Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dff9f822-e481-3c5d-a585-16fbbffacaa3.roa
File: dff9f822-e481-3c5d-a585-16fbbffacaa3.roa (raw, json)
Hash identifier: kVlsXBSTNcALxSbBCmSaQpdv2Ie/vT+Kl64CzbEn8Io=
Subject key identifier: C1:B9:43:23:F8:86:D9:E6:B1:D6:FD:95:ED:E1:67:C3:2A:20:8B:F9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB935534CCD3E3E76AC93A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dff9f822-e481-3c5d-a585-16fbbffacaa3.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 10584
IP address blocks: 63.138.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b9:35:53:4c:cd:3e:3e:76:ac:93:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=0977e6e7-b5b1-407d-a67f-3077d594aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:f6:2a:f4:69:53:66:c0:32:c4:a8:34:ac:
a7:a6:ba:4e:3d:4b:ac:bf:ad:a3:ce:37:df:a0:0f:
63:6a:d3:5c:36:d3:c5:b3:43:8f:c3:8f:28:c1:f9:
ab:e8:d5:dd:a2:b2:86:92:ca:0d:3c:4d:a2:48:ca:
a0:1f:5f:38:fd:5f:36:36:35:d8:e2:ff:fb:bb:d3:
9f:6c:f1:26:a2:a6:18:08:82:ec:e9:fb:3c:9f:f9:
da:a6:26:98:f4:51:8d:74:b6:96:b3:81:09:7d:c4:
d8:37:3c:58:a7:1f:40:d5:41:f6:fe:99:cf:a0:77:
d0:89:66:b2:ee:81:b6:40:d1:ea:8d:6a:6a:ca:12:
a2:3d:d8:33:a5:7c:22:a8:52:79:ad:7d:35:0e:d6:
4c:82:3c:c7:c6:b1:e3:62:cc:fc:f8:e9:d9:77:e9:
0f:58:ae:d2:6b:21:99:c9:21:41:aa:7b:27:3c:45:
83:c7:96:5b:7c:59:a3:a9:82:1a:7a:b7:a6:cb:c0:
02:13:f0:06:34:85:ec:fe:a5:c4:59:70:f9:e7:5c:
50:13:54:51:51:f7:73:78:51:85:ef:9c:11:ee:01:
bb:84:9c:1a:f0:4e:f8:c8:35:3d:ab:0e:ba:60:3e:
0e:22:5e:64:af:07:3a:fa:6b:5c:f4:06:ec:e7:d6:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B9:43:23:F8:86:D9:E6:B1:D6:FD:95:ED:E1:67:C3:2A:20:8B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dff9f822-e481-3c5d-a585-16fbbffacaa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.138.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:9a:2a:1b:71:36:52:e9:e0:07:7f:4e:fc:56:6a:87:27:5b:
ae:f2:52:a7:ac:2f:7d:51:e3:c4:ed:f2:2d:4e:08:ea:5e:ba:
74:51:64:9b:1f:4b:6a:9a:9f:e3:d4:75:92:a8:21:4b:60:9c:
15:fc:52:0a:dd:65:2c:93:ed:6a:f2:2f:23:b3:29:1b:63:30:
26:97:3a:be:08:35:98:62:be:c1:47:09:7f:66:56:02:e9:e7:
d9:0b:5d:89:d3:71:b0:98:df:61:cb:bb:a5:35:8e:82:01:9d:
57:74:9a:eb:71:84:41:db:bc:e9:c3:2c:2b:b9:10:dc:40:c8:
c0:df:76:c6:0b:2a:31:45:23:0f:e0:6a:90:ea:8c:e8:73:5e:
a6:8d:f6:00:d5:12:96:8e:3a:ba:f3:96:c3:bb:a5:82:b7:e0:
7e:b1:f0:e6:d7:d2:8b:47:a7:32:23:7c:22:9f:06:ff:17:b1:
4f:f9:a9:ce:48:da:da:27:d0:9f:d3:8d:88:f2:8a:37:04:3a:
60:5e:e8:77:7f:79:02:cc:1b:bd:0a:00:9f:12:5e:5f:a1:15:
cd:46:ba:a8:2f:70:c0:5d:57:6f:73:fb:12:b9:42:60:0e:a5:
35:be:c3:c8:96:ce:b4:f3:1d:19:9c:09:a0:5d:df:20:8e:61:
a5:6d:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:14 2024 by rpki-client on console-fra.rpki-client.org