Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f50aa4-9c97-3fe6-adc1-efac8c481952.roa
File: d4f50aa4-9c97-3fe6-adc1-efac8c481952.roa (raw, json)
Hash identifier: omPAQtUi34fIIk7+EPg1YlJPOkxwQ+MBQ3a1lRRDBP8=
Subject key identifier: 9F:0D:99:96:57:A8:79:6A:71:A0:99:E1:40:D8:6E:FE:08:CC:5A:5F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E3E336E458A2032E308A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f50aa4-9c97-3fe6-adc1-efac8c481952.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 30363
IP address blocks: 209.156.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e3:e3:36:e4:58:a2:03:2e:30:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=3f00e74e-041f-4493-a49f-338129bc75b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:3b:87:a5:32:89:88:c0:b8:5e:9c:83:64:
74:77:9f:d0:41:28:74:56:cd:86:10:d5:e0:37:7d:
f9:fb:87:0b:69:a9:98:82:1c:e2:26:2f:de:09:43:
40:7a:38:96:43:a5:c0:1b:80:6c:37:12:0a:d8:1b:
d9:e8:7b:bd:35:e1:cf:33:ae:a7:39:3c:f1:34:6b:
ed:30:36:9c:62:43:c8:13:f3:53:37:f0:43:2c:05:
46:a0:b0:a8:cd:71:eb:10:6f:28:c2:3b:72:e3:7e:
a2:0f:d0:c1:84:b5:f8:75:c0:f6:ac:ea:f9:6b:9a:
d2:32:e1:46:5c:7b:2b:19:30:3f:f3:4b:fd:1c:c3:
91:96:68:ca:c9:46:ed:c6:a8:a0:15:e5:c0:f6:d5:
74:db:85:46:f0:d2:53:0b:f1:57:7c:89:c4:b7:c8:
2e:93:c7:73:82:75:01:31:bd:ef:3b:02:e5:f3:25:
15:4e:12:56:1f:1d:0f:6d:d0:94:d1:43:ba:13:5c:
bd:7b:a1:3c:1f:00:55:56:9f:34:63:38:2d:11:0d:
84:b1:0f:8e:8e:92:67:58:97:70:f9:ce:cb:1c:37:
91:fe:38:0f:81:97:74:35:1a:09:61:39:0c:59:df:
2d:39:9f:c6:b6:07:ad:60:a3:93:d9:2a:42:52:45:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:99:96:57:A8:79:6A:71:A0:99:E1:40:D8:6E:FE:08:CC:5A:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f50aa4-9c97-3fe6-adc1-efac8c481952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.156.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:17:d6:06:6c:61:38:35:d0:b8:ef:16:5a:ea:92:9d:aa:9a:
07:6d:27:d0:b9:dd:09:57:f0:31:bd:28:77:a4:62:b4:1f:5d:
b5:12:35:6c:9d:de:45:1b:45:03:91:24:97:5d:4a:d5:5f:fe:
a8:e3:97:35:b2:7e:12:1e:71:08:d5:95:a7:56:e4:28:e6:57:
d2:a9:a1:0d:1a:db:00:53:3f:b1:cf:2c:51:d4:27:1d:65:ed:
3a:4d:45:8f:cb:2b:35:33:04:e4:6c:af:65:e3:0a:e7:e1:d7:
4b:51:54:da:f6:3d:28:a7:20:61:fb:83:49:66:eb:15:fb:95:
d8:7e:14:be:8d:4b:5e:fd:15:8b:cb:3e:23:1e:a3:e8:5a:7a:
f3:63:93:2a:29:a9:68:76:e1:64:a7:be:49:d0:cd:0a:6e:37:
72:fa:b3:da:03:89:9b:da:ee:6e:d5:c0:ce:a9:59:e9:f3:e3:
01:f8:6e:99:83:e4:4c:08:49:02:4b:e5:90:27:68:0d:70:32:
73:63:7a:8e:15:ff:2c:f1:e3:56:77:04:88:f4:49:05:34:3b:
fa:79:0e:12:b9:53:0c:85:0c:cd:77:c9:d0:ba:ad:ef:d0:3f:
b6:ff:aa:9a:98:22:85:27:eb:2c:3f:3d:fc:d2:cb:f7:eb:73:
e9:21:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:43 2024 by rpki-client on console-ams.rpki-client.org