d:e5:2d:86:4c:7e:fb:95:6c:79:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E4:5F:90:9D:0C:FC:7D:6A:69:30:DB:0A:C6:D4:68:0D:C9:8B:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/497f7c58-282d-31ce-9cef-1799089222ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
199.119.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:8b:ec:a9:90:d9:2d:a7:46:7d:94:41:5b:13:af:9d:11:f6:
71:b9:b4:89:4c:95:4b:0f:75:97:18:a9:af:f7:81:c9:fa:4b:
33:06:51:55:3c:6e:78:24:42:7b:1b:69:a1:40:4a:01:e2:4e:
97:75:c5:fd:f5:9e:0f:eb:1d:79:e4:1f:0f:1c:93:bf:be:98:
35:51:48:7f:99:da:62:a3:8c:c1:38:50:2b:6e:bd:f7:d5:04:
32:87:e0:da:cb:26:30:ed:dd:87:da:49:5a:0d:f0:1e:fd:39:
a7:9b:c6:46:c4:54:c8:35:a6:b0:4a:1c:ba:bd:98:5c:33:4e:
57:91:b2:9a:6e:af:52:18:c2:9a:a2:c6:fe:2d:4e:13:2d:9a:
b4:d6:94:ae:1b:0e:bc:1f:3b:e8:9d:be:66:69:53:da:fc:5a:
0c:5c:e8:ed:e4:26:c6:e2:b9:e5:02:e7:1d:75:2f:b3:d5:27:
b8:bb:70:65:18:5b:af:5a:3e:68:4f:27:74:99:03:f0:ed:66:
fe:6e:26:6a:80:39:95:e3:45:5f:63:11:a6:2f:23:f0:6f:2d:
c8:af:60:3f:ff:7d:8a:ed:31:68:af:af:c1:0f:6e:b2:50:e2:
92:9c:9d:3e:01:6a:db:d9:27:c9:12:8b:59:39:2c:29:0f:93:
84:8d:01:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:21 2024 by rpki-client on console-ams.rpki-client.org