Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ac81f54-808c-3624-964e-d980c321e8b6.roa
File: 5ac81f54-808c-3624-964e-d980c321e8b6.roa (raw, json)
Hash identifier: rhDiQB6+Aw1JzxdfdjwHVR3TP0+uFSWAiXU6QrEgODY=
Subject key identifier: B4:D4:D2:DC:3B:80:7D:26:C3:38:97:C4:5A:C8:5A:A0:28:9E:6A:3C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551B3C7B1F6D5A90E9974D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ac81f54-808c-3624-964e-d980c321e8b6.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 74.223.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1b:3c:7b:1f:6d:5a:90:e9:97:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=254e58cd-8525-4bb1-8af0-9b0e49d12045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:89:7a:13:c4:b0:ee:08:4d:39:5d:c2:05:18:
82:22:85:7e:c9:7d:78:e9:8c:9b:42:97:67:1e:3a:
b8:78:b0:a4:be:8c:53:53:ee:87:d3:8e:1c:7b:c3:
bf:6d:e6:0f:81:a6:c4:ae:af:b5:1f:ef:dc:2f:67:
e3:0c:4c:5e:33:5d:a8:fe:c0:f5:70:a6:33:12:0d:
bb:79:fb:3c:d8:8d:fb:17:fe:a3:0a:1f:55:f8:8b:
6d:a0:57:2e:7f:75:01:42:b3:38:85:d5:69:2c:d2:
59:6a:5b:3d:f0:9a:7e:e4:38:70:91:eb:c1:df:9e:
ed:ff:4f:46:d5:59:aa:3b:cd:5c:d9:7b:7b:18:db:
e5:0d:17:3e:da:3c:e6:fb:f2:17:bb:3f:54:a5:5b:
1f:ca:70:58:b7:97:a5:e9:2b:d7:0e:7e:fa:74:21:
b3:fe:b1:d8:09:aa:d5:36:b8:06:50:25:3c:97:48:
05:10:75:2f:45:e3:7d:b7:37:0a:97:08:eb:a7:21:
68:5e:3b:3e:28:f4:09:4f:8c:7c:c5:c8:33:d0:0a:
c2:17:87:61:cb:7e:b4:00:11:ae:53:f3:a7:50:9e:
f8:1a:52:23:94:d4:e1:47:ca:02:76:4b:31:40:93:
4b:d2:6f:b7:d0:da:ba:a5:42:69:bb:92:91:c8:2f:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D4:D2:DC:3B:80:7D:26:C3:38:97:C4:5A:C8:5A:A0:28:9E:6A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5ac81f54-808c-3624-964e-d980c321e8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
74.223.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ae:32:90:6c:0c:e9:61:ed:d5:7c:9e:ec:a7:89:02:b1:7a:
84:4a:4b:6d:89:18:73:b7:5f:47:e7:a9:7c:ca:12:c4:fa:27:
87:f9:3d:a3:79:00:0e:04:6d:98:52:7b:93:de:47:48:b1:02:
3e:f4:5d:bc:c3:97:c0:f7:67:82:03:08:4f:1b:24:3c:d3:f3:
2d:de:2d:e9:d0:89:92:46:cf:43:6e:96:a0:93:80:d1:eb:7d:
32:2c:04:56:64:d7:2e:58:1d:43:b0:e8:a4:d4:e3:9d:92:60:
e7:bf:0d:18:11:2c:23:db:99:fa:e3:d3:88:da:9f:e7:89:79:
f4:e4:79:43:8f:2a:17:45:67:2a:b6:00:c2:fb:8b:fb:02:da:
3a:e3:70:33:92:a3:29:a4:cf:cc:6f:f4:76:be:eb:82:b0:83:
9b:58:23:56:c7:60:27:31:79:c2:4b:c0:e8:89:02:e4:70:be:
d3:99:7b:0c:9a:79:85:da:35:3b:74:e0:1a:df:29:e3:c0:1b:
f8:2e:40:c6:a3:b8:52:55:c5:ec:0e:57:8d:ea:19:0b:63:e2:
ac:2c:bb:4a:1b:3d:5c:51:ff:3d:8d:91:03:83:c4:9d:0a:ae:
e8:70:0c:fb:34:a6:e8:ca:5d:25:46:17:de:fc:5c:d6:2d:88:
d2:35:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:00 2024 by rpki-client on console-fra.rpki-client.org