Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f33ee15-17ce-3972-bee2-cd0ee50ea786.roa
File: 6f33ee15-17ce-3972-bee2-cd0ee50ea786.roa (raw, json)
Hash identifier: c8z0l91v4MadbVl0EkVHQfF6oUek8iDGAmrNjQV4Kxk=
Subject key identifier: 6A:3F:0A:3B:A9:EB:8E:F3:D3:C9:96:00:B9:7E:F8:71:1B:2D:96:7A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661F1CE2688FCD96D1EDF3C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f33ee15-17ce-3972-bee2-cd0ee50ea786.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 162.40.192.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1f:1c:e2:68:8f:cd:96:d1:ed:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=cf96d646-8a72-48c7-9869-303c78e2d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:28:12:ee:88:f9:74:df:a7:1b:f4:5c:4a:b4:
66:9d:4e:0a:05:8c:26:04:d7:46:f2:ab:9c:a8:8f:
c6:71:db:20:56:c4:5c:a8:a6:d2:92:21:49:3f:d0:
20:a2:e2:36:c0:c3:53:9d:f5:39:4e:44:e2:3f:e9:
3b:9e:c2:b5:c3:45:69:81:97:fe:89:35:71:94:b7:
94:d2:f7:9f:47:00:5e:76:15:54:d9:dd:84:d8:f5:
5c:50:9c:9c:01:16:9f:0a:24:5d:cd:2a:b8:ac:c4:
1a:8f:c9:00:70:4a:f2:35:89:f1:8d:c3:0d:96:bc:
ba:d3:79:11:dd:ef:b0:ba:46:73:28:22:d2:8e:c2:
81:d1:a2:31:3a:05:c7:06:81:b9:e3:a9:98:52:95:
a9:ed:b0:03:c6:41:03:3d:22:81:ee:7a:44:e1:10:
fa:a0:28:b0:0b:44:62:e4:2e:6f:a9:78:3d:88:6a:
e1:29:7a:19:fc:fd:8e:9f:4a:5d:48:48:a9:99:99:
62:66:20:f8:9a:7c:48:51:cb:a8:6b:db:de:04:7b:
bb:e3:96:99:a0:b4:38:7f:e1:85:57:98:bf:42:80:
68:9e:d1:ef:8e:7a:9d:2d:d4:10:80:2d:bb:f6:f2:
f7:28:42:59:e0:25:b7:e1:40:55:48:50:4e:90:3c:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:0A:3B:A9:EB:8E:F3:D3:C9:96:00:B9:7E:F8:71:1B:2D:96:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6f33ee15-17ce-3972-bee2-cd0ee50ea786.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.40.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:30:f5:f9:9e:e2:4e:3b:bb:23:5c:db:e0:2c:d2:e3:11:c5:
b0:79:a5:02:f3:c4:dd:b1:b1:79:ec:26:20:c8:df:3f:8a:1e:
df:4b:7a:8c:7d:25:a4:38:1d:a2:75:1a:95:b1:d8:81:e8:bf:
79:36:b9:c4:b8:42:68:ce:5b:ea:d3:5b:43:13:0b:b3:e2:f1:
e6:c6:af:df:36:89:a4:32:69:45:de:75:cb:31:4f:4d:e0:b5:
d3:a2:a3:31:b1:6d:3f:35:1a:a6:12:12:2e:63:4d:ee:c5:e7:
10:1c:1e:a6:2d:cd:b8:2d:c2:9e:ca:d8:19:f2:46:29:25:27:
d7:5b:90:ec:91:4d:9c:b7:b0:c6:c7:bb:b5:c5:f6:5d:56:31:
0b:23:f1:4f:64:6c:7a:ff:cb:9d:61:46:5d:0c:42:9b:91:74:
11:67:43:c7:06:f6:4c:3e:c9:55:e4:44:e0:e0:33:cb:0d:d3:
7e:10:bc:ed:83:93:dd:1d:e0:a3:36:24:ec:3e:0f:69:55:e3:
dd:31:56:95:4d:87:51:cd:ab:4c:4b:74:f5:e4:20:d4:24:36:
44:e4:6c:61:e9:0b:c0:4b:a4:a3:7e:4b:2f:d8:c5:0f:9b:83:
2c:bc:94:0d:ec:f8:09:12:e5:ca:46:37:ee:66:e8:da:d4:6b:
02:4d:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:25 2024 by rpki-client on console-ams.rpki-client.org