Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c714be49-5af0-3f58-bf73-b9e38a55fdcd.roa
File: c714be49-5af0-3f58-bf73-b9e38a55fdcd.roa (raw, json)
Hash identifier: PoLuCZmxw+usjLvu7F6SvEsBTV9vowRDQmfcxvDgeRg=
Subject key identifier: 1D:6C:F6:55:3F:80:9F:CB:10:44:C7:C6:B3:C9:EA:2E:AF:12:0C:77
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA149FC15D3E57778D89D8C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c714be49-5af0-3f58-bf73-b9e38a55fdcd.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:1d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:49:fc:15:d3:e5:77:78:d8:9d:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=051ad6e4-bbd9-4daf-8ceb-73a2c4153a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:0c:9f:0f:43:9c:30:9c:e1:08:9e:06:bb:
49:ad:6c:f4:8f:92:40:a1:53:51:bd:97:15:d0:d2:
3a:ce:c3:51:8c:18:19:17:fd:2c:a5:b5:e0:92:26:
a0:5b:63:b8:25:d5:f4:88:07:3d:cd:1c:6d:48:9f:
5c:a9:28:0f:2c:5b:92:45:84:4e:bf:ff:6b:64:ff:
54:8b:e6:38:0b:4e:80:27:3d:64:77:8e:39:bd:c7:
ac:f6:ac:1c:d3:a9:02:29:7d:19:a1:20:93:95:82:
78:89:7e:1e:59:28:48:26:65:7c:c1:2b:23:ae:cc:
65:1d:bc:ca:05:59:8c:95:59:5e:65:fa:cc:75:b6:
fd:3e:8d:00:1b:69:76:4c:6e:67:80:0d:99:04:c3:
e4:84:26:f0:25:23:74:d2:6c:a4:57:6b:d7:57:43:
5a:f2:62:b2:be:92:54:ed:e7:8c:04:39:7f:d2:73:
47:3c:95:7a:d0:7f:9b:b1:e1:23:09:35:f6:33:95:
05:0d:05:3b:01:cd:2d:59:28:d3:3a:83:89:3b:86:
b4:b5:f0:22:04:6e:3e:28:cd:74:48:e3:69:b6:ac:
8d:80:b9:3f:c3:13:8c:c7:b6:b9:c4:32:84:76:f9:
ff:09:ec:be:85:34:c1:83:6a:25:39:7a:b1:82:a8:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:F6:55:3F:80:9F:CB:10:44:C7:C6:B3:C9:EA:2E:AF:12:0C:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c714be49-5af0-3f58-bf73-b9e38a55fdcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:1d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:0e:24:c9:98:72:75:c7:45:26:be:b2:2d:2b:be:76:96:20:
2a:4b:d9:83:16:ce:b2:35:5e:cc:6a:62:e7:ac:19:2b:85:2b:
e8:a2:25:90:81:36:14:36:33:e5:39:90:df:c7:e2:85:2d:81:
90:8b:91:17:3e:1f:c5:b5:61:40:1b:25:1b:57:7f:92:9e:07:
a2:96:1d:71:fd:70:5f:a1:56:d1:da:69:b0:a8:54:3e:e6:74:
17:00:70:2c:fa:44:41:ab:6d:db:da:cc:5f:79:f2:4e:fe:8e:
6d:14:e0:14:bd:e4:fc:dd:61:16:46:da:49:e4:9b:08:98:94:
19:2a:be:d4:fc:45:02:37:a9:24:31:bf:9d:6a:5d:55:40:b4:
7b:7e:6a:48:61:a8:7a:bb:96:5b:84:a9:05:b1:ca:70:c9:b1:
8c:02:67:04:53:86:b0:fb:57:9e:05:c9:d9:76:c1:23:e8:7a:
07:f2:f3:b1:e1:0c:b8:f0:89:db:f0:b4:a7:95:4b:d6:ee:fa:
bd:28:6b:99:cb:d2:cf:32:10:2d:b3:b0:08:9b:43:f2:13:5b:
f6:ae:a1:62:5f:e0:3e:08:49:4d:e7:a3:71:c4:9f:bd:8c:19:
33:e2:9f:a1:37:24:db:03:0e:03:b0:3a:77:fc:6c:5b:8b:2e:
69:3c:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:32 2024 by rpki-client on console-ams.rpki-client.org