Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3909db70-c636-3b06-a354-372119f5b8a3.roa
File: 3909db70-c636-3b06-a354-372119f5b8a3.roa (raw, json)
Hash identifier: ndo/X5wEg8Ir01kCorcSrWmvW98JXPK6KYgdK1yd+Qo=
Subject key identifier: 43:44:91:B0:D5:23:D1:35:2E:D6:00:13:22:F5:B4:63:EE:38:0C:2F
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440ED9B3A834204CA750A20
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3909db70-c636-3b06-a354-372119f5b8a3.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 174.130.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:ed:9b:3a:83:42:04:ca:75:0a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=a2d62dd6-4678-4ffa-a360-d9c7626770e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:55:d3:79:95:dc:11:5d:f7:1c:b1:19:79:
84:ce:ba:0c:49:69:ff:5d:4f:a5:a3:22:85:f0:58:
18:b8:4d:86:48:de:47:ea:a0:2d:54:f0:cd:46:dc:
9d:d0:43:f3:fb:85:f3:7c:ab:a9:53:8b:f9:bc:c2:
d5:82:f6:f2:50:5a:b3:35:3b:78:ea:89:b6:6c:11:
47:65:d2:18:a4:2b:f3:3e:ae:83:b7:71:56:0e:7b:
62:cb:9c:e3:e9:ff:8d:1b:26:15:9e:10:25:a2:07:
92:c4:d0:29:f4:ab:24:f4:a1:a4:bd:3a:a9:34:79:
4b:55:ea:05:2f:c4:7e:ee:66:fd:79:47:9b:3d:80:
5d:72:9a:f6:7e:98:3c:d7:95:0e:38:82:d7:1a:6f:
0d:8d:22:a0:1c:86:66:d4:09:7a:5f:61:65:cb:e2:
c1:b8:7d:5b:33:a2:20:0c:ed:bf:12:ba:48:b6:d4:
ec:de:fd:06:9a:e1:49:79:b7:67:31:e3:a8:12:9e:
00:98:17:06:14:f1:82:64:25:41:66:ec:15:80:1f:
df:6f:0c:c6:6c:2e:c7:1a:c8:e3:71:9f:83:60:fc:
33:37:b2:63:35:f3:c2:ff:54:7f:b0:24:f2:86:7e:
bc:92:cb:52:be:08:ae:18:14:16:2f:00:1f:c1:ec:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:91:B0:D5:23:D1:35:2E:D6:00:13:22:F5:B4:63:EE:38:0C:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3909db70-c636-3b06-a354-372119f5b8a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.130.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:a3:47:f8:fc:8b:7d:98:86:fd:71:b6:1b:26:71:e1:55:9f:
8d:78:c7:c2:b6:6c:fc:59:bb:21:66:a6:e1:7a:0a:38:73:9a:
6f:f3:a0:45:b4:db:42:6f:b2:5f:6e:17:30:fb:38:a9:77:2e:
fc:08:21:14:56:9d:87:84:22:7c:ae:58:a6:80:81:e5:a7:31:
c6:6b:8a:d2:78:84:f8:7b:21:4a:1e:c4:58:1f:0f:04:b0:88:
ea:c5:16:a5:7a:93:11:4e:99:2e:a7:d3:d3:5b:11:62:78:08:
f8:04:3a:5f:f7:88:1c:77:d0:11:bd:8d:fa:e7:61:f2:9a:d8:
d8:f7:24:39:f6:dc:55:69:a4:9d:02:8c:04:85:89:32:b0:af:
8c:21:c8:56:1e:a1:5e:46:4f:c2:7e:58:f4:74:80:7e:3e:dc:
2a:ab:2e:ea:92:47:c1:7b:f7:da:1c:fd:b1:01:dc:f7:77:6a:
b4:82:f5:63:fe:9d:b7:80:95:29:b0:05:14:50:56:c5:39:b1:
1a:4d:4c:66:68:7e:2e:27:ef:0b:15:7d:91:00:70:20:36:55:
8d:98:61:3d:3c:c4:41:1b:64:16:d7:0d:06:9b:26:cc:6c:36:
5e:18:60:7f:da:8d:a3:49:5e:45:b1:1f:aa:9b:51:4b:97:51:
05:41:60:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:20 2024 by rpki-client on console-ams.rpki-client.org