Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2b5760f-b371-3e60-acc6-0ed6c3a8f585.roa
File: f2b5760f-b371-3e60-acc6-0ed6c3a8f585.roa (raw, json)
Hash identifier: ZNign8v5NqFqsAT1qt4AJPNszcdpNHN3BlmcF5KG3is=
Subject key identifier: 9A:DA:83:E7:93:9A:AB:6F:B1:5A:F0:4D:C8:53:BC:EA:41:56:BA:CB
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551CD91D7A323186B2DAFB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2b5760f-b371-3e60-acc6-0ed6c3a8f585.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 166.102.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1c:d9:1d:7a:32:31:86:b2:da:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=f5ab6ae4-3c3c-4d27-9f60-ad1e90a3b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:37:d3:67:1d:a4:58:cb:02:26:1d:6e:a6:
6f:77:d7:3b:6a:c0:8e:31:4e:44:41:4e:61:51:e9:
13:3f:73:0c:67:f5:aa:b9:64:60:30:42:88:26:e9:
60:77:7a:26:2e:c1:e5:86:5e:40:e3:23:eb:f2:01:
45:7f:1c:a0:4b:19:0c:49:2c:c4:df:13:9e:6a:ce:
93:19:f8:cb:68:f2:e2:bd:d6:67:c1:d8:69:10:0a:
d2:4d:c1:cc:b4:b1:08:95:0a:5e:68:64:f3:14:ce:
1a:71:ef:36:bc:c6:69:69:b5:a0:7b:10:c6:1d:32:
93:97:6f:86:46:bb:c0:fe:4b:83:f0:6a:4f:97:86:
3d:c9:4e:59:91:a2:f9:26:78:64:90:cc:d7:46:c7:
d9:11:4a:63:93:c5:97:85:04:7c:2d:7e:19:74:b6:
3a:b1:f9:05:c0:08:f2:f0:79:5d:93:f8:ce:25:a5:
21:7d:dc:3b:51:31:7e:23:d7:67:ac:c0:96:5f:e5:
fe:53:a6:cd:f4:12:2d:3c:59:65:97:ba:56:a3:2e:
32:f3:ec:f4:b1:8f:8f:48:1e:87:85:59:e9:c7:23:
d5:2a:1f:2e:be:3e:38:17:d4:6e:bc:54:31:76:7e:
02:04:bd:56:e2:15:36:88:49:6c:2c:f7:f7:e0:1e:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DA:83:E7:93:9A:AB:6F:B1:5A:F0:4D:C8:53:BC:EA:41:56:BA:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2b5760f-b371-3e60-acc6-0ed6c3a8f585.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
166.102.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:01:8c:83:e4:cb:6a:b9:60:41:6c:30:fe:f1:3d:f8:29:a5:
34:63:0d:02:15:f0:f2:f4:52:32:6e:36:18:fa:60:b5:e6:e4:
c8:ff:6c:ff:c1:6c:91:3d:3d:5c:36:15:f5:ad:6f:81:c1:13:
0d:55:a7:b5:16:7d:98:74:fb:aa:d9:d3:c3:34:5d:12:b3:7f:
d3:e4:4d:1b:69:32:34:57:21:e7:b9:d9:b1:50:31:c2:92:c1:
87:33:81:c6:08:06:d7:c6:39:d6:46:62:45:72:21:13:14:a4:
96:a7:25:3f:ba:c2:5f:94:02:8c:c7:2b:e7:a5:07:cb:c1:55:
11:3c:75:bd:ed:0c:18:0b:a4:95:eb:9b:22:81:62:ed:38:9b:
7e:3a:9a:3c:98:e7:e7:71:f2:8b:c4:de:58:22:40:81:39:31:
51:58:7a:6b:77:0a:0a:fc:aa:e9:e6:9b:e3:43:4f:45:7d:3b:
b1:df:f2:c9:ce:22:ee:c1:8a:03:25:da:4f:47:03:69:44:2b:
9e:48:d5:0b:b7:8a:02:18:53:91:b4:0e:9c:13:ff:f5:f6:2d:
11:9d:04:e4:34:fd:9b:f6:1e:ca:ba:dd:a1:d5:d6:22:1e:8c:
f0:73:5a:1c:d9:09:e7:f3:e6:93:b3:87:15:72:d6:4c:43:b7:
ec:c5:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:35 2024 by rpki-client on console-ams.rpki-client.org