Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b3d7d7f-7cb2-39fc-842d-9d0804881965.roa
File: 6b3d7d7f-7cb2-39fc-842d-9d0804881965.roa (raw, json)
Hash identifier: J8EungcwKZYDqiq/cn+DFIGqkWQTeQPswwRGMGezZO4=
Subject key identifier: BE:AE:54:98:A4:97:6E:47:E2:5E:EA:7A:32:2A:50:44:81:7C:1D:F7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584089FB142E919BE5FD72A72200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b3d7d7f-7cb2-39fc-842d-9d0804881965.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 03 Jan 2029 05:00:00 +0000
asID: 7029
IP address blocks: 72.16.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:fb:14:2e:91:9b:e5:fd:72:a7:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Jan 3 05:00:00 2029 GMT
Subject: CN=dcfc8efe-391e-490c-8df9-919fd1994d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:c4:08:3a:fa:4e:20:92:7b:50:14:b4:9e:
6f:d6:1d:cb:f1:0f:65:45:ff:8f:05:f9:db:f4:94:
82:a7:34:e4:c7:af:ef:2b:f5:93:60:1e:e8:ae:64:
76:76:1e:77:e1:b3:6e:3b:19:13:d8:51:07:24:e1:
8e:ff:4d:3c:6e:b5:f6:01:8b:c5:ce:30:e6:83:e3:
f0:d2:63:ce:1b:c5:fc:db:77:b0:6b:a6:fd:70:ef:
df:ae:1b:d6:8b:6e:b1:85:65:d2:1c:10:51:e8:7e:
87:93:3b:de:e5:b0:d0:9e:d7:c3:49:14:55:ee:06:
67:fe:2a:ba:14:0b:2f:34:f4:f2:67:26:c4:67:07:
a9:db:8c:7d:e6:1a:56:31:7b:77:51:2d:b6:0a:ea:
83:dc:08:28:2b:f2:3a:00:e5:52:c9:ab:a2:e6:04:
8e:2f:ae:32:26:57:9a:39:89:08:6f:87:1d:28:ab:
02:38:41:a6:d2:92:3a:5a:a6:a1:08:81:84:6a:5d:
5a:41:f7:ff:8f:41:a9:58:17:be:bb:ef:d1:81:87:
78:0a:58:38:c7:c2:31:a7:39:0c:66:07:30:8a:e4:
6c:78:f6:ff:7f:bf:e5:8d:e6:51:a2:23:59:61:c1:
39:cc:dc:ba:0c:e5:ec:6d:4b:7f:16:25:24:1a:89:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:54:98:A4:97:6E:47:E2:5E:EA:7A:32:2A:50:44:81:7C:1D:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6b3d7d7f-7cb2-39fc-842d-9d0804881965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
72.16.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:89:da:f8:7f:cc:c1:7f:ba:d8:de:65:7a:90:89:28:ff:c4:
3a:18:72:c4:4d:64:2d:45:9a:89:8f:ad:59:e9:fa:6d:26:47:
1f:00:b4:77:b7:da:a5:8f:1c:fe:b4:0f:b8:f5:92:0b:71:8b:
63:72:62:94:ad:87:b8:51:09:89:bb:19:07:b0:f7:d2:59:53:
93:1e:34:c5:55:06:99:0f:c1:6d:2a:c0:cd:0a:02:34:ed:65:
10:45:7a:0d:05:4c:ad:d6:68:57:b7:5b:44:3b:ae:d6:27:14:
c6:13:92:20:80:50:08:fe:f1:90:bb:e8:58:ba:09:7c:4e:23:
71:a0:d4:7e:29:33:0f:88:fe:7c:06:6c:e5:e7:5d:9b:b8:80:
d5:43:32:83:72:97:6b:75:39:c9:2f:cd:49:35:89:b9:58:34:
cd:d7:69:8c:51:6d:d1:39:1c:40:d0:85:c8:52:87:45:88:e2:
99:54:32:2d:b1:02:33:db:57:36:1b:60:d7:da:50:2e:ef:7f:
14:24:c2:33:db:a7:70:51:f9:b6:ff:9b:16:0b:45:dd:96:54:
73:e7:b9:67:ee:1c:5c:47:d7:2b:63:80:62:4e:47:45:07:07:
39:64:89:b3:d7:59:d5:ca:7f:24:10:fb:49:7c:02:ad:ea:d6:
f9:5d:f0:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECJ+xQukZvl/XKnIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIzMDExMDEyMDAwMFoXDTI5MDEwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZGNmYzhlZmUtMzkxZS00OTBjLThkZjktOTE5ZmQxOTk0ZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo7ECDr6TiCSe1AUtJ5v1h3L8Q9lRf+PBfnb
9JSCpzTkx6/vK/WTYB7ormR2dh534bNuOxkT2FEHJOGO/008brX2AYvFzjDmg+Pw
0mPOG8X823ewa6b9cO/frhvWi26xhWXSHBBR6H6Hkzve5bDQntfDSRRV7gZn/iq6
FAsvNPTyZybEZwep24x95hpWMXt3US22CuqD3AgoK/I6AOVSyaui5gSOL64yJlea
OYkIb4cdKKsCOEGm0pI6WqahCIGEal1aQff/j0GpWBe+u+/RgYd4Clg4x8IxpzkM
ZgcwiuRsePb/f7/ljeZRoiNZYcE5zNy6DOXsbUt/FiUkGomRgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6uVJikl25H4l7qejIqUESBfB33MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmIzZDdkN2YtN2NiMi0z
OWZjLTg0MmQtOWQwODA0ODgxOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSBA4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESJ2vh/zMF/utjeZXqQiSj/xDoYcsRNZC1FmomPrVnp+m0mRx8AtHe3
2qWPHP60D7j1kgtxi2NyYpSth7hRCYm7GQew99JZU5MeNMVVBpkPwW0qwM0KAjTt
ZRBFeg0FTK3WaFe3W0Q7rtYnFMYTkiCAUAj+8ZC76Fi6CXxOI3Gg1H4pMw+I/nwG
bOXnXZu4gNVDMoNyl2t1OckvzUk1iblYNM3XaYxRbdE5HEDQhchSh0WI4plUMi2x
AjPbVzYbYNfaUC7vfxQkwjPbp3BR+bb/mxYLRd2WVHPnuWfuHFxH1ytjgGJOR0UH
BzlkibPXWdXKfyQQ+0l8Aq3q1vld8FM=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:02 2024 by rpki-client on console-fra.rpki-client.org