Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19ef9567-8536-3178-82ec-1f74fc92a24e.roa
File: 19ef9567-8536-3178-82ec-1f74fc92a24e.roa (raw, json)
Hash identifier: 9WJnVyzsxPhVbwPhG2Aodv/7jNFIsDm4UPmJ9hp/vp8=
Subject key identifier: 97:34:3C:D4:E2:D3:B0:C3:15:1A:E4:43:32:37:C2:05:4A:6B:CB:28
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E54763C06B71500F76F400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19ef9567-8536-3178-82ec-1f74fc92a24e.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 19917
IP address blocks: 209.255.230.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e5:47:63:c0:6b:71:50:0f:76:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=fd19316d-2fde-469c-a3a8-c161abad971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:1f:de:95:43:68:92:b3:39:6e:2d:c8:c4:
32:12:bd:c3:9a:69:16:50:0d:6c:d0:25:ce:56:a4:
82:57:5b:3b:6c:f0:4f:3d:59:ff:36:a6:00:b5:5a:
d9:fe:ac:ef:d9:ec:b2:f8:42:a4:0f:f3:ff:52:05:
bc:66:1f:d5:01:bd:7a:0d:b1:25:a7:18:d2:6f:97:
f7:91:62:f3:40:3f:21:9d:96:0d:09:e8:49:ad:59:
fc:2e:95:4b:28:f7:34:5e:b5:ea:b5:00:5d:14:78:
52:d3:9d:dd:bf:a6:71:a9:82:c8:74:d1:98:b5:8e:
04:a2:6a:d5:4f:8c:97:25:1b:01:6f:ac:e2:c7:5a:
24:e0:5e:e8:48:3c:56:f0:9a:9c:14:c5:35:15:7b:
be:79:69:83:a2:07:5c:8c:06:e9:de:cf:37:69:c0:
ae:14:8f:dd:1c:37:77:90:6c:b0:a3:1f:26:eb:ec:
1f:f0:4e:36:45:19:cc:dd:4f:52:31:3e:4c:b5:30:
fe:eb:0d:a2:a6:17:b3:98:8e:74:5d:05:63:4d:43:
67:16:a0:4b:0a:1b:b3:46:43:b0:c3:45:c6:c7:35:
19:97:b8:08:aa:00:01:48:96:bc:34:f7:f5:35:e8:
dd:5a:1a:0c:f3:6e:66:25:83:2a:65:1b:ec:d7:28:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:3C:D4:E2:D3:B0:C3:15:1A:E4:43:32:37:C2:05:4A:6B:CB:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/19ef9567-8536-3178-82ec-1f74fc92a24e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.255.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:fe:a8:fa:0e:91:46:95:de:b7:db:fa:7b:d1:f3:d2:e2:07:
63:26:5c:2a:6a:fe:4a:d7:fd:0f:b1:91:ef:d5:36:cb:08:6d:
2c:fe:8d:f2:a3:73:30:75:63:43:cd:02:40:53:e3:41:93:8a:
89:89:5a:98:e9:b9:ff:d6:9c:40:39:68:55:0a:6b:f1:55:20:
35:51:5c:56:a3:c4:2c:36:71:94:ea:f2:99:bf:d4:13:f4:1b:
5e:b9:3b:fe:a6:b3:25:b1:c8:87:7a:ff:4e:73:02:a2:d8:e1:
b7:c2:43:72:d7:88:10:dc:5b:df:25:bb:9e:b7:78:e0:fb:5a:
e2:2b:a3:a5:e8:f3:99:41:29:bd:c3:fa:1b:9b:35:df:10:83:
91:66:1f:d8:a8:7b:a3:74:c9:57:11:d2:fb:d1:f0:c4:21:cc:
28:19:b6:cc:f9:5b:1c:ec:06:23:f3:47:a7:a5:d8:f7:f0:ec:
e7:a0:76:7d:5f:c7:72:9f:ce:7c:ed:b1:92:aa:e1:ae:74:ac:
98:f2:9a:40:ef:d9:e5:10:73:16:44:dc:02:e4:11:46:12:4f:
2c:3a:81:ca:cf:15:6a:24:79:6f:52:13:5f:a6:99:67:46:2b:
fc:04:b3:d5:72:3c:21:5f:0a:5a:46:86:24:d8:c4:6d:d9:db:
37:23:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:53 2024 by rpki-client on console-fra.rpki-client.org