Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf381717-051d-38c5-9fab-c70c55b6a011.roa
File: bf381717-051d-38c5-9fab-c70c55b6a011.roa (raw, json)
Hash identifier: 2r3vqOwZaCu3DoQv/9dovQ9TelmWcNWAm/D2lY+iTSk=
Subject key identifier: EA:72:60:E8:D5:C1:05:36:68:86:72:DF:52:93:6A:2B:15:7C:3A:7C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F4908A9D0BEA64826D906C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf381717-051d-38c5-9fab-c70c55b6a011.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 69.38.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:49:08:a9:d0:be:a6:48:26:d9:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=a8db4f56-5f0f-4587-8777-25a0d09a102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f1:0e:fe:e6:b9:ff:89:f3:7a:5a:47:f0:07:
1c:4b:52:74:42:12:93:68:50:25:83:e5:8e:ca:ea:
c8:9f:8c:db:1c:bb:83:b6:d1:95:ce:b8:8c:ff:74:
d2:70:9d:e3:31:3e:47:45:90:9a:da:37:46:3d:2b:
4a:2a:a1:ac:7c:9e:73:dc:8a:93:8d:ad:a8:40:1e:
25:d5:bd:d3:bf:eb:7c:7e:24:e5:f6:d3:b8:e2:2b:
54:38:05:9d:34:d0:6a:03:ab:70:1a:53:3c:a2:8f:
b8:73:4a:d6:1f:a1:47:3c:98:a1:e2:e9:d0:52:6f:
1b:f9:20:2e:a8:bc:3d:76:89:b6:20:7b:02:72:2e:
51:6b:ae:2a:9f:5e:35:1f:b4:bb:4c:ca:92:48:cb:
49:12:ec:17:49:b7:20:a3:ad:ec:71:80:5a:64:6b:
cb:13:88:36:7a:68:1a:a8:ec:24:0a:95:ab:fe:c5:
c8:d5:6a:dd:b8:8e:48:d4:86:05:34:f7:3b:5f:2b:
15:9b:b5:a1:ca:2b:8b:a3:ef:2f:e2:91:5a:7f:16:
cc:f2:e2:87:2b:2e:b7:ed:bd:98:02:bb:ab:9b:e2:
b1:5c:4f:3f:90:07:6e:81:57:35:7c:41:ab:e8:3d:
7e:fa:e8:1f:33:10:98:94:22:65:c3:60:fa:5d:50:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:72:60:E8:D5:C1:05:36:68:86:72:DF:52:93:6A:2B:15:7C:3A:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bf381717-051d-38c5-9fab-c70c55b6a011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.38.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:c0:a1:b5:a4:54:88:dc:24:d7:37:79:d2:56:97:43:fb:92:
e7:67:9b:e8:b2:06:d7:8e:9b:c0:45:b3:97:76:6f:86:f3:1d:
03:9e:4b:73:fa:94:22:dc:31:ba:a7:81:57:89:8a:2a:b2:98:
b0:f7:3b:fe:af:7c:58:a5:d0:8d:b1:d8:cc:d3:60:55:e7:36:
62:a4:cc:d4:87:7f:fb:32:d6:2f:9f:0b:4e:b9:31:68:bd:f6:
f7:d7:33:04:ba:64:c1:09:4e:8a:6d:22:ee:9d:50:a0:65:37:
88:97:97:ff:10:bd:af:ac:c7:c1:19:8c:30:2d:c7:d0:c9:b4:
10:df:20:28:16:2d:d1:76:31:0f:a5:04:68:fd:03:a8:aa:49:
33:d8:93:58:a8:55:a7:79:4a:5c:6d:1a:70:ac:5a:e5:f3:7c:
c1:9c:a2:bd:4b:91:42:24:89:b3:be:8a:96:1f:d7:a8:56:bb:
03:9a:22:cf:d5:59:f8:13:4e:d4:26:7f:ca:b7:41:84:54:ee:
fc:6d:7d:b0:59:c4:5d:4b:f8:a5:2b:0a:fc:2e:c6:92:98:ba:
b8:31:b1:16:6c:88:a0:57:c8:cb:73:0c:a3:c9:ab:d2:35:a7:
22:01:99:46:cb:4f:18:67:b0:d6:39:1e:d6:46:40:e3:ac:c0:
77:56:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:31 2024 by rpki-client on console-ams.rpki-client.org