Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/663c8faa-fde0-3633-9b2c-a67ec87b6e13.roa
File: 663c8faa-fde0-3633-9b2c-a67ec87b6e13.roa (raw, json)
Hash identifier: OUdi4eG7ePOLtww8KDdb2/O4ozwn/jepjkJYZJN3Vfg=
Subject key identifier: C4:66:26:3A:F6:CE:2F:35:66:1A:36:2C:D6:04:73:37:CB:85:1D:B3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB1D41585EA4B6E0822A140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/663c8faa-fde0-3633-9b2c-a67ec87b6e13.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 209.248.0.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b1:d4:15:85:ea:4b:6e:08:22:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=9943b3c1-60bd-4567-aab5-2e0e74d18767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:f5:57:19:cd:3c:60:9e:dc:23:c4:7f:23:
49:8d:cc:0a:8f:4b:03:6f:b6:55:f7:fa:22:4a:66:
cf:da:72:2a:34:0e:0d:b5:80:4c:f3:b0:69:1c:3f:
75:fa:22:e3:c7:1e:01:de:58:28:67:78:29:62:ab:
bf:dc:f0:93:6e:63:92:c9:d5:9d:d0:92:15:41:9a:
2a:d2:54:8d:c5:51:25:64:13:cd:df:95:b7:ab:85:
a6:fa:28:d8:0e:b2:1e:86:62:5b:e9:9d:31:26:9d:
7d:79:92:f0:15:a4:15:09:cd:d5:eb:6a:ee:0e:a1:
0f:85:72:c4:22:74:39:a9:7c:d9:f7:3a:60:5c:01:
9e:48:45:28:df:4f:9e:95:cd:23:b8:f4:c8:47:e4:
2d:1b:2b:07:bc:68:16:45:7e:0f:9b:78:aa:0c:cc:
ef:7c:1f:63:b6:1f:02:3a:a7:3e:cf:60:f5:92:60:
c8:e2:bf:b5:ab:1b:63:1e:a9:cb:53:e6:87:02:2b:
0c:89:22:19:48:0d:52:41:4a:5d:47:f7:c6:2f:6a:
32:4b:45:fb:67:e9:84:53:5c:ed:b1:4d:be:db:e8:
7f:7f:17:f5:b8:02:b8:3d:bb:2d:69:25:f0:04:21:
49:2f:e9:45:af:56:9a:cd:c5:10:9f:b4:1b:67:95:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:66:26:3A:F6:CE:2F:35:66:1A:36:2C:D6:04:73:37:CB:85:1D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/663c8faa-fde0-3633-9b2c-a67ec87b6e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.248.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:78:75:e1:68:88:43:83:e9:af:00:bb:b4:ec:f5:a0:a9:ac:
03:70:03:eb:4d:9d:37:05:97:09:b0:e9:0e:53:5d:7c:8a:a9:
94:a6:b9:27:f4:b2:a4:ad:b1:6f:80:dd:ca:60:4a:11:06:56:
d4:12:14:e2:57:2b:94:c8:ff:da:df:b4:f9:a0:b5:fb:56:04:
41:53:0c:ea:d9:bf:6d:13:e3:19:b2:eb:8c:33:4c:c4:1c:53:
49:3b:83:a7:78:71:21:07:d0:78:37:a9:01:7b:a1:8b:28:84:
3f:91:f7:47:56:2b:c6:a1:ba:69:3b:15:92:a0:4e:0c:0d:71:
90:82:21:c0:83:cd:a6:74:76:09:cc:42:e0:c2:88:ac:a9:ee:
d8:2b:30:23:2f:7f:fb:d7:ad:d3:b0:3f:2d:78:a7:86:3b:1a:
eb:f1:6e:75:c5:5a:e2:e8:09:e4:0f:f9:46:f0:03:49:8f:e8:
e9:16:22:6b:fc:4f:70:5f:55:a5:96:bd:33:e1:37:f9:e1:76:
f5:7d:1e:82:96:05:38:b1:23:51:9b:5c:9a:53:d5:a3:96:cf:
43:18:1a:fa:59:a6:be:9d:09:fa:a4:9e:2f:c7:82:02:ea:6e:
11:bc:d3:59:1e:b8:a0:7d:86:2f:c0:bf:f4:6c:f9:1c:b1:33:
4d:86:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:01 2024 by rpki-client on console-fra.rpki-client.org