Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e0867fc-735a-3808-b36e-b29715f8c1dd.roa
File: 3e0867fc-735a-3808-b36e-b29715f8c1dd.roa (raw, json)
Hash identifier: Ne2n7q2OPjtLNWgSwf5/CVw7eNM7Uz9cSAmTBZkk8eY=
Subject key identifier: 30:7C:8A:E6:48:A2:BA:52:F0:2A:F1:6B:CE:9C:FB:07:DB:12:7F:DF
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB5BAC63147D5DDFD0A2880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e0867fc-735a-3808-b36e-b29715f8c1dd.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 40.131.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b5:ba:c6:31:47:d5:dd:fd:0a:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=00b1e93b-b6e9-4bab-b8a0-78a6ea0f0901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:a6:c4:59:f9:00:90:c9:37:65:c6:24:7d:
06:2f:2a:af:9c:04:07:28:57:9e:3d:f2:bf:84:82:
89:83:4c:27:64:28:c3:2a:c8:37:17:c3:b2:a7:71:
e3:48:e5:4f:f9:19:4b:d0:d2:66:3f:e3:d8:19:00:
01:b2:ba:fb:5c:b3:87:e6:eb:54:f9:e5:57:20:43:
18:59:cb:68:5a:f7:15:2f:4d:a2:42:f7:84:fa:69:
47:21:2d:3a:6e:5c:f7:c4:33:21:ef:90:37:96:b5:
84:3b:17:ef:04:d1:b8:4b:90:ec:ae:ae:38:49:16:
96:eb:6e:e1:d0:79:95:2f:95:4f:6a:4d:a2:bd:9a:
4e:46:a8:43:df:13:8d:c8:25:7e:2e:ec:0a:36:76:
c2:2e:eb:ee:4a:d4:5a:88:cb:54:f1:a5:16:11:2d:
a0:46:1b:1c:7c:e9:1e:1a:0c:b8:00:22:19:af:cf:
99:6d:6f:0a:ba:f4:7c:65:f2:33:74:f0:cc:dc:a0:
4a:61:26:d1:93:ba:cb:1f:ec:c6:0d:98:16:66:33:
b7:ac:6e:b7:da:cd:89:95:9e:45:6a:b4:28:d1:e3:
0f:82:a8:d4:74:db:03:e9:df:8d:15:26:0c:be:2e:
74:3d:2a:25:28:66:4f:b9:9d:a8:4e:19:88:d8:e6:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:8A:E6:48:A2:BA:52:F0:2A:F1:6B:CE:9C:FB:07:DB:12:7F:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3e0867fc-735a-3808-b36e-b29715f8c1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.131.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:9c:48:69:ca:05:c2:5d:7c:ac:7a:44:f8:18:d3:fb:80:f0:
83:76:84:19:1b:46:68:b9:38:6d:ed:56:01:80:74:43:50:58:
97:f2:38:28:68:a5:c4:3d:04:78:45:ad:da:f4:a8:4d:88:0c:
ca:56:5c:c7:3d:67:e0:ba:5a:e1:0f:06:78:03:9c:8a:49:aa:
8c:6f:3f:3a:c7:58:f0:40:ec:40:54:c3:d0:a0:7e:55:7b:5e:
0c:f8:f5:0e:47:2c:45:ba:6e:f0:4d:16:6b:0e:37:28:91:d1:
ce:b9:2d:ea:92:e3:cf:99:15:81:2f:78:2b:90:38:17:77:91:
16:f5:cf:ed:7c:80:b3:4d:70:73:2c:7a:74:38:22:a5:65:09:
a2:d4:bd:e2:2e:af:23:cf:09:ca:5e:5a:dc:d1:79:3a:2a:2d:
54:c6:6f:06:26:13:c2:4f:31:b1:63:19:43:d1:7f:f6:82:9b:
54:7d:6a:2a:e2:d7:24:4e:d5:a7:5b:ef:c0:6a:16:07:6d:81:
6a:d4:bd:46:da:92:e0:b6:e3:ee:3e:2f:6e:09:5b:54:b0:23:
30:b8:e0:a4:a0:f6:62:b2:83:4b:44:cf:f9:b3:94:97:85:75:
a8:d4:61:19:08:0b:cd:13:e8:37:78:c4:45:c9:f9:52:cb:2f:
71:e0:40:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 06:04:54 2024 by rpki-client on console-ams.rpki-client.org