Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21c19f27-9b3e-36d2-afb5-b199d3865110.roa
File: 21c19f27-9b3e-36d2-afb5-b199d3865110.roa (raw, json)
Hash identifier: SWEuk/q5yAP248JS9ErORlVK/cmoA3HuFRqAbgR0sMQ=
Subject key identifier: 4C:DF:12:7A:77:A1:91:EF:06:55:BC:4D:F4:A4:19:52:92:7D:C3:68
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661AE338A533FC6075274380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21c19f27-9b3e-36d2-afb5-b199d3865110.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.89.40.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:e3:38:a5:33:fc:60:75:27:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=1c3a9cd5-15e8-4b38-b4a7-713a9e6e4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:9d:84:09:39:5f:46:46:2b:89:04:77:30:
42:e5:db:f7:19:d6:24:c8:48:aa:b7:05:a1:fc:52:
57:39:df:8a:23:b7:92:4f:02:e5:88:52:dc:9d:97:
73:c0:48:b3:88:a7:fe:48:90:ca:a3:c6:e2:22:67:
92:98:5f:f9:cd:13:fd:21:6c:db:c9:b0:d3:ee:a6:
61:4f:e5:77:2c:2b:77:2e:dd:aa:64:d4:0a:b6:de:
fa:4e:c5:ac:68:6d:1c:4c:fa:37:88:cc:1f:24:61:
bb:aa:f9:5f:47:98:42:44:91:b6:af:5d:e6:b6:e6:
c0:84:48:22:62:b4:24:38:85:ae:f6:0a:dd:2f:9a:
07:4a:56:1d:7c:5f:35:f9:72:34:b0:a1:d3:3e:3e:
5d:6d:be:b0:2c:80:ce:c3:ce:1d:e9:6e:8d:49:2c:
f1:9d:0f:c3:3f:c3:09:d9:5b:e2:f2:71:b3:63:ee:
54:04:18:5e:cf:fb:4b:31:80:0a:6d:24:3b:ec:ce:
af:4e:e4:57:e4:b5:e5:a0:59:b8:03:e1:34:fc:12:
bc:cc:cb:9c:8e:fc:4f:ba:92:28:9e:e9:17:b4:25:
0f:7f:46:4e:a4:d0:56:49:3c:79:65:18:cb:9b:fb:
de:89:2f:03:9f:e5:4c:0b:e2:e9:2e:7b:8d:e7:ac:
f6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:12:7A:77:A1:91:EF:06:55:BC:4D:F4:A4:19:52:92:7D:C3:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21c19f27-9b3e-36d2-afb5-b199d3865110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:6b:18:d9:1d:8f:58:90:38:ff:b9:98:b2:ba:75:04:c7:26:
c6:52:a5:23:db:0c:ae:01:83:52:73:88:84:15:c1:1d:ca:35:
29:08:f2:e0:e0:3e:d6:95:d8:ec:22:14:b9:45:da:65:b0:57:
37:c2:16:9c:30:83:7f:07:5d:77:7d:23:8b:43:93:66:99:c0:
bc:cf:0b:a3:c1:07:fa:25:6c:f7:4a:28:8a:50:f0:17:5c:ca:
01:d7:15:ee:c9:38:11:e5:35:ca:7c:70:4b:14:23:7a:25:54:
48:f1:83:31:77:5b:f5:d7:ed:4a:ad:ea:8c:3d:15:e1:6d:98:
e8:64:10:04:e4:ed:f0:5b:a7:40:e5:fd:28:8f:85:df:1e:e5:
4f:96:dc:85:f9:92:8c:57:ef:11:0f:37:a2:5f:51:81:bb:c4:
81:4c:63:6d:05:e7:4f:cc:2f:b2:cb:33:1c:74:ad:f2:fa:0a:
71:09:12:3c:8c:00:80:e9:0b:2f:b2:e9:94:c7:e0:bf:f1:fe:
47:6a:d2:d3:e4:09:1f:85:7d:c9:b5:1d:28:65:b3:f9:2e:8c:
d4:e5:eb:be:b0:d8:86:1b:27:fe:b3:71:0e:db:90:21:a4:31:
c4:5f:5a:fc:4c:d3:e0:05:70:8b:bf:86:fa:e6:27:df:90:f2:
7f:b1:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:58:54 2024 by rpki-client on console-fra.rpki-client.org