Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19d39a8e-1d87-3a20-a453-c202c171b89d.roa
File: 19d39a8e-1d87-3a20-a453-c202c171b89d.roa (raw, json)
Hash identifier: UFBtiIO18k21o/2ulB/AQTCNs8WvWFb3jdjLns3T8mo=
Subject key identifier: C5:D6:10:AA:8A:32:DC:0F:B2:D8:3D:07:82:81:D9:23:A1:B0:A6:E0
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FC68082E0129999C25CEC00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19d39a8e-1d87-3a20-a453-c202c171b89d.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 29877
IP address blocks: 66.55.176.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:c6:80:82:e0:12:99:99:c2:5c:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=681f2a7f-4f70-4a55-8e01-1bb681af8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:9f:a6:a9:e4:5e:fc:10:40:7c:c0:f8:cd:
b5:a9:e9:ea:af:77:8f:28:fd:f4:5c:0f:e8:df:95:
8e:06:5a:c1:4f:7c:9e:5b:f3:48:56:f9:54:fa:e0:
8c:63:d9:b2:0a:8c:de:78:b7:8f:04:ca:9d:0c:a6:
a0:27:71:99:3b:f9:5c:67:bc:84:a6:ee:a0:7e:19:
e1:06:a3:dc:d1:97:bf:51:0c:41:8a:ad:2c:41:cd:
14:9c:65:0a:53:3d:ea:7f:2c:9c:28:b5:13:4c:b2:
06:8a:71:08:48:22:21:3d:b4:e0:ef:83:f9:2c:b8:
47:d9:74:75:ef:1d:72:89:d0:dd:2a:47:f5:a7:63:
a8:aa:60:05:67:1b:14:b1:03:8d:ab:9c:c5:91:8c:
dc:a4:1c:3d:71:6d:67:ca:37:93:c1:ee:86:4c:3b:
20:14:fa:55:21:e0:71:cc:59:36:2c:70:32:0a:08:
aa:96:c9:99:45:dd:84:5c:df:47:8e:b6:87:cc:4d:
1e:6e:5c:4a:9e:71:63:10:74:9a:4d:ab:0d:a5:aa:
0a:7b:44:cc:90:20:fe:cf:bd:76:0c:ca:9b:21:d1:
fc:69:7b:09:bf:3a:9b:dd:f6:c2:84:fe:77:89:cc:
5c:dc:41:79:23:06:bb:ad:ed:42:c2:27:ee:43:36:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D6:10:AA:8A:32:DC:0F:B2:D8:3D:07:82:81:D9:23:A1:B0:A6:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19d39a8e-1d87-3a20-a453-c202c171b89d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.55.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:e4:76:5e:f6:1f:68:99:ab:aa:af:41:65:96:29:5c:eb:42:
56:ac:87:b4:0c:56:fd:c6:89:bc:20:b7:fb:41:b0:87:2a:3e:
8a:02:e3:f8:49:c3:14:1b:2e:af:a3:af:ca:a1:b4:ee:f8:4d:
ac:d4:f9:ec:ad:e8:45:03:af:ff:3d:3f:b6:93:e4:32:3a:7f:
a0:28:79:3a:3d:8b:07:42:49:a0:bc:9d:83:58:54:72:cd:cd:
46:cc:7f:64:a6:c5:29:ac:14:c8:be:c0:22:50:77:61:e3:86:
e5:88:03:3d:5a:ad:c0:ca:6a:32:d6:c7:61:98:1a:2a:db:23:
8a:53:08:71:2d:4e:f2:62:86:c9:d1:68:f0:8d:3e:55:13:43:
6f:bd:44:4f:5a:f6:b7:3c:61:e7:1b:be:89:c9:a6:8e:40:29:
7c:cd:e5:4d:56:4e:e8:97:a6:d7:5b:06:59:0f:56:80:0e:2f:
67:6a:e2:5a:f3:56:40:e0:d8:2b:71:7d:19:69:47:64:ae:6c:
84:41:f7:f1:7f:0d:59:73:bb:b0:80:f3:b4:07:83:b6:2f:b3:
a6:9a:1e:e1:23:2a:97:26:64:27:31:2c:50:4c:d6:64:08:ab:
6c:b8:6f:57:8c:4a:e8:ad:90:20:50:fc:1a:e1:76:38:4b:16:
22:f7:29:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:17 2024 by rpki-client on console-ams.rpki-client.org