Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/accdc0fa-7f6c-3599-be86-ffbcc8795152.roa
File: accdc0fa-7f6c-3599-be86-ffbcc8795152.roa (raw, json)
Hash identifier: 9WdcdR56P0ar3NZQJHZr91HCoIZF9p6p1ra50VzLqJA=
Subject key identifier: 1A:08:47:31:FA:5A:93:7D:DD:F4:53:68:25:A2:E3:36:FE:08:FA:39
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D662061090D740497EEDDDBE0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/accdc0fa-7f6c-3599-be86-ffbcc8795152.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.189.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:20:61:09:0d:74:04:97:ee:dd:db:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=9fbac3c7-3ead-46ed-9849-f2e47bf65e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:12:80:87:8d:b0:52:b5:8c:0f:2c:8d:5c:
b6:c0:7e:0f:f4:51:47:fa:d4:ea:43:d0:31:5e:48:
6b:2d:da:b2:24:f2:08:ae:d6:17:78:04:24:5a:cb:
01:0c:0a:d6:7d:bb:e9:ba:74:d8:65:82:f5:9a:a0:
84:18:a4:9b:3a:ab:d9:e3:8d:37:17:f8:8c:db:ed:
1a:f6:04:76:38:13:f7:3f:64:92:e6:88:5f:f3:78:
10:d5:de:26:f4:80:06:20:85:39:00:b2:f2:a8:bb:
d8:d8:64:6a:cf:45:21:aa:0e:66:9b:2a:dc:bc:d4:
1c:5f:05:35:a2:40:25:9f:8d:13:21:57:43:3f:f1:
0d:9e:94:7c:ae:11:80:76:53:ac:bb:cb:00:76:4f:
1f:dc:d9:ea:14:44:9b:c6:e2:de:c2:68:fd:3e:c3:
b4:1f:61:bf:8e:46:b8:61:37:fc:c3:ea:29:e3:86:
45:bf:e2:78:29:06:7a:8e:84:ba:42:3c:22:4f:8e:
06:26:b8:e2:09:3b:ae:e5:56:89:d4:f5:5d:8c:c8:
6f:9a:5b:d9:ca:ef:e7:aa:10:3b:f7:07:2a:ba:bf:
9d:e7:db:b7:f2:0a:b5:5b:35:e3:ed:01:1c:bc:07:
99:bd:33:5d:05:3c:ee:a3:8f:32:60:3d:7f:18:0f:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:47:31:FA:5A:93:7D:DD:F4:53:68:25:A2:E3:36:FE:08:FA:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/accdc0fa-7f6c-3599-be86-ffbcc8795152.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:19:07:73:52:d7:6d:74:8c:9e:1a:91:93:02:c4:eb:7a:a8:
77:ff:e7:74:83:83:d3:3e:f5:b5:29:46:d2:b2:a6:12:02:b8:
74:96:7c:71:11:56:a4:f7:a0:75:bb:dd:38:d9:ff:dc:6b:03:
4d:c2:9d:0a:24:96:8b:be:fc:55:05:76:2e:dd:2d:c3:74:b8:
0a:67:53:2f:1a:56:a5:2e:61:fd:f6:6d:06:4a:f5:98:a0:9e:
95:c0:9e:0e:d7:26:3a:bc:bb:bb:22:af:b9:8e:27:61:1a:85:
c2:d0:54:5c:ed:00:61:3a:6a:fb:9a:25:a9:6a:de:e4:bf:ad:
2b:7f:dc:df:01:d9:69:1b:a2:07:37:c1:63:5a:31:53:7a:52:
f4:66:dc:7e:08:de:be:c7:1b:79:61:43:57:17:3e:e7:28:dd:
7b:b5:6c:7e:62:3a:5d:87:93:cc:98:ce:66:4b:b9:c2:a8:e2:
34:7f:30:c0:ab:2d:ff:0f:ca:f0:3a:dc:ab:92:78:d2:c1:18:
81:5e:c3:1e:75:1d:b5:ad:07:df:b4:a6:23:9c:e7:73:12:fd:
4d:8f:8c:bc:9d:77:7d:25:b5:04:e1:5a:66:c0:6c:de:81:d7:
06:7c:4c:46:27:d7:6b:5a:4b:d2:5f:b4:cb:f0:aa:9a:44:4b:
f7:b2:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:08 2024 by rpki-client on console-fra.rpki-client.org