Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb30e0ba-551c-3c23-bffe-7faac3d86858.roa
File: bb30e0ba-551c-3c23-bffe-7faac3d86858.roa (raw, json)
Hash identifier: iOQVq3DFW24xNFX2LxU8g9P331lCtUYlhBDslm+CLXw=
Subject key identifier: 48:BE:86:23:B6:4E:BE:6A:97:48:2C:06:20:30:09:3D:59:90:CD:8E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858415B47462FFF162A3EC82DBA40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb30e0ba-551c-3c23-bffe-7faac3d86858.roa
Signing time: Sun 26 Mar 2023 12:00:00 +0000
ROA not before: Sun 26 Mar 2023 12:00:00 +0000
ROA not after: Mon 19 Mar 2029 04:00:00 +0000
asID: 7029
IP address blocks: 98.22.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:5b:47:46:2f:ff:16:2a:3e:c8:2d:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 26 12:00:00 2023 GMT
Not After : Mar 19 04:00:00 2029 GMT
Subject: CN=a83a6596-dd56-4169-b60f-d787d988bf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:1a:4a:c4:ed:0c:24:fd:f8:68:4b:80:3f:
fe:1d:f6:62:b5:04:01:36:7a:79:c0:b2:3b:29:ea:
01:67:31:e5:5a:fb:6e:c0:1b:54:67:40:80:62:5f:
79:b6:12:a9:34:53:e3:a2:6d:35:b0:68:76:83:ac:
32:cb:33:ba:1a:76:69:7b:2c:fc:82:9a:75:bf:29:
84:a9:08:f3:cc:86:c4:dc:3e:7a:62:ea:50:b1:2a:
d6:11:1e:bc:95:dc:f8:03:e8:2f:e0:9d:42:9c:56:
09:a3:9b:6a:6c:44:41:90:0e:4b:50:74:29:5e:f8:
bd:19:ff:f1:cf:99:09:ec:d2:79:a7:36:94:11:f1:
1f:ed:fb:d7:8b:a9:f3:f9:49:47:2b:c4:81:04:1a:
a0:50:4f:60:d0:f5:05:d6:f5:9f:e4:fb:3a:58:24:
7f:6c:32:07:1f:73:db:54:c3:55:13:0e:dc:03:94:
72:c5:63:f7:d5:45:cf:45:34:e4:12:12:1f:ec:84:
65:62:0f:5e:ce:e4:eb:83:32:10:a2:7b:bd:34:32:
5a:fa:97:2e:bc:17:23:62:59:ba:9f:ae:12:fb:2e:
4d:cf:30:97:b2:63:7c:55:e2:21:72:5a:1c:bf:2c:
b2:04:93:a6:38:90:61:bd:5e:fa:96:3e:6b:ab:55:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:86:23:B6:4E:BE:6A:97:48:2C:06:20:30:09:3D:59:90:CD:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb30e0ba-551c-3c23-bffe-7faac3d86858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:0f:4b:92:67:ab:2f:25:dd:88:ee:16:12:e1:cd:95:b4:5e:
bc:4a:6b:4b:e0:a6:6f:95:e2:6f:bb:f6:83:c6:fb:cb:42:c1:
d9:59:0d:08:0d:66:0e:ee:d6:e8:fc:03:ca:e1:57:84:ae:d0:
cb:ed:e0:cd:ed:72:8d:f9:49:be:f6:70:7b:2d:89:03:17:8a:
3b:ee:c4:92:f7:bd:ff:c8:21:9f:5c:e2:a3:74:32:14:17:a9:
f8:4a:d4:87:ad:6f:28:e3:76:5d:74:07:08:bf:09:8e:84:4b:
4d:2b:93:10:b2:a5:22:ed:37:30:20:55:78:41:5b:38:e3:98:
93:18:a1:74:ee:a4:0c:5e:d9:45:3e:c8:65:81:c7:2f:66:13:
15:66:d5:69:17:d4:85:d4:56:2f:7e:ba:6e:a9:db:9f:e2:4c:
e3:f7:a3:81:e8:d4:a2:1c:cb:10:fd:35:39:40:57:99:2a:23:
bb:14:65:c4:7f:8e:b1:ba:dc:d5:6c:f3:da:43:03:a9:19:0e:
a2:6a:e9:e9:f0:9d:b8:bb:b1:3f:97:97:a5:ed:f3:57:94:0b:
ed:4c:1c:80:8b:63:7f:ec:c9:63:73:fe:88:8d:38:94:e1:b5:
fa:b9:f6:ea:36:20:c6:46:b1:6e:e1:1b:4e:46:0d:97:64:99:
85:04:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:10 2024 by rpki-client on console-fra.rpki-client.org