Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/bf4f5cd9-abe4-31f7-bcb1-cf001ff454fd.roa
File: bf4f5cd9-abe4-31f7-bcb1-cf001ff454fd.roa (raw, json)
Hash identifier: P/Uvd1YVGzNnnRpxP7MGbZ/rD2MjRjTH/utYTxK50VI=
Subject key identifier: 05:23:26:23:16:AA:6B:B2:53:6E:C3:42:B3:F5:57:2D:15:90:8D:71
Certificate issuer: /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Certificate serial: 010D0C9F4328583D92C327DD695DAE0D4E195B00
Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/bf4f5cd9-abe4-31f7-bcb1-cf001ff454fd.roa
Signing time: Thu 14 Apr 2022 04:00:00 +0000
ROA not before: Thu 14 Apr 2022 04:00:00 +0000
ROA not after: Tue 13 Apr 2032 04:00:00 +0000
asID: 25776
IP address blocks: 129.15.0.0/16 maxlen: 24
192.35.96.0/24 maxlen: 24
192.35.97.0/24 maxlen: 24
192.35.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:92:c3:27:dd:69:5d:ae:0d:4e:19:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Validity
Not Before: Apr 14 04:00:00 2022 GMT
Not After : Apr 13 04:00:00 2032 GMT
Subject: CN=bdbffc32-32fe-4189-be58-a09a44704062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:06:d4:4f:db:d1:38:7f:13:3c:40:af:37:
2a:f8:46:ca:29:91:d5:ad:3d:9c:71:42:68:4b:fd:
64:6a:9a:3f:5d:c3:80:ce:fa:b5:42:3b:d2:55:c6:
a5:bc:e0:88:0a:5f:b3:ae:a6:41:ca:ca:92:af:c7:
f9:82:ac:e3:55:36:bb:2c:fb:74:fe:aa:8e:6c:41:
59:10:71:57:0d:56:36:b6:58:21:59:f7:25:41:5e:
17:e4:4a:e1:4a:4f:a8:88:27:73:d2:f3:d5:60:28:
43:12:9e:3f:4f:55:ef:77:a3:ac:1a:fe:40:0a:23:
94:5c:0b:c3:1a:c8:57:41:ea:3a:2b:8f:18:ff:16:
e6:b2:b2:f2:fd:1b:f8:3a:fc:49:d9:6a:b3:ee:25:
6d:bd:cb:71:1c:99:46:c1:b4:da:73:48:1a:da:98:
ca:2a:cb:dc:db:bc:2f:47:59:27:06:5c:7c:3a:ef:
d6:2b:8b:dd:85:05:a4:98:ba:23:65:33:ee:f0:8f:
74:59:34:87:34:67:22:ae:85:b9:15:a0:68:54:1d:
87:22:7e:a4:fc:9e:3d:ef:b7:8d:53:a4:e5:c5:ab:
72:57:05:3c:b2:6c:16:6a:23:25:56:36:30:37:f2:
3d:e9:ab:af:d1:e8:82:7c:e7:ee:4d:7a:3c:5a:80:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:26:23:16:AA:6B:B2:53:6E:C3:42:B3:F5:57:2D:15:90:8D:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/bf4f5cd9-abe4-31f7-bcb1-cf001ff454fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl
X509v3 Authority Key Identifier:
keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
sbgp-ipAddrBlock: critical
IPv4:
129.15.0.0/16
192.35.96.0-192.35.98.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e5:c4:63:57:84:66:07:cc:98:4a:f5:5e:f0:c1:7c:70:63:
06:ed:3c:c2:4b:e4:86:22:c0:fc:2d:04:62:e4:4e:c5:bb:e7:
bf:1d:19:5c:10:f0:77:f1:1c:10:2e:12:52:8d:de:08:11:48:
a3:5e:94:e4:0e:aa:d8:c1:7b:2c:5b:ae:6e:42:71:9c:8e:c4:
e2:a0:0d:b5:36:23:32:b1:62:53:8c:6d:89:3a:f7:86:82:67:
63:82:72:a4:91:06:cc:bb:e9:3b:38:bb:ec:1e:01:b8:1f:a2:
4a:ca:8f:84:ed:6c:89:3d:89:a2:2e:37:db:6f:df:14:36:22:
26:90:f7:92:5c:c0:d3:34:9c:2a:5a:67:74:05:a8:10:2c:0a:
c7:e6:d6:9a:8a:44:ce:f3:9c:fb:cb:65:67:7a:2d:ac:a7:79:
08:51:58:51:e0:f1:8e:85:f4:9e:77:6f:7f:30:51:99:09:3b:
15:c5:40:d2:37:c5:70:98:af:ed:58:f9:b5:d9:9b:c2:c4:14:
83:71:25:2d:99:aa:df:4b:2c:7b:e4:b4:25:12:fa:48:b2:99:
4a:a6:df:8e:38:31:74:15:57:be:8a:e7:07:db:43:e4:21:1f:
a3:b8:30:f2:3d:1e:13:08:9c:0c:2d:4b:e3:24:77:eb:75:90:
a1:ae:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org