Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d559b3a0-1f3d-3834-8f92-e0952ba4bfe2.roa
File: d559b3a0-1f3d-3834-8f92-e0952ba4bfe2.roa (raw, json)
Hash identifier: R8S8CE3PdeJvC92OOPjEwz7Q0dI9a2NeboGGp9N2X3Y=
Subject key identifier: 3A:B3:85:9D:C1:4C:A7:92:96:22:A7:20:5F:B0:08:16:5C:3B:B8:EB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F2B29CBC94A4F38B334A400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d559b3a0-1f3d-3834-8f92-e0952ba4bfe2.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 64.52.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:2b:29:cb:c9:4a:4f:38:b3:34:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=dddea743-24cb-4d27-a4c5-f852185f0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:72:c7:8c:56:f7:a7:58:b8:90:45:4b:d5:
8f:88:50:c5:07:d2:cd:75:ab:8a:3f:83:da:d3:9f:
fc:1d:ab:28:78:2a:75:97:2f:06:e3:5e:50:e2:c0:
25:0f:47:5e:1f:ea:00:ff:ca:4c:a9:9f:59:5a:5c:
2d:75:ea:31:87:79:15:5c:19:3b:db:24:db:18:21:
31:4f:6f:58:cb:54:da:84:42:26:5f:34:0e:eb:66:
71:00:7e:62:87:62:12:e6:d9:cf:28:00:25:0c:ac:
26:0e:b0:f2:69:75:a2:c4:1c:0a:4b:34:0a:55:7f:
d8:5d:6b:8e:ed:37:a4:00:9b:fa:0d:96:81:c4:97:
7a:e1:37:02:74:90:8a:ac:fd:06:ac:a5:7f:5d:75:
12:d5:5d:09:0e:e7:6b:86:62:21:32:d6:24:1e:1c:
ca:55:7c:ab:50:cc:4d:88:38:30:4a:22:1c:a3:6c:
20:2d:7a:18:22:95:b0:80:84:e8:b5:fc:95:44:5a:
8d:40:ba:e4:01:39:20:d8:25:58:ce:a1:8a:29:02:
d7:70:42:50:71:8f:d4:cb:b0:05:03:5b:61:af:b0:
0b:49:08:40:32:c5:79:0a:ae:9d:03:34:e0:a8:8d:
f5:82:6f:97:a6:be:2f:33:64:c0:28:d0:f3:ee:89:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:85:9D:C1:4C:A7:92:96:22:A7:20:5F:B0:08:16:5C:3B:B8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d559b3a0-1f3d-3834-8f92-e0952ba4bfe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:e2:0b:37:33:f5:b8:a8:10:53:12:be:83:75:d8:08:98:24:
17:c7:74:cc:a4:0c:2c:ac:db:21:0c:da:6d:bd:5c:e7:ea:81:
1f:1d:bb:97:39:05:fd:71:c7:f9:be:0a:fc:70:9d:55:6c:3a:
ba:47:f5:7e:45:e1:e3:03:be:87:1e:34:02:ee:be:d4:53:53:
41:9f:c4:8d:d9:e7:3f:ba:58:a6:cc:c0:b3:bb:d1:9b:ad:90:
67:0d:58:83:23:3d:d2:3d:df:49:7f:f8:36:04:bc:ee:e7:a2:
d2:2e:da:70:43:df:ba:af:3d:91:b5:52:1b:ce:d9:7e:0b:48:
7f:4e:a9:fd:1b:a5:7c:68:2e:04:f0:e0:7d:95:f3:f1:d0:c1:
bf:ea:1b:cf:78:d2:39:8f:56:8c:f1:e8:47:fc:c0:e5:d9:67:
93:7a:f5:a7:97:ed:fd:6e:31:f5:08:5a:b0:a1:04:a3:6f:ab:
20:f1:9d:32:e3:6a:d1:39:de:b5:6e:1f:87:32:87:98:48:90:
ae:e4:ca:25:9b:d3:b5:68:e6:e5:41:a5:2c:ae:9c:54:e2:66:
f7:7d:99:ea:8f:31:86:1d:8f:00:dd:29:d9:c1:87:b6:6d:df:
23:f8:ea:01:52:c2:9c:de:df:e7:66:15:f3:bf:a1:18:0a:e9:
91:b6:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:13 2024 by rpki-client on console-fra.rpki-client.org