Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5ae829f-bc5f-3367-b149-bd4272c3144f.roa
File: a5ae829f-bc5f-3367-b149-bd4272c3144f.roa (raw, json)
Hash identifier: wVm7xyLve0wjsVWspYYy/fdJ0jBb/1Vvs0Ax7UeS9X4=
Subject key identifier: FF:54:19:E6:23:07:F5:83:61:D3:92:80:18:DC:84:A0:E3:2F:C5:FD
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F6870FE975A4BEA3303A300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5ae829f-bc5f-3367-b149-bd4272c3144f.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 206.216.0.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:68:70:fe:97:5a:4b:ea:33:03:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=40bf5882-9cee-43f8-a790-99376b489ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:37:7a:aa:19:16:fe:e0:ce:50:58:94:a1:1d:
88:07:7f:1b:db:13:56:a4:0f:7e:04:04:69:ee:97:
f1:df:fa:52:56:3d:a5:54:a2:f7:0a:db:a0:0f:74:
1f:4a:c9:0d:f5:3f:8f:4d:1c:60:6f:5a:b6:ab:fb:
27:32:27:1e:8c:23:2a:cc:bc:7b:d8:4c:6e:de:ba:
d4:88:da:3d:0b:a7:41:63:01:8b:f5:75:28:58:33:
de:cf:f5:d7:d4:b9:ff:be:d6:05:23:7a:68:cc:80:
af:70:d6:60:20:35:a5:1d:f9:b6:3c:38:f8:22:b6:
db:17:19:c4:b1:6f:ca:16:c4:aa:b9:4c:1e:64:3e:
63:dc:04:31:4a:11:51:9e:d0:1b:88:2f:50:45:ff:
77:e2:fe:a0:e1:53:51:af:86:0e:42:da:5d:c7:b1:
19:da:ee:f5:27:ff:4c:0f:2a:e2:29:38:b5:68:0c:
d8:20:ff:4b:28:9e:be:f2:45:c0:1e:09:eb:48:41:
78:31:c1:3e:12:ef:80:c5:06:f6:0a:3e:f7:7a:04:
2c:32:41:1b:2a:64:09:9c:89:af:11:29:82:49:fd:
14:01:93:6e:0d:98:db:41:2a:03:51:3f:e8:b0:38:
b8:2d:5f:5d:9c:99:51:d9:45:b5:cd:6f:7f:12:25:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:54:19:E6:23:07:F5:83:61:D3:92:80:18:DC:84:A0:E3:2F:C5:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5ae829f-bc5f-3367-b149-bd4272c3144f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
206.216.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a5:dc:21:45:3a:59:2c:b6:ba:f1:d3:37:f7:b4:7c:de:ee:
1e:1e:23:0b:ed:6e:7d:e2:b7:7b:8c:e4:61:e0:44:c9:02:eb:
ec:bf:a8:4a:c3:eb:c8:99:51:aa:c6:cf:4b:b3:27:95:18:13:
91:42:29:18:3a:94:ce:9f:c9:71:e8:96:b9:84:bd:e2:7c:2c:
08:18:ae:53:13:57:9a:97:e1:ff:69:cc:44:6d:10:04:a3:28:
e2:d1:fa:5a:fb:df:4c:f3:9b:f8:32:3c:21:a7:1c:da:cb:db:
8b:99:c4:0a:8a:6a:66:ae:a0:12:1e:18:77:41:6e:bc:f2:97:
6a:7e:e3:55:eb:26:1f:e9:99:1e:66:16:33:ea:13:66:06:b9:
66:71:3c:a4:75:1c:2f:fc:45:8d:a8:19:da:72:1d:6d:38:03:
d2:3d:b3:68:41:46:87:e1:c5:5d:7c:d1:3e:52:cc:e0:b8:4e:
55:92:7c:e3:46:d1:c8:b3:5f:d9:f9:30:fa:89:d6:82:b7:97:
b5:b2:79:f1:c4:e3:ba:b1:0a:60:a1:6b:de:52:23:e0:4b:37:
f5:79:f2:e3:c5:aa:1f:eb:73:45:51:ca:9d:0b:3e:d6:f0:8c:
a3:00:86:57:59:93:b4:ec:2a:d7:62:e1:36:65:07:78:cc:18:
03:13:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:07 2024 by rpki-client on console-fra.rpki-client.org