Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45ce27d3-c913-3de3-97ce-bd5f11853212.roa
File: 45ce27d3-c913-3de3-97ce-bd5f11853212.roa (raw, json)
Hash identifier: n/hVRLNELHIF4bndrp4N6b6iEl4u+ROc51d+0/YK9BY=
Subject key identifier: 35:5D:A9:5A:E1:E6:89:B9:0C:8D:EF:C4:26:70:D1:A9:54:11:DA:CA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB933DCC070E5941F236680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45ce27d3-c913-3de3-97ce-bd5f11853212.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 63.138.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b9:33:dc:c0:70:e5:94:1f:23:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=6fa4d089-a476-458c-9401-599b748da970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:03:01:ce:ce:40:70:f8:b1:6f:b1:60:f1:
b7:d2:04:c0:b2:c5:e0:f6:0a:f5:ae:a7:c7:dd:2e:
60:c4:4a:a8:03:b8:2f:73:7e:cb:79:61:cd:d6:0d:
0a:f7:f5:c9:89:b9:d8:ce:4e:56:10:4a:2c:30:35:
26:4c:10:6e:ec:44:5f:18:61:4e:b3:07:1d:20:9a:
1f:10:65:1e:89:d9:a0:8e:17:c1:46:5a:15:d2:46:
0e:8f:a4:36:f3:cd:12:1a:7f:4c:f2:70:39:d5:d9:
5a:a5:12:44:a5:73:19:02:c7:16:a9:05:e5:06:b1:
19:f4:c9:bd:d9:6b:00:cd:b5:49:ea:a1:75:d3:72:
1b:99:93:c1:65:bc:8a:af:a0:01:f3:4c:1e:d8:3e:
48:2c:82:0c:94:42:fa:c2:40:21:bb:23:89:7f:4d:
d5:9a:d5:7c:c6:93:b0:b4:02:c4:7b:94:38:d7:0e:
62:87:46:22:9f:62:1b:4c:05:4c:52:7f:8d:f2:6f:
ee:d7:2d:e3:18:62:7f:b1:4b:56:80:06:66:11:a6:
dd:53:de:b1:ec:04:4c:f7:e9:e5:22:a0:80:0c:15:
3a:b7:a3:3e:bd:bc:4e:95:e4:dc:05:95:20:d0:29:
d2:47:76:98:41:02:6c:d3:35:22:76:b3:61:b8:88:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:A9:5A:E1:E6:89:B9:0C:8D:EF:C4:26:70:D1:A9:54:11:DA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45ce27d3-c913-3de3-97ce-bd5f11853212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.138.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:4b:fe:ea:54:5c:c4:80:67:a1:80:d4:77:ce:6a:1f:f9:6b:
69:58:65:c5:39:3f:ee:42:9d:a1:8b:3c:f5:20:73:bd:52:69:
1c:51:46:74:3d:27:0d:ec:cd:d9:78:07:44:27:af:3e:f6:09:
19:e3:80:88:96:1d:1d:f7:d2:58:11:c2:b6:d3:b5:52:19:e2:
60:17:b7:8d:8a:ec:2e:61:02:bc:81:5f:88:45:12:2b:d3:a4:
e4:b8:e3:59:63:52:b1:90:d2:52:12:83:5c:ca:3d:4d:8d:d0:
77:ca:77:be:71:41:1f:56:61:30:67:4a:96:81:6e:a2:ad:07:
fd:db:5e:14:c9:71:d0:6f:01:71:79:2c:15:06:77:63:b6:81:
44:b3:a8:69:a0:d9:aa:d8:e2:12:46:01:c8:79:de:20:9a:4b:
b3:d1:21:d6:a4:cc:4d:16:e2:82:a0:d8:58:7f:32:1b:66:fb:
58:ae:9b:cd:cd:ee:b7:74:96:2c:9e:81:46:54:9e:0d:a4:4a:
4c:b2:d9:39:be:b4:c7:15:ea:d4:d9:38:1a:82:63:10:88:2b:
fa:92:e9:57:d0:e1:44:08:d4:1f:1c:41:39:89:1d:c4:b4:d9:
f7:ac:55:38:16:4f:73:a7:74:d6:d9:35:45:ab:f0:02:b3:7b:
40:01:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:21 2024 by rpki-client on console-ams.rpki-client.org