Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f79ef8d5-d2ad-31e0-ac41-1ec251c58649.roa
File: f79ef8d5-d2ad-31e0-ac41-1ec251c58649.roa (raw, json)
Hash identifier: tfuzMSZ1VKZlBN0aucasQAEgSI3w6cZMwdddKjybwSE=
Subject key identifier: BE:2D:C5:3D:8C:94:95:96:8E:96:EC:D2:5B:7A:0D:F9:2E:1F:8D:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6621138F6EAF729272325840
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f79ef8d5-d2ad-31e0-ac41-1ec251c58649.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 174.130.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:13:8f:6e:af:72:92:72:32:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=343d7c0f-49fe-47f5-968d-72d57312b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:14:b3:9b:40:88:87:da:be:bd:0a:41:e4:
a2:80:4c:db:d0:ab:35:2c:7f:9c:45:77:f0:d9:ca:
5b:df:aa:02:4c:59:ee:c0:3e:7c:e7:f1:a3:61:52:
4d:91:6d:ab:98:ea:e7:7e:3c:f6:9f:ba:d4:87:43:
7c:0e:57:4d:0f:93:70:bf:cc:a4:aa:a3:c2:a5:19:
ed:6a:47:1b:9e:76:a2:04:5a:03:30:2c:4f:cb:b4:
0d:58:17:24:08:c8:aa:dd:44:30:ac:bd:d5:ac:5e:
d9:54:b8:73:7e:4f:6c:60:a7:83:cf:e7:ac:23:91:
58:d3:21:d4:ba:1a:68:59:7f:6b:43:e2:fc:7b:31:
05:3a:cc:c7:87:96:bc:95:9c:a4:3c:8d:e5:88:95:
88:b4:61:f5:dc:5b:d1:4d:b9:e0:1c:24:59:14:6c:
32:2c:f9:ea:82:f7:a5:7b:49:a4:fa:d9:d5:0a:bc:
1f:bc:98:e6:75:ad:47:a2:99:3c:02:38:a9:d3:17:
d0:79:e1:21:b4:72:73:a6:e6:d7:bf:d6:da:36:a9:
38:57:05:69:c8:49:bd:ba:5d:4e:97:0c:4e:1a:87:
e1:db:b9:74:3c:0c:a7:07:9e:54:b6:fb:f3:f3:1d:
df:55:d9:1d:69:3c:10:19:a4:48:b1:65:19:86:eb:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:C5:3D:8C:94:95:96:8E:96:EC:D2:5B:7A:0D:F9:2E:1F:8D:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f79ef8d5-d2ad-31e0-ac41-1ec251c58649.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.130.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:45:0a:93:f1:1c:43:34:97:ee:35:5c:25:7a:dc:b8:32:1a:
61:ae:a3:72:33:14:7f:5f:c5:ab:e8:f6:d7:54:d0:4b:a4:02:
b2:9d:95:9b:88:85:ff:60:9c:6c:78:ce:13:83:2a:65:77:cd:
5a:dd:41:45:b4:eb:18:32:fc:da:8b:d4:89:82:0d:e0:cb:a1:
8b:0d:5e:a5:e9:12:82:6d:d5:e1:c1:4b:22:e3:80:ce:fa:3a:
20:02:e8:4c:1b:d4:81:f9:28:0f:95:7c:1d:f6:1d:1f:0f:35:
b0:11:a4:4d:37:67:67:de:41:7d:5b:ce:98:09:e6:14:f5:38:
d5:01:f2:e7:82:46:be:cb:c7:9d:04:31:cb:ac:17:68:24:d3:
7c:f4:63:2a:2d:23:e7:12:a9:d2:b2:09:d4:31:05:39:2f:a3:
83:ef:58:34:b2:db:43:8d:4d:54:e9:b5:ab:b2:29:d3:09:4a:
31:64:31:f1:7d:4a:fe:19:41:5d:11:aa:29:bc:bd:2a:3e:23:
8d:59:58:15:b1:0b:a9:06:3b:b2:82:b0:2a:0c:80:40:5a:a4:
16:99:ee:08:76:0c:9c:74:f6:45:60:e5:e5:a3:6d:38:32:c1:
13:85:cd:f9:b8:be:7c:eb:10:a4:74:0e:8f:ca:20:1f:59:c3:
28:fb:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:36 2024 by rpki-client on console-ams.rpki-client.org