Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d718fb6-cbe9-3846-a2cc-ec0e2c8e4e32.roa
File: 2d718fb6-cbe9-3846-a2cc-ec0e2c8e4e32.roa (raw, json)
Hash identifier: 1Gf45A+ZnUA2YdlzLGRI5i5sSQgTdw5NLUsE6P3G4ek=
Subject key identifier: 77:22:86:BA:CC:28:AB:8A:6A:2B:AB:FB:02:C4:EC:13:24:9A:BD:70
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F2C816E4E2704C85B9781C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d718fb6-cbe9-3846-a2cc-ec0e2c8e4e32.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 64.61.128.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:2c:81:6e:4e:27:04:c8:5b:97:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=8c141a89-f7e6-4a3d-b166-762e001b48e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:11:89:5e:4a:7c:61:b9:6d:72:f1:ca:20:75:
35:07:eb:a1:e5:11:66:d3:b3:a7:fe:1e:87:ff:af:
f7:cc:fc:7a:42:c0:23:8b:2a:48:86:97:b8:e8:11:
6f:6e:ed:8d:71:fc:4e:80:d0:42:76:13:56:05:6f:
86:49:0f:9f:31:bf:4c:72:a3:42:2d:65:6c:bd:22:
39:36:22:88:a1:02:5e:d2:24:54:79:e3:87:ba:25:
8e:07:48:f8:48:3b:3c:18:a8:c9:cd:47:d4:8c:1a:
c3:71:0d:14:78:a9:31:d4:a6:2e:a7:cd:af:6d:97:
69:26:fc:a0:96:a0:4c:5e:8c:47:c6:93:1c:5b:ee:
7d:bf:55:54:db:db:46:ac:b8:39:92:d1:c2:e5:81:
bc:30:16:2d:d9:0f:36:ea:c5:97:56:5b:23:55:a4:
37:b8:da:e3:a9:57:cf:56:c8:5b:15:e0:79:86:97:
9a:d6:fe:31:34:fc:23:b1:f7:0c:4f:ce:95:d2:e8:
d0:d7:a3:f5:bf:88:02:9d:41:d5:bf:fb:49:e3:62:
47:4c:4d:8d:a6:f8:a6:aa:22:10:62:85:ba:82:5e:
87:00:15:d5:e4:42:79:51:da:6a:49:d7:bb:ec:03:
f3:a6:4a:9c:79:12:e8:8c:66:a6:6b:e0:ac:49:d8:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:86:BA:CC:28:AB:8A:6A:2B:AB:FB:02:C4:EC:13:24:9A:BD:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d718fb6-cbe9-3846-a2cc-ec0e2c8e4e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
64.61.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:0b:72:6c:18:4a:24:0b:89:c9:75:31:c1:75:fe:35:ab:91:
6c:c7:cf:19:e0:87:8a:cc:b7:d3:06:b9:ad:94:2a:6b:ff:ea:
47:0a:5a:ad:0c:99:5c:ca:4a:89:7d:a2:02:72:4d:c5:89:55:
f8:dd:a5:5e:6f:9f:e3:2a:31:90:87:d1:a7:30:10:2b:e3:3b:
49:13:13:22:92:94:f7:2f:b7:6d:da:14:a4:52:28:21:ef:6e:
48:89:4f:fe:0b:28:40:dc:10:7a:dd:c3:2c:3d:db:c3:6f:ab:
27:8c:6b:a4:08:6d:10:55:d2:9e:87:fc:e1:fd:c6:cb:51:61:
f3:0f:63:5e:00:3f:a2:9c:59:12:bc:05:ad:61:5f:e6:21:3c:
2a:ab:30:51:cc:a7:d3:58:f7:b8:f4:f0:3c:85:0e:90:e4:cd:
c7:93:c3:3a:0a:76:0b:72:c1:5d:d7:58:a8:8e:3e:49:32:5a:
07:84:af:09:2c:68:0e:a0:7b:6e:05:2f:92:92:c7:fd:43:fc:
67:46:b3:ba:a1:f2:9d:fa:ae:8a:b6:24:d7:64:e8:38:91:3b:
d3:73:8f:dd:03:88:68:62:6c:69:31:f2:9f:38:08:7c:f6:32:
5e:2b:a6:6f:07:09:26:0a:22:58:9a:e0:2d:b1:5f:eb:ba:30:
ec:08:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:18 2024 by rpki-client on console-ams.rpki-client.org