Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa
File: 65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa (raw, json)
Hash identifier: YqclccOLNqieiGbc942joy1c1ug4qCMo7Ai8pgWkE0A=
Subject key identifier: 87:92:E4:4E:6B:A3:23:04:B0:5B:0C:A3:D1:D0:9A:70:C1:67:36:D3
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66212677521F7B24C1978340
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 174.131.216.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 05:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:26:77:52:1f:7b:24:c1:97:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=3676235d-fa3e-40d5-a02d-c7633dab8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:1f:1f:d3:48:2e:1e:fe:f6:6e:b0:c4:bd:
5d:ab:57:70:51:79:55:2b:04:a4:c8:1c:25:c6:59:
99:c1:fa:2a:d5:86:05:05:e3:15:ae:97:b2:f3:31:
86:56:b3:13:f1:c1:fa:fb:8a:27:83:31:18:95:d3:
6f:e2:f5:b8:a6:2c:25:1d:0d:68:7a:6a:01:f1:3c:
b3:4d:e8:3d:2b:53:8e:a6:2f:45:c2:3d:a8:85:a6:
45:46:97:1d:09:ed:79:58:f6:0d:22:45:76:5c:30:
34:37:c1:57:54:33:81:3f:b7:4b:1c:ca:82:c4:2b:
10:7f:83:c9:69:65:bf:b1:cd:c8:33:03:d8:40:22:
da:f6:f7:4f:90:96:09:d5:08:bf:63:ff:9f:4f:6a:
54:27:2f:0b:b0:f6:82:a0:f4:3c:e4:8c:b0:39:92:
0a:e2:de:bf:ef:ab:17:69:29:ac:7f:ca:f8:da:58:
14:07:5f:b9:32:74:63:33:4d:f9:87:f5:b2:60:26:
25:6b:3a:58:d6:ab:0c:33:60:8f:52:18:d5:aa:c3:
91:fc:56:a4:76:50:16:41:f9:08:00:d5:fe:15:a9:
6d:4e:b7:cb:5a:df:5b:1f:f0:b4:d7:cb:f6:e0:24:
c5:6c:8b:ad:3c:20:86:55:c1:dc:b4:0e:fc:5c:d6:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:E4:4E:6B:A3:23:04:B0:5B:0C:A3:D1:D0:9A:70:C1:67:36:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65ad0d00-a4cf-3b94-9d8e-8c85db191df9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.131.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:da:0e:5b:53:bd:29:4b:10:ef:60:14:c7:c4:ba:e5:9a:8b:
57:49:f9:a3:73:b3:31:11:41:ed:3c:56:ab:75:78:96:db:8d:
33:bf:0b:4f:1c:d6:3b:dd:51:00:9a:a7:97:ab:78:2d:ca:e7:
2c:40:37:8f:63:17:05:06:31:09:dc:48:f5:99:1c:04:43:bf:
2e:47:7a:30:dc:4a:4d:78:c3:fd:ec:65:4c:b4:03:3b:e8:ea:
7b:db:4e:99:7a:95:03:a8:34:6d:32:fd:d4:65:fa:94:77:3d:
29:ad:34:b8:1a:00:85:61:aa:88:64:83:95:e2:34:07:c1:0b:
a7:2f:bf:12:2e:3a:05:a2:d2:48:ef:7a:b5:18:ab:9e:df:69:
10:a4:e2:e4:b3:85:95:d0:a9:f3:04:ab:f3:c5:5b:e3:d2:94:
72:98:88:54:24:c4:4a:c6:7d:e6:f7:1a:3d:f7:29:0e:3d:3e:
85:f9:cf:a7:2a:19:38:52:c7:81:48:03:64:b2:df:85:7e:f9:
b5:cb:05:65:be:b2:8c:db:c8:bc:b2:5f:f2:a0:1b:74:91:92:
d7:6b:9a:d5:1e:fb:4d:87:5d:69:12:a8:e4:8e:49:4e:c6:96:
71:77:09:01:4d:12:e4:bc:0f:b2:a5:fa:ad:61:06:d8:17:cf:
d7:c1:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:07:35 2025 by rpki-client