Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/199fc183-b4e3-3197-be77-d3067e887561.roa
File: 199fc183-b4e3-3197-be77-d3067e887561.roa (raw, json)
Hash identifier: 4+CwVYuQ/coKSfH32YYXqt8qPS+S9j2w3g/wVzm7icI=
Subject key identifier: FD:6D:F0:F9:29:A8:C1:D1:B6:B5:93:D5:6E:BA:D3:93:1E:7A:91:56
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66086CAE9C4BD63685019E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/199fc183-b4e3-3197-be77-d3067e887561.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:08:6c:ae:9c:4b:d6:36:85:01:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=3b8f862a-f5c6-4c3a-8a8d-9cca264f9214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:5a:66:36:06:54:df:3b:3f:ab:ce:b4:2d:
57:19:c0:da:a8:4a:d2:1d:0b:ae:3c:d7:f0:c9:f9:
0f:a9:a9:a1:e3:22:b6:51:4b:ea:82:04:5a:43:06:
1e:6a:7a:d1:a2:b3:38:21:2b:20:07:09:fe:13:8c:
a1:9b:9b:ff:60:bf:d0:c8:d1:2c:cd:ff:b6:82:18:
95:20:95:c1:5d:9e:01:ce:f3:fe:5a:98:b2:21:a4:
b7:d8:af:cb:b6:fe:ad:4e:19:fa:ea:63:ba:3a:ee:
98:5b:17:b9:ad:b0:ff:d1:e6:98:e0:e7:f4:72:5b:
fa:40:97:52:ce:63:65:73:5e:83:06:a8:c3:c0:72:
ae:f8:e7:9f:e6:ec:17:a3:45:cc:b5:89:d7:90:54:
4b:66:c9:00:57:a3:84:d4:2a:40:3b:8a:98:16:54:
86:8d:96:2a:aa:f4:b6:66:15:07:20:33:3f:b3:c0:
97:98:17:dd:3f:9b:30:4b:fb:15:e2:8d:b3:7e:e9:
18:88:0b:e3:5b:e1:5d:cc:da:cc:6e:a3:8e:a3:2d:
a7:e4:3e:28:99:f0:5b:82:f1:05:cd:a6:30:10:50:
f4:9d:3c:e8:87:8c:8a:81:64:ed:ba:0e:7c:ae:e3:
93:eb:f9:bf:90:b2:75:3e:c5:34:27:81:e2:05:59:
f5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:F0:F9:29:A8:C1:D1:B6:B5:93:D5:6E:BA:D3:93:1E:7A:91:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/199fc183-b4e3-3197-be77-d3067e887561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:8c:ad:06:97:46:72:f9:07:fc:69:9a:5f:5c:b2:b2:80:5e:
98:11:b4:ac:a2:3e:eb:21:25:34:ca:d5:31:51:91:4b:a6:1e:
d7:a4:0c:52:54:22:53:b7:71:84:ff:dd:93:5c:14:80:e9:57:
92:c7:72:d7:52:e6:8d:38:7a:d2:b1:62:31:85:f6:d5:15:24:
1f:b9:45:3a:09:74:f6:be:4d:f1:13:fd:4f:67:a3:52:bd:6f:
00:95:85:1f:c3:be:6e:da:2c:37:f0:ad:35:2d:17:fb:22:59:
30:1f:34:65:4e:ac:03:0e:3b:f4:20:05:73:dd:72:f7:4a:0b:
a0:28:da:cb:c0:81:ef:6a:61:03:61:66:c9:58:b0:ac:f4:a1:
f2:bc:60:05:11:72:a8:f5:81:07:60:22:82:a7:04:1b:f8:85:
b8:c3:5d:07:de:b3:c7:84:c5:62:52:7a:0c:32:da:35:5a:8f:
60:3e:3f:97:75:67:b7:b8:41:00:0a:9a:76:48:7d:ed:dc:b0:
1f:7b:72:47:86:9f:6c:83:f0:ce:7d:15:07:08:71:e9:79:24:
cc:0f:55:aa:c5:0e:34:aa:1c:ca:cd:ec:2c:43:3b:09:c0:70:
29:d7:49:39:6e:76:99:27:87:ce:eb:c7:f6:ce:70:f4:67:45:
3b:c1:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:17 2024 by rpki-client on console-ams.rpki-client.org