Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab65a27-0cf3-3e99-b377-c78d65141d17.roa
File: 1ab65a27-0cf3-3e99-b377-c78d65141d17.roa (raw, json)
Hash identifier: 6/E0icVbwj1zipvjnK+6d/4KzCpHofosBpGY1UrEnJU=
Subject key identifier: 6F:AF:60:D5:D1:9D:15:88:C1:F8:35:1A:63:6D:4A:31:4F:91:9C:AE
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DB240ACB9ACCB080B41C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab65a27-0cf3-3e99-b377-c78d65141d17.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.20.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:b2:40:ac:b9:ac:cb:08:0b:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=244d9432-5e2b-43b5-96df-cc87017b08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:3b:57:0b:d6:e3:a4:ae:84:d6:e9:2c:11:
28:fd:7f:75:0c:52:95:17:77:ab:1d:8e:42:17:13:
5a:33:f2:66:54:46:cb:d0:a9:4c:ea:16:9a:88:8a:
53:bb:14:7a:e4:f8:0d:c3:58:e5:89:0d:17:0c:50:
74:41:86:e3:ab:79:17:d5:c7:11:c9:15:b9:b1:8b:
1c:80:bd:65:fe:85:2d:26:7a:56:6f:95:fc:77:0b:
b9:6d:3d:25:e8:33:07:ba:6d:54:54:0f:98:51:ab:
34:10:9b:4a:be:7f:3e:a9:d4:2f:b8:1f:87:49:5c:
91:b1:e8:f8:ef:6e:b1:2d:a2:84:07:28:ca:81:ee:
fa:15:be:bb:44:9e:cd:c1:57:bb:3d:5f:b7:88:a7:
b4:96:b9:23:82:24:46:c6:34:d0:06:7a:36:00:49:
c0:57:87:97:a1:be:2a:0c:14:e3:be:d5:d4:a5:99:
81:e6:64:fc:81:83:5a:a9:fa:e2:19:f0:76:8e:60:
2c:99:ee:a7:8a:2c:fc:6f:55:53:08:56:1b:02:4c:
24:fd:b2:87:94:b5:f8:e5:19:75:2d:61:ab:a4:df:
ca:34:a3:28:de:f2:d5:41:4d:fc:0b:1b:cd:28:4f:
27:9a:c2:ce:d0:c4:96:a2:1a:5a:98:d7:99:9d:39:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AF:60:D5:D1:9D:15:88:C1:F8:35:1A:63:6D:4A:31:4F:91:9C:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab65a27-0cf3-3e99-b377-c78d65141d17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e7:20:04:49:8c:c3:2b:60:bb:89:ed:2f:5c:6c:aa:dd:40:
db:fd:3a:c2:2c:6a:90:55:24:e5:30:c8:ea:a1:18:0f:d7:04:
3f:d6:28:21:a6:4b:ba:7b:1e:e9:af:d6:14:68:6c:c1:33:34:
5a:8f:04:ba:d2:05:28:a9:44:31:f3:10:f8:02:79:13:ce:74:
ab:9d:ed:0f:86:66:ed:86:60:76:8a:f4:4c:4b:73:8e:2b:ab:
8e:69:af:29:27:fe:3f:17:a4:c7:b6:9d:89:74:3e:83:77:7d:
8a:67:d9:5a:6f:ab:eb:e6:1f:c3:a2:4e:89:d4:39:80:1b:f7:
9f:80:e0:70:97:96:2d:da:df:60:dc:9d:1b:85:c8:27:87:e5:
4c:d7:d4:54:55:8c:52:fc:ea:77:a7:6d:2a:d9:77:22:0a:e5:
01:27:f9:23:4c:bf:05:f1:3d:48:98:57:97:12:91:e1:8d:8c:
a8:0d:5f:bf:ac:46:e4:63:a4:00:d8:37:ac:b6:69:a0:06:21:
42:54:4b:43:90:98:87:f2:d7:57:e1:51:f8:ea:06:d2:51:9c:
11:37:58:35:94:b2:3d:cc:ee:7f:1f:78:da:78:96:1c:86:20:
37:8a:29:1a:e8:d5:b1:b6:68:4f:39:90:2f:22:94:1f:2e:41:
fc:4b:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:53 2024 by rpki-client on console-fra.rpki-client.org