Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a1f197c-8b74-320c-b559-2d98bbc69e4d.roa
File: 4a1f197c-8b74-320c-b559-2d98bbc69e4d.roa (raw, json)
Hash identifier: qa/vpFlmLPbtzmAIXor0grQoeZHew//gLJbnYiQgxrs=
Subject key identifier: D9:8A:CB:1C:03:1A:E3:1A:79:13:EA:4A:B5:3C:0C:F8:2D:D3:11:49
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA14A08344B3A67A1FD458F80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a1f197c-8b74-320c-b559-2d98bbc69e4d.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:1900::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4a:08:34:4b:3a:67:a1:fd:45:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=4d723c11-d405-41b9-a4b9-e27256ad68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:32:fe:8d:b1:47:ce:2f:c0:b1:51:e1:e5:
41:7f:7c:20:c2:f1:d7:d8:1d:2c:98:e9:e2:dd:57:
72:37:91:06:5b:39:0e:30:a2:14:80:fd:36:4f:8c:
6d:8a:47:ea:c9:9d:e3:10:4b:ec:1c:83:a7:0b:4b:
cf:91:3d:1f:46:39:fe:12:ca:a8:0d:aa:93:b5:a5:
1a:76:88:b8:af:c7:52:17:ef:86:15:3d:ac:28:22:
b2:9d:08:72:4a:e2:f3:ff:8e:cd:f2:f7:03:c9:f0:
40:28:28:8d:5e:d5:26:f2:de:fd:bb:89:24:88:4a:
1d:6c:ec:d5:b4:14:be:2c:dd:0c:25:09:e1:4d:18:
c8:15:02:4e:ef:71:8d:b1:eb:5e:b1:96:2d:e0:33:
e8:7e:28:7c:ef:ec:89:73:30:ac:e3:e4:02:da:36:
85:0e:9f:85:c3:da:61:99:9c:a2:5c:f3:69:1f:77:
50:9a:a0:d9:e9:23:1b:9c:03:42:ae:43:40:78:1e:
a6:ad:3c:fe:16:e5:c6:46:b5:6d:88:91:90:5a:f1:
fd:88:86:60:08:c1:29:de:e4:38:42:5b:59:1e:07:
de:7f:22:24:3b:00:53:a3:df:fc:e8:e5:53:1d:2d:
38:b9:97:74:09:6a:4b:77:b9:67:6e:04:ba:ad:b1:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:CB:1C:03:1A:E3:1A:79:13:EA:4A:B5:3C:0C:F8:2D:D3:11:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a1f197c-8b74-320c-b559-2d98bbc69e4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ac:a9:12:f1:ee:bc:79:37:55:2a:fd:94:89:8a:77:08:52:
c3:02:50:9d:e0:38:e2:a9:98:3b:52:bb:25:f2:1b:c0:ef:0a:
2f:5d:a0:98:19:9b:31:9e:29:0f:84:57:ec:c9:6f:c3:4c:02:
bf:bb:86:18:15:fb:0f:79:29:91:9d:5e:ae:08:00:5a:48:6c:
61:7c:9d:4a:26:59:2c:38:c7:80:5e:57:27:af:27:85:09:9c:
b4:9e:f5:85:fe:e9:4d:23:54:81:cf:1a:d0:79:11:ed:c5:25:
0c:5b:c6:c0:58:3e:be:e6:64:4f:bc:24:aa:1b:5f:54:a5:e7:
04:39:21:f5:31:5f:ce:f1:66:91:e1:ea:d4:0c:8a:e6:24:1f:
9f:6f:77:5f:42:c4:05:b5:3e:45:0c:66:f3:aa:c9:17:cf:eb:
97:ef:2c:80:f9:d7:d4:f6:59:95:06:18:1c:6f:73:76:7a:eb:
6f:1f:ea:6b:ff:fd:32:c9:69:97:4d:4c:4c:79:b0:08:f3:26:
b0:63:d0:57:eb:4c:62:10:d7:03:b6:6a:51:50:0a:c1:f3:46:
45:17:fd:d9:b6:d3:8a:61:ff:d7:30:5c:cd:9c:9b:27:82:a8:
0e:60:43:4e:a5:6e:b2:0f:62:c0:72:31:ef:de:37:c2:14:73:
b9:af:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:21 2024 by rpki-client on console-ams.rpki-client.org