Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/801ed366-add3-36c5-bccc-f79dadbe5f4a.roa
File: 801ed366-add3-36c5-bccc-f79dadbe5f4a.roa (raw, json)
Hash identifier: Z55VS2Cu3vXVgj3twA+4VCvbwzvngQPn9eMPkzx0Yo4=
Subject key identifier: 36:5D:02:23:B1:40:55:51:63:14:49:E6:CB:F6:27:9B:53:90:19:80
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661A96AC3EBD953A0FDD6400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/801ed366-add3-36c5-bccc-f79dadbe5f4a.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 72.172.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:96:ac:3e:bd:95:3a:0f:dd:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=e74e47e1-1e04-432d-9f59-a7d1511c40eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e9:5c:fd:f8:94:46:35:4b:59:b1:8e:5e:48:
96:b8:0d:99:98:7c:b0:2b:ec:43:7e:e5:c5:27:c1:
22:6b:85:98:1d:da:7f:56:63:24:af:ac:48:2f:5f:
a6:0e:36:b8:f0:7b:29:c5:93:89:f0:6f:94:bb:69:
ca:f5:52:14:ad:a2:5f:73:bf:fe:12:70:7f:14:9d:
a2:fb:46:39:97:4d:51:bd:01:d5:1a:93:73:77:48:
72:81:b2:16:0b:2d:66:38:fd:4e:f2:1e:37:fe:7d:
95:ca:b0:a4:9b:25:39:1d:9b:40:39:31:2d:ae:93:
bf:51:37:db:2e:04:ff:a6:28:19:c9:79:7a:6d:91:
f8:75:fa:1f:25:0e:68:80:20:b8:0f:98:98:e3:19:
46:10:e1:ba:04:f6:b6:25:7d:ef:91:90:2b:50:62:
66:37:2b:a9:78:df:3f:13:6f:bb:2a:a2:53:6e:85:
cf:8a:13:5a:16:61:4a:8f:0b:af:68:34:0e:c2:f4:
e7:11:6d:82:dd:c9:ae:3a:34:12:a7:b2:a5:a0:60:
97:54:00:7e:26:71:b5:a9:74:43:26:18:e5:b6:9d:
d0:d5:4e:0c:f4:ce:7e:66:bb:c2:56:60:01:50:53:
3f:d2:79:03:4b:d5:08:54:ce:01:93:32:3b:0b:f7:
5f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:02:23:B1:40:55:51:63:14:49:E6:CB:F6:27:9B:53:90:19:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/801ed366-add3-36c5-bccc-f79dadbe5f4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:06:d2:cc:be:cb:d5:18:56:f2:40:e5:91:62:7b:05:a0:9d:
14:28:6c:96:3a:9b:7d:79:92:ea:69:e9:10:31:6c:65:00:42:
2c:4e:94:c8:e9:ef:0b:e5:89:cb:9d:e6:91:00:a8:62:a4:04:
ee:e0:fc:2b:40:05:f0:ac:b3:46:4f:33:a9:5b:74:8e:c0:6d:
8e:94:1c:3f:b6:c2:c8:16:24:67:0c:72:8e:16:bf:76:4a:f8:
9e:c3:b4:80:20:55:57:8d:cd:84:a3:08:90:67:fd:60:8f:c0:
0a:b4:b2:41:6f:89:ff:57:b6:34:7c:68:a5:54:ec:0c:d7:cc:
c1:7b:72:b3:00:47:47:52:2a:6b:15:50:c3:55:b8:de:d6:7b:
92:85:1a:3c:a2:48:e8:79:e7:63:ef:84:cc:04:f2:77:5c:c0:
e7:5e:a9:73:0b:ab:7f:c4:db:8a:f7:63:8e:14:25:22:07:78:
4a:13:53:d4:3d:81:0c:8b:ef:d0:93:6d:14:c4:ac:39:79:6e:
33:87:dd:63:4b:98:48:b5:95:72:b3:a4:d0:bb:cd:28:5a:32:
78:ea:3a:ed:23:a4:09:4a:81:1b:4a:b4:47:1c:eb:58:cb:29:
60:9e:63:2e:5c:92:b5:58:34:df:10:6a:17:00:0b:c2:27:0c:
5f:53:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:26 2024 by rpki-client on console-ams.rpki-client.org