Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a2a56d7-2c04-3263-a73b-c9132acd0c35.roa
File: 0a2a56d7-2c04-3263-a73b-c9132acd0c35.roa (raw, json)
Hash identifier: rMYSw7UqzosrLjlL52stoihEuZtcrS41ZOc6/goaTO0=
Subject key identifier: 31:8C:47:DE:0F:48:AE:47:82:D9:73:EF:CB:36:E8:7F:92:06:3A:E6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661610CA9BC3D9457B2AAB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a2a56d7-2c04-3263-a73b-c9132acd0c35.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 50.96.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:10:ca:9b:c3:d9:45:7b:2a:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=29180ea8-3ad0-43e8-b8dd-b15adbf2c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:d9:88:05:13:88:46:ea:7c:cb:88:b9:9d:
ef:7a:df:92:fc:f0:01:70:48:69:65:aa:f8:8d:32:
91:6d:93:a1:86:15:00:da:fa:0b:9e:df:8a:cf:d1:
9f:89:32:e0:bb:d0:30:e8:af:8c:d6:2e:6e:56:47:
f0:a1:5e:6b:a8:57:1e:e7:1d:54:89:d0:aa:51:f4:
3c:67:d6:1a:5d:93:8c:d8:ad:f3:b0:ad:12:7d:50:
c0:3d:5f:a8:d1:15:4d:88:77:3e:e3:f8:7f:c3:67:
12:ff:16:6f:f4:5b:83:28:89:8c:25:c0:d5:b2:40:
f1:9e:62:9b:e6:81:33:21:fe:cd:38:35:24:61:05:
92:41:27:0c:ab:d1:23:9a:6b:d7:9b:41:56:1e:7b:
87:fa:80:ab:cf:1a:66:90:13:1f:90:9a:6a:ed:16:
c6:63:d6:b3:83:f5:bc:d1:52:35:9a:53:40:aa:b2:
d3:01:dd:8c:9b:95:1d:56:8e:57:bc:f7:bc:a5:ca:
36:02:d1:d7:5f:96:e9:81:0b:30:85:60:d2:e3:c4:
dd:0b:08:09:40:10:bf:cf:46:08:e1:a3:2b:11:98:
0e:68:7f:02:4c:e3:fd:a7:91:e4:fa:fe:af:66:cd:
9a:69:c7:89:2a:25:3a:76:0a:a7:4a:cb:7d:6c:82:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8C:47:DE:0F:48:AE:47:82:D9:73:EF:CB:36:E8:7F:92:06:3A:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a2a56d7-2c04-3263-a73b-c9132acd0c35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
50.96.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d1:8e:8c:10:61:c0:95:0c:f4:0b:22:fc:6a:68:e8:03:ec:
47:c4:ed:c1:6f:e7:f8:05:20:56:d6:2b:29:4a:17:39:d1:9c:
ce:57:4f:3c:be:44:5c:0d:77:87:44:53:92:93:45:53:04:88:
32:1e:7c:64:3f:c5:89:be:f3:69:33:c8:aa:bd:db:7e:e2:64:
13:5b:20:96:67:1b:21:98:87:94:3f:75:9d:1a:7a:58:de:53:
e1:57:cc:46:95:ef:db:d7:fc:c6:7c:04:19:c0:b7:a4:62:9f:
e9:41:2d:f8:43:8d:59:6f:7c:99:a9:a8:aa:90:8c:87:36:33:
84:94:9c:5f:77:a3:c8:45:a7:ae:4b:17:13:eb:4b:e2:8f:d5:
fe:5b:db:93:c5:38:33:da:88:de:de:8f:53:55:4c:fb:a1:88:
bd:a7:b5:7e:2b:6e:52:f0:8f:52:88:26:c6:8d:ac:51:7d:97:
7e:39:30:96:c1:7b:47:fe:fa:4c:da:f9:3f:29:17:77:ba:26:
74:07:3f:96:1d:c3:7d:24:83:28:ea:ac:22:2c:ef:0f:7f:b5:
78:52:5e:dc:1b:fb:0d:50:68:45:82:ca:2f:20:0e:48:91:00:
d8:b4:2a:a6:f0:ba:c6:58:50:49:63:5c:0d:67:61:3a:23:9d:
a7:bf:8b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 06:12:50 2024 by rpki-client on console-fra.rpki-client.org