Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c9a0c4e-33c4-3d1a-b0fb-33e9bd41c5f0.roa
File: 8c9a0c4e-33c4-3d1a-b0fb-33e9bd41c5f0.roa (raw, json)
Hash identifier: zGWZj32+aMo2x8U/f42bGjobIARDfbGll8ldC2L37qU=
Subject key identifier: 28:7D:9B:BF:D7:74:F0:28:E6:0E:A8:13:28:71:95:94:F2:39:FF:F2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661E8A964AD6C43DF8FBD180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c9a0c4e-33c4-3d1a-b0fb-33e9bd41c5f0.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.23.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:8a:96:4a:d6:c4:3d:f8:fb:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=33cafe42-f000-4754-92c8-613579cc4218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:3e:7c:88:2a:de:79:ad:ca:a5:27:97:b1:
82:c9:84:f1:aa:4f:06:b8:14:80:9d:6b:f1:0f:da:
66:cc:d2:84:1d:a2:e2:1a:2f:bc:65:3c:96:29:37:
a4:bc:1f:de:16:71:61:46:6e:39:c8:a1:56:18:27:
e7:c3:e8:98:0a:84:05:94:30:f4:e9:7a:22:1a:bc:
65:6e:6b:02:b6:85:db:4f:9f:22:0f:70:a3:cb:56:
b8:fa:47:74:3a:c7:7a:e2:d8:83:9a:16:b6:8f:66:
43:e1:a3:2a:68:8e:42:22:de:65:96:93:24:39:b0:
2f:a2:a7:f8:36:ed:07:1f:33:7a:61:98:29:75:57:
40:60:d2:35:31:87:45:72:09:bf:dd:a7:76:9a:6b:
4f:f9:2a:a5:79:0a:a8:4a:6f:b4:fc:0e:b7:df:78:
50:c1:4c:00:af:43:83:06:1b:c6:f5:3d:02:6e:72:
39:34:cc:51:dd:8d:bb:41:6c:7a:17:47:eb:08:a3:
75:29:7c:26:80:17:aa:a4:51:99:07:30:00:a3:15:
5a:14:ca:19:75:19:e6:41:26:44:cb:93:94:bb:6a:
e5:00:ee:92:37:ce:43:89:ab:62:ec:1b:5f:61:d6:
6e:89:00:7e:c4:cc:4d:13:ca:32:80:0a:ee:52:67:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:9B:BF:D7:74:F0:28:E6:0E:A8:13:28:71:95:94:F2:39:FF:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c9a0c4e-33c4-3d1a-b0fb-33e9bd41c5f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.23.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:6c:9a:12:b3:20:2e:a2:72:d1:0a:b2:92:dc:b4:96:92:f7:
e3:88:5b:ce:b4:0b:76:64:6d:c2:c2:9a:a6:a8:aa:34:43:9b:
c7:ab:57:ec:bf:4b:09:ad:ef:79:40:1d:0b:1f:a6:78:ac:b3:
7b:14:cb:4f:aa:c1:55:a0:e1:d4:9e:69:97:e3:3d:15:04:b6:
da:5c:ae:fa:08:cf:14:a4:58:3d:9c:81:ed:0b:0a:e5:92:04:
ab:e1:a1:c1:fa:3b:df:c5:2e:c6:c9:3b:ed:2f:ff:de:ff:97:
15:50:00:fa:51:4b:69:55:10:97:eb:d8:54:3f:f9:69:a9:c2:
37:01:cf:f5:ac:ce:bd:f9:e9:95:3c:43:86:4a:63:04:63:56:
8e:dc:4c:2e:45:17:c2:f6:5a:e0:88:5f:4f:cf:5f:e1:61:05:
10:95:d1:05:4b:a3:5a:e1:87:52:08:de:cb:8e:22:59:8a:c7:
60:7f:60:43:ad:80:95:31:82:74:e6:d4:5e:3b:d5:93:31:c2:
3f:b1:df:8c:a7:a3:16:31:70:22:67:ca:ed:e9:f5:7f:8a:3a:
a5:82:57:66:80:33:50:cf:64:01:87:f8:cf:a7:84:3d:e7:7a:
0f:85:47:65:c6:c2:3c:47:c6:b3:57:e0:98:8b:28:9c:e7:4b:
71:fe:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:05 2024 by rpki-client on console-fra.rpki-client.org