Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a45e1952-b4c5-3c87-9ed2-852230c50c48.roa
File: a45e1952-b4c5-3c87-9ed2-852230c50c48.roa (raw, json)
Hash identifier: 79AtcefhtLD/moNvvgr/RhMnTuaEc3mzZJXP0n/v8UU=
Subject key identifier: 36:09:FE:45:02:5B:45:A3:A3:B1:A0:87:EC:FB:5A:4D:27:C3:F9:5E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB933F386A8426747AC6E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a45e1952-b4c5-3c87-9ed2-852230c50c48.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 40399
IP address blocks: 63.138.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b9:33:f3:86:a8:42:67:47:ac:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=cc1d9f5e-de2a-4148-8607-2baa949f4399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:8d:64:e5:48:81:19:6a:2c:07:8e:dc:a1:
75:83:86:ce:3e:8e:d2:2d:11:76:5a:d7:bc:80:ad:
ee:c5:8d:17:cd:05:48:2c:7e:50:f0:03:1f:77:72:
5e:12:dc:4e:13:3c:2b:77:9c:53:3e:0f:88:fe:99:
f0:ea:55:91:ea:a5:77:0d:12:be:c5:98:6d:27:de:
37:a1:fd:57:05:fb:9b:e9:dd:a5:63:b8:6e:7b:26:
9f:9d:9f:34:a9:a9:68:3a:ba:b1:44:05:c2:a3:40:
b7:56:8d:4f:fe:f1:5c:2f:e6:17:7f:db:87:7c:39:
11:d1:d9:56:76:3c:ab:24:52:a7:56:38:e4:92:27:
ef:24:43:a8:d4:c5:6e:96:67:f5:d1:d6:73:bc:15:
95:d5:7d:f2:ed:bd:78:b2:a8:81:09:30:bf:59:63:
4c:e2:65:ba:7e:10:06:3f:cb:a5:48:de:83:c4:f8:
5c:f6:67:32:61:2e:53:ba:8a:f8:7d:a3:0f:58:30:
69:8e:96:50:b8:0f:c0:80:0f:de:4e:ba:13:1c:16:
c0:db:c3:7e:e6:57:47:7b:f8:1b:a4:46:4d:ed:2f:
44:f0:eb:df:32:9f:d9:4a:42:72:93:b1:67:c0:2f:
ab:37:cd:ef:07:82:dd:87:cb:eb:ba:da:bb:82:56:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:FE:45:02:5B:45:A3:A3:B1:A0:87:EC:FB:5A:4D:27:C3:F9:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a45e1952-b4c5-3c87-9ed2-852230c50c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.138.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:55:d8:ae:02:8f:f6:00:61:8f:a7:77:f1:46:40:6a:99:f4:
f7:94:3b:71:db:0d:d1:7c:3c:e3:40:ca:32:65:4c:58:93:54:
78:b4:a2:cc:79:34:8e:31:68:2a:a5:22:c8:df:0d:ee:55:a0:
b6:4b:04:3b:e8:f2:68:bb:e7:cf:35:7e:a9:1a:35:98:ea:e7:
7a:2c:c4:4d:33:1d:16:a0:bd:74:bd:c5:c6:a2:f4:8f:f9:ef:
37:04:92:32:80:2c:99:2d:70:3d:ca:83:bf:93:94:23:46:33:
43:00:59:11:94:ec:b7:41:d1:c7:cb:d4:5a:e8:39:02:c7:4d:
76:cd:20:bf:6f:1c:51:b7:22:7c:20:e9:9c:08:b6:1a:22:1f:
26:40:71:50:54:43:9c:cf:9a:11:dc:8d:c5:d1:52:ee:c5:c7:
09:ea:16:c2:4d:a7:3f:40:32:c5:24:97:d4:6c:26:63:dd:c0:
c1:79:d9:30:e0:28:25:4b:15:09:10:8a:3d:41:c3:db:b2:59:
ad:c2:fe:db:9f:97:75:8a:21:ca:fd:48:70:1c:0b:74:bf:e2:
b5:18:e2:0b:b0:4d:1e:92:79:27:04:f6:02:d1:52:e7:da:1e:
b6:2d:b8:71:3a:9b:1f:4a:ca:fb:f9:60:51:3b:bd:2a:99:9d:
e5:ef:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:41:25 2024 by rpki-client on console-fra.rpki-client.org