Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8560e7d9-5e73-3551-80bf-4fd594c83f08.roa
File: 8560e7d9-5e73-3551-80bf-4fd594c83f08.roa (raw, json)
Hash identifier: /jsyMJSjOC5ys9DQ+aII756sR7cXFhBwfGXJzng4j+M=
Subject key identifier: CD:22:E8:0C:D8:0C:0C:D9:A5:5A:5F:19:1B:D9:FD:59:47:45:38:7B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6616EE446B5CA5229B3D1000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8560e7d9-5e73-3551-80bf-4fd594c83f08.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 67.141.136.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:16:ee:44:6b:5c:a5:22:9b:3d:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=40bc247a-b057-4b9b-ac75-5d7147a69d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:10:e0:86:1c:c0:26:90:90:8c:50:98:08:
62:79:5d:2a:a7:c4:2d:d7:02:cf:b2:51:81:21:35:
f8:bf:c7:0a:65:4b:40:48:21:e0:cc:27:f6:85:e0:
bc:b2:23:fb:aa:3a:9d:e7:f0:e9:87:95:37:dc:e0:
e3:ad:18:fd:6d:1a:10:16:24:d6:37:df:0b:e8:29:
1b:93:e9:18:d2:a6:e6:5d:40:e4:e0:b7:3a:c8:c8:
50:4b:a3:46:63:32:8d:d9:2c:fa:14:35:13:ab:66:
d5:69:ce:b9:90:bc:f8:6f:b8:de:1a:b1:d0:9d:ad:
35:85:eb:7e:48:de:8f:04:06:ad:f6:5b:3a:07:ee:
77:0a:29:b0:b6:a3:d6:ce:3d:78:8e:2f:92:a7:97:
33:60:58:de:d8:bb:84:d3:43:1c:2b:e5:e4:1d:a9:
e7:44:e8:b8:19:35:5b:45:d7:9c:e2:39:92:70:fa:
f5:cb:19:4a:03:74:dc:31:81:83:73:22:91:2a:c9:
21:12:72:d9:23:b5:be:c4:2b:35:5a:56:54:84:6b:
e2:57:6a:04:0e:e5:16:20:01:b8:fb:0c:da:73:58:
dd:70:49:47:08:71:e7:c1:45:54:b6:3e:70:eb:64:
eb:73:50:e2:51:55:7c:f3:5d:16:88:d3:42:9c:0b:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:E8:0C:D8:0C:0C:D9:A5:5A:5F:19:1B:D9:FD:59:47:45:38:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8560e7d9-5e73-3551-80bf-4fd594c83f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
67.141.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:31:09:b6:db:7a:0a:33:ac:ab:fd:f8:b8:0e:ce:2c:5e:0a:
a2:ea:5f:fb:dc:72:4e:3d:3f:df:93:ee:45:89:3f:d4:28:9b:
1d:95:67:4a:54:97:e1:69:dc:8b:b6:90:be:44:48:f1:38:f1:
92:e3:0a:4c:85:bb:88:16:35:89:42:ec:38:d9:c7:1c:f2:aa:
6f:e6:d5:2e:b1:4a:bc:b3:c9:69:bb:b4:09:ca:04:b0:6f:3b:
6b:be:71:fa:0c:03:0e:aa:7a:27:27:6f:83:4d:1a:b2:95:3f:
a9:31:15:c8:2a:80:7d:c3:70:74:07:0f:95:61:c2:d3:45:7d:
82:e6:66:99:09:a2:3a:e0:bc:45:cb:a1:69:ed:4a:0a:3a:fa:
98:9b:00:4f:9e:80:97:aa:a1:51:22:eb:e4:b0:27:08:46:40:
28:3e:ff:ea:60:b8:b7:f7:99:0c:8e:88:54:4c:35:84:ba:1a:
bb:a3:b6:6d:55:33:a2:00:e4:eb:3a:87:bc:c3:1a:1b:1e:d9:
3b:70:8f:a7:3d:5a:58:f4:f2:0b:0f:c5:9d:6a:3f:8e:00:46:
aa:60:c3:7e:5d:57:ea:9d:4e:dc:a5:ef:07:e5:c7:0e:3f:98:
dd:84:24:4d:b5:ad:16:10:1a:c2:95:b7:87:0a:1c:19:bf:f3:
9b:cd:90:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:04 2024 by rpki-client on console-fra.rpki-client.org