Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/667cd963-0017-3b58-9569-0e3a2708a5a0.roa
File: 667cd963-0017-3b58-9569-0e3a2708a5a0.roa (raw, json)
Hash identifier: iEj5WryNiTPaUCDDuwNjJ/aO0fMC8wsuaO0SqzROuSI=
Subject key identifier: DC:44:3A:6C:EB:0E:39:32:55:76:8A:35:6A:73:83:E7:FC:2D:15:62
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E42F6C03ABA100C5B4DB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/667cd963-0017-3b58-9569-0e3a2708a5a0.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 20141
IP address blocks: 209.168.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e4:2f:6c:03:ab:a1:00:c5:b4:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=05666a75-5cb7-4d7c-9569-982424e82c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:62:a9:6d:9c:fb:0a:3c:37:04:a1:68:69:2d:
79:99:8a:8b:69:98:74:48:79:27:8d:e1:19:38:01:
3c:b0:8e:e2:ad:a4:e8:31:41:d1:cd:91:8a:9a:05:
fa:ee:38:ba:be:62:8c:92:47:06:d1:e6:bc:1c:ac:
ae:8e:07:f2:9c:d4:6f:06:d0:cb:24:25:76:a9:94:
45:ea:32:a4:37:17:51:8e:03:4a:6f:c1:f3:9e:6f:
e9:18:4c:b5:9d:a2:3b:11:51:4c:10:2b:bb:23:cb:
82:84:14:fd:48:3c:d1:0d:2a:cb:be:10:e3:0d:a4:
ab:25:d2:6e:6c:4d:da:2d:43:d7:ba:a1:a7:99:4d:
fb:4d:1d:14:22:76:e3:5c:b4:f9:8e:8b:f4:56:a4:
d9:54:56:d6:21:85:2f:6d:8a:db:1a:c2:36:65:06:
5e:24:bc:63:1c:df:b3:c2:eb:03:c2:0a:47:75:98:
03:26:7b:e8:09:06:9a:7b:e7:55:38:2d:3a:da:ec:
07:6b:97:f8:7a:a9:1e:7e:e6:f7:e3:6c:31:bb:6f:
b4:dd:de:c0:28:66:b2:c7:5d:57:a6:be:dd:10:66:
73:ad:a4:11:b0:ce:57:04:6b:b5:14:64:cb:47:6f:
15:f7:9d:c4:e8:56:ec:f0:85:e6:b0:59:f6:50:d7:
1c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:44:3A:6C:EB:0E:39:32:55:76:8A:35:6A:73:83:E7:FC:2D:15:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/667cd963-0017-3b58-9569-0e3a2708a5a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.168.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:81:d8:a2:8b:b8:77:fa:26:1e:ff:90:4d:be:c3:be:96:1c:
48:21:0f:5e:c2:f2:c3:16:d8:dd:4a:68:a8:83:b5:dc:74:eb:
ce:71:13:26:12:3a:81:94:d2:10:62:39:11:f1:38:41:e3:a1:
4e:be:76:5b:ab:c9:a4:ba:f1:ab:d9:5a:80:59:6f:17:01:5f:
29:21:6e:06:f6:58:50:eb:f7:cf:15:ae:c8:1b:49:1c:85:b8:
bb:c3:fd:5c:84:f5:66:d1:8b:2a:16:bd:f9:f0:d5:e6:7c:ee:
78:8c:5e:9a:05:b5:34:89:31:cb:2d:2f:37:99:af:4d:a0:96:
5f:ae:46:ab:a6:1c:62:41:24:4a:07:d4:6e:f1:13:fc:56:fa:
b3:be:1b:17:6f:98:f2:89:34:e5:51:46:db:0d:22:ee:9c:6d:
90:87:2f:c0:ed:0a:0b:a7:48:ee:58:7d:09:b5:85:b8:69:05:
70:f9:56:6b:3a:e7:5f:c1:a1:ea:68:8d:f5:df:e7:39:e9:2f:
2e:f5:21:bb:b7:89:50:30:6b:b4:9f:06:9e:04:2f:5c:26:37:
f0:6e:41:f1:9a:09:46:5f:1e:c8:72:51:0b:86:cc:b0:0c:a9:
7a:42:b5:f9:d4:50:de:78:91:bb:59:8f:8e:38:4b:2a:a2:d2:
68:26:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:01 2024 by rpki-client on console-fra.rpki-client.org