Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/068c924b-6375-3631-b2fd-e9aa8a30e5f3.roa
File: 068c924b-6375-3631-b2fd-e9aa8a30e5f3.roa (raw, json)
Hash identifier: PSXwa0vKH90Ly63kOly/gBw2avXJTHuhYjKgK3iQGCc=
Subject key identifier: 31:CE:2F:D1:D9:8A:6C:CC:DD:60:BF:6B:DD:90:EE:CF:DF:09:81:D6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661FAF37BF4405A7CE770200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/068c924b-6375-3631-b2fd-e9aa8a30e5f3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.186.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1f:af:37:bf:44:05:a7:ce:77:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=61e1ac48-8a4e-4d33-a0d6-deae59dcdeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:61:f8:a3:26:a2:b3:bc:48:2c:74:73:f7:
e5:54:a7:51:69:29:11:76:04:c0:ef:9f:07:84:21:
85:d0:57:47:d9:43:53:93:39:d4:97:e9:88:79:e6:
ed:50:de:dd:2e:3a:8d:c2:bf:eb:71:28:92:d3:f6:
b0:29:a9:59:47:b9:47:f9:7f:2d:d5:f8:d2:40:8b:
2b:01:fa:8f:b5:f4:96:ae:b2:db:e9:4e:00:92:39:
7b:4a:0c:38:9f:77:7b:46:8f:6b:68:07:85:2e:5a:
7c:fd:a1:bd:15:3b:77:fd:3a:5d:f1:73:41:7d:8b:
20:5f:51:72:17:dd:02:e7:04:99:51:fe:31:81:eb:
2e:c7:ce:2c:47:f9:f2:31:c3:1f:f1:07:2e:a7:55:
7d:43:69:48:27:70:4e:b2:40:e5:0e:43:f8:79:17:
6d:03:ce:a3:e6:f5:f8:8e:65:88:d8:39:8d:83:81:
25:49:90:dd:17:bd:c5:b7:98:70:87:bd:89:7e:7d:
63:a5:bb:f5:1f:6e:3b:b7:00:09:10:c5:6f:19:ee:
c6:de:67:c7:2a:f3:f6:19:3b:b9:a8:26:01:88:73:
0b:28:36:d9:66:3b:b2:94:ce:47:7c:0a:96:0e:3e:
60:98:be:3d:ef:0f:18:e7:d9:5a:a2:96:1b:b8:39:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:2F:D1:D9:8A:6C:CC:DD:60:BF:6B:DD:90:EE:CF:DF:09:81:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/068c924b-6375-3631-b2fd-e9aa8a30e5f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:f3:5a:e4:f3:46:62:69:d1:14:e0:a6:62:85:57:b2:77:66:
11:23:ae:c4:98:7c:d6:99:d2:ed:3a:a1:4f:0a:06:37:e3:38:
e5:a7:20:e0:01:d2:fc:ec:ac:e9:92:f7:92:68:b7:86:58:6a:
e7:9f:3d:5c:40:47:d9:9b:ad:00:f4:ae:23:b2:5e:3a:5d:0a:
30:39:9d:32:3b:87:20:44:75:eb:b8:66:ca:40:1c:bb:ee:a3:
c8:70:4f:86:9a:0a:9d:c7:87:0c:cb:72:ba:0e:3f:ec:11:96:
48:70:18:e1:08:8e:49:17:72:1f:78:16:54:4a:02:e9:68:6b:
55:cc:72:60:e6:8b:da:52:33:c1:e1:10:91:ca:15:d0:1f:fe:
d7:ee:cc:00:30:81:06:76:b7:38:55:7f:b5:a1:2d:67:55:a3:
4c:82:44:61:fa:36:62:6d:4d:eb:90:40:89:5e:80:70:bb:ad:
d7:79:79:ef:c1:01:50:ff:58:aa:7e:02:c9:6b:a2:50:8c:77:
02:70:f4:5e:db:69:b4:b5:a2:18:e3:d7:36:7d:79:e8:ee:6d:
ff:2d:01:f1:55:9e:fc:3a:ee:38:0d:e1:92:76:8c:03:16:f5:
5e:a5:53:b7:9f:4f:3c:3b:7e:d4:46:47:07:16:40:91:cc:a9:
a9:b3:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:52 2024 by rpki-client on console-fra.rpki-client.org