Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3c94bab-5582-3ac5-a08d-19e85b503478.roa
File: d3c94bab-5582-3ac5-a08d-19e85b503478.roa (raw, json)
Hash identifier: k9AHjiSDn6oDgFvVZDsqezdajB+XKdj3VyDpJBsaU7Q=
Subject key identifier: AF:3F:81:0E:2C:9D:59:B1:6F:A0:9A:98:4F:36:78:2D:B2:A4:F7:3E
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FBBA4AA5FE49D3BFE2D1D80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3c94bab-5582-3ac5-a08d-19e85b503478.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 64.16.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:bb:a4:aa:5f:e4:9d:3b:fe:2d:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=5f8f1803-083a-4f90-822a-7feb5a78ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:ab:a5:f6:c8:20:61:47:a4:11:13:db:a8:
8a:40:48:79:50:42:10:db:1d:f6:2b:be:a8:a0:e8:
a3:38:64:b2:61:3c:3a:21:9e:2f:56:46:ee:41:1d:
d9:13:23:b0:c1:81:05:11:2f:34:4a:54:bd:f6:bc:
34:5b:42:22:40:51:06:a6:67:b8:5a:6f:d6:59:b5:
63:46:05:6c:07:b4:d3:9d:97:76:87:10:f0:ad:e3:
64:25:f6:e5:a5:39:e3:d8:f7:a7:fb:22:90:c3:06:
d4:48:11:61:2b:ef:9d:ef:8b:a5:57:52:0c:7b:38:
78:ff:a5:d3:03:cd:ad:6c:7e:ab:93:89:59:3e:22:
28:46:f4:64:fc:3b:23:41:c4:01:4c:d0:69:b0:e0:
b3:ca:d6:99:5a:e1:f7:a4:12:db:86:48:a0:ee:80:
54:0d:79:bb:55:87:64:be:bf:a5:34:83:ae:04:8c:
d7:fe:57:88:1a:05:4f:6f:b2:87:95:5a:8f:43:a1:
8e:f3:c0:30:56:f6:b8:dd:10:65:fd:5a:b9:5f:8a:
ca:ed:fd:06:72:21:ac:05:81:ba:13:c4:bf:71:de:
39:18:05:65:28:d7:f6:08:07:7a:0b:b6:19:dc:86:
2c:25:ac:35:f3:0d:04:74:47:04:38:78:fe:f6:ba:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:81:0E:2C:9D:59:B1:6F:A0:9A:98:4F:36:78:2D:B2:A4:F7:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3c94bab-5582-3ac5-a08d-19e85b503478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.16.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:09:10:d1:c5:a0:a8:4e:a4:05:57:97:c2:ae:f5:20:b9:7d:
c0:d4:4d:52:79:f1:ac:73:80:5b:68:66:5b:d0:36:5b:9e:41:
a8:16:87:dc:49:47:3c:37:3f:24:bb:95:40:d2:e7:0b:9c:61:
0b:56:31:58:e6:a7:75:dc:8b:41:b5:bb:5b:fe:aa:05:6b:11:
b7:15:fa:23:88:96:81:88:5a:ea:9a:58:f3:46:93:f6:36:52:
21:f7:d3:6f:8e:d0:1a:86:f9:c9:fa:d5:f5:49:de:e2:db:6e:
f4:6e:d7:59:67:77:e1:e7:4f:df:ed:48:f2:a9:e9:fc:84:4e:
a1:8a:53:67:8c:b0:90:76:f2:45:21:8f:97:76:16:aa:bc:37:
ba:0b:78:0f:3b:1c:29:c3:69:cb:18:02:8b:61:80:b3:39:62:
36:38:ac:70:4e:d8:ad:03:f4:6d:4f:8a:a4:ca:d0:9a:0a:a3:
94:6a:53:d9:17:51:92:b0:24:42:46:2b:fa:38:37:58:1c:f1:
c9:9e:71:db:25:7e:b7:d9:a9:d1:f8:e3:14:5b:e2:6c:7a:18:
d6:09:58:37:f3:d1:48:1d:82:92:74:b7:4e:70:2d:86:b8:72:
d0:ce:bb:c7:8b:c2:81:d2:62:c8:03:57:54:e7:d5:a0:4a:f1:
ab:f8:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:13 2024 by rpki-client on console-fra.rpki-client.org