Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a31e044b-e1b5-3afb-b3e8-b05b221a43c4.roa
File: a31e044b-e1b5-3afb-b3e8-b05b221a43c4.roa (raw, json)
Hash identifier: SNdEVc4Usmbd0wo8fRfWToukgBUsmqTiqfKpp9l6jyE=
Subject key identifier: 89:14:9F:20:08:FA:0B:17:FA:CA:E4:D2:AF:8A:2D:7C:82:55:6E:47
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F43285841D6034C173ED4DA3605DAF0C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a31e044b-e1b5-3afb-b3e8-b05b221a43c4.roa
Signing time: Tue 09 May 2023 12:00:00 +0000
ROA not before: Tue 09 May 2023 12:00:00 +0000
ROA not after: Wed 02 May 2029 04:00:00 +0000
asID: 7029
IP address blocks: 40.128.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d6:03:4c:17:3e:d4:da:36:05:da:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: May 9 12:00:00 2023 GMT
Not After : May 2 04:00:00 2029 GMT
Subject: CN=06d2fde3-1b09-4be0-ad15-4b9592a75d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:c0:ee:23:4a:93:a0:65:2e:61:df:d4:7a:
6f:dc:12:9d:c5:5d:9b:1f:de:3b:c1:bd:6c:3b:e8:
1b:7a:5c:f9:38:dd:cd:cc:fa:3b:e4:a9:96:af:72:
83:73:f9:97:fe:69:4f:3d:56:f0:0b:57:5d:ae:29:
f1:f1:78:f3:90:ee:07:28:f2:31:45:63:8a:ef:b2:
4f:51:12:98:08:32:ea:95:3d:6b:f6:0b:94:70:2f:
67:47:f9:3c:02:b0:ff:ce:5b:f7:67:a1:a1:04:0d:
4d:5f:93:81:c4:12:e1:e6:26:48:8e:20:cd:4f:84:
cf:26:5d:4c:5a:a7:3b:43:0d:fd:37:9d:e4:01:98:
7c:d8:cd:19:db:87:38:a2:ef:5f:cb:3b:e2:70:fa:
ac:cd:03:a4:5f:2a:ae:da:fa:18:85:c5:30:b4:39:
ca:50:4c:18:8f:64:2d:35:a7:5c:07:d1:37:9a:c5:
bb:2d:b3:b6:8a:8b:20:9f:08:d4:de:fc:58:5e:52:
f3:00:3c:e4:bf:79:5e:fc:a5:44:ba:ca:b4:9b:85:
7e:37:eb:cf:48:2a:77:a3:f1:df:67:76:5b:db:f7:
21:32:1f:3f:cc:b3:1e:84:40:1a:5d:6f:37:9e:a1:
79:6e:e9:0e:97:c4:eb:3f:fd:74:df:cc:1d:41:ab:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:14:9F:20:08:FA:0B:17:FA:CA:E4:D2:AF:8A:2D:7C:82:55:6E:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a31e044b-e1b5-3afb-b3e8-b05b221a43c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.128.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:91:32:0c:9e:9e:86:01:04:d1:4c:4b:43:5c:2a:cf:db:f3:
04:1d:05:45:0f:e7:3a:d2:56:0e:06:b9:85:22:8c:d6:d0:01:
29:d1:31:30:2e:a5:95:b3:5b:1b:0a:d2:56:3c:80:8d:bb:9e:
82:21:20:d8:80:a5:8e:1d:48:ce:40:00:f4:9e:87:cd:2f:e0:
ba:9a:b6:06:49:fb:6e:db:17:72:df:9e:05:eb:29:7e:17:58:
ca:a2:55:84:45:e5:a0:b5:6d:02:88:96:2a:02:d1:c6:1d:89:
2c:6e:f9:5b:b6:14:f9:3f:ae:3d:73:6e:8f:03:82:69:f1:cf:
51:37:40:2f:dc:f9:c5:c1:8c:d8:56:f3:74:60:63:d6:96:f3:
a4:2b:a3:40:b9:b9:c2:2c:51:87:1c:36:7e:86:e8:d3:ae:1e:
7f:de:7d:51:0a:cd:e7:1d:ac:cc:16:89:f4:b8:34:73:9f:f3:
db:58:a1:92:68:cb:42:df:13:aa:eb:e2:6e:7b:36:6c:1b:5b:
c0:a8:6a:0f:99:a7:d2:24:7a:66:72:46:9e:d6:e0:29:c3:49:
77:54:46:51:4e:1e:b6:e8:d9:eb:2f:b6:c3:b5:1e:e2:a8:10:
5f:92:45:f4:bd:db:86:39:cd:a1:80:01:b8:20:0f:43:2c:77:
31:47:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 06:12:50 2024 by rpki-client on console-fra.rpki-client.org