Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd569498-e4de-3a49-b937-1c00e9e6fe03.roa
File: bd569498-e4de-3a49-b937-1c00e9e6fe03.roa (raw, json)
Hash identifier: SpJ2T+dF8fA5wjQqtNhMe44zvEJSjecjBwYFyptEXTI=
Subject key identifier: 3B:71:C9:B0:86:79:15:3C:17:E4:51:F1:0B:97:9F:1B:31:F8:E3:44
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551E2A4DDA91ED6E9819CE00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd569498-e4de-3a49-b937-1c00e9e6fe03.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 20337
IP address blocks: 205.232.28.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1e:2a:4d:da:91:ed:6e:98:19:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=8f57f7ec-33d1-43e1-b7f5-5036ef433d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:17:3b:f2:6c:98:b2:96:c5:8e:81:f1:8f:
32:8b:2e:16:d0:6c:da:65:24:0a:31:90:35:39:06:
b5:70:0f:4e:61:45:3c:d8:c6:4c:bd:10:bb:1e:5b:
b5:87:1f:9d:17:dd:48:7f:7a:a3:7e:19:12:16:5d:
47:fd:a4:60:36:26:43:8b:80:62:51:55:82:d1:85:
29:e4:0d:0f:05:71:34:4e:58:ec:f3:0d:d4:a8:e0:
ac:5f:b1:f8:1c:86:1b:37:7f:57:aa:66:5f:97:53:
d0:f9:5f:96:d7:83:ee:8f:bb:df:ca:4b:69:7a:fe:
de:ed:17:e7:ea:75:be:91:f1:91:4a:06:d1:df:48:
9f:e0:65:eb:eb:31:a1:5d:a9:9d:0b:7e:59:01:b3:
db:a3:85:4b:5c:34:eb:1c:c3:31:80:30:03:b2:ef:
5e:70:a1:58:4f:d8:48:99:85:0a:fd:51:b0:40:79:
a7:1b:10:cb:db:17:e1:71:46:a5:9a:0b:ad:27:25:
87:a2:41:ab:a9:07:03:0e:1d:87:72:2f:62:39:c3:
60:a6:e7:14:20:18:86:fd:1a:d4:26:00:ee:c9:95:
29:15:95:39:ce:06:fb:85:5d:89:d8:83:ba:05:b9:
cc:8d:de:3b:6f:47:fa:ed:cd:cf:25:e8:c7:cb:1b:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:C9:B0:86:79:15:3C:17:E4:51:F1:0B:97:9F:1B:31:F8:E3:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd569498-e4de-3a49-b937-1c00e9e6fe03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.232.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:9a:70:06:ba:1a:32:de:71:62:9a:18:bf:2b:d7:66:e3:6a:
33:9f:a9:17:16:9c:34:eb:a4:0a:ff:9c:db:07:f2:af:b9:e5:
ef:5e:13:92:59:48:1a:67:c4:6c:d6:1c:52:a7:e8:61:3b:4c:
62:f6:3e:e0:4d:34:ac:ad:ac:ee:af:45:0f:d2:64:4b:e3:87:
bd:5a:53:db:98:96:09:ee:fa:23:6f:10:ce:5e:8a:47:e7:b8:
b0:40:94:31:fd:66:b4:25:57:9a:f0:22:c6:2b:2c:a5:6d:e5:
be:24:a7:5c:37:48:1c:f9:5c:4a:92:15:f1:4d:74:1e:5b:a5:
a9:ab:00:1f:dc:39:75:77:db:ea:46:c5:c9:69:fb:ae:23:a4:
df:0d:d4:17:6b:33:88:fc:bf:46:83:94:96:0e:a5:27:17:ce:
c4:35:b0:85:de:96:ac:eb:e2:a0:9f:ad:ef:fe:d9:f5:19:80:
6e:26:57:cd:61:9a:5c:f3:e5:4f:56:bd:7c:30:ea:c2:50:b6:
14:70:46:d0:6e:75:f6:06:ec:4c:2b:6f:c9:67:0f:b3:f2:b6:
af:d1:cc:2c:b7:91:08:20:d8:a0:03:f2:28:bf:70:59:e5:99:
c2:e1:b3:57:00:5a:00:52:af:d8:37:7f:08:ba:c7:8d:12:ba:
5a:22:81:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1VHipN2pHtbpgZzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyMzA0MDAwMFoXDTI4MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
OGY1N2Y3ZWMtMzNkMS00M2UxLWI3ZjUtNTAzNmVmNDMzZDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIkXO/JsmLKWxY6B8Y8yiy4W0GzaZSQKMZA1
OQa1cA9OYUU82MZMvRC7Hlu1hx+dF91If3qjfhkSFl1H/aRgNiZDi4BiUVWC0YUp
5A0PBXE0Tljs8w3UqOCsX7H4HIYbN39XqmZfl1PQ+V+W14Puj7vfyktpev7e7Rfn
6nW+kfGRSgbR30if4GXr6zGhXamdC35ZAbPbo4VLXDTrHMMxgDADsu9ecKFYT9hI
mYUK/VGwQHmnGxDL2xfhcUalmgutJyWHokGrqQcDDh2Hci9iOcNgpucUIBiG/RrU
JgDuyZUpFZU5zgb7hV2J2IO6BbnMjd47b0f67c3PJejHyxt3hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtxybCGeRU8F+RR8QuXnxsx+ONEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ1Njk0OTgtZTRkZS0z
YTQ5LWI5MzctMWMwMGU5ZTZmZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzegcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2acAa6GjLecWKaGL8r12bjajOfqRcWnDTrpAr/nNsH8q+55e9eE5JZ
SBpnxGzWHFKn6GE7TGL2PuBNNKytrO6vRQ/SZEvjh71aU9uYlgnu+iNvEM5eikfn
uLBAlDH9ZrQlV5rwIsYrLKVt5b4kp1w3SBz5XEqSFfFNdB5bpamrAB/cOXV32+pG
xclp+64jpN8N1BdrM4j8v0aDlJYOpScXzsQ1sIXelqzr4qCfre/+2fUZgG4mV81h
mlzz5U9WvXww6sJQthRwRtBudfYG7Ewrb8lnD7Pytq/RzCy3kQgg2KAD8ii/cFnl
mcLhs1cAWgBSr9g3fwi6x40SuloigdE=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:10 2024 by rpki-client on console-fra.rpki-client.org