Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa
File: 868dec1d-0a06-3679-aa9d-b59d04977819.roa (raw, json)
Hash identifier: 8TSlwIx+SgJNzowURJ/62P/R+LkEfDHJENJD/K6Wul8=
Subject key identifier: F2:61:37:49:95:0C:DA:F3:15:F2:2D:51:82:68:B5:E5:FF:62:93:73
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E59A543839E22D7A609700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 64200
IP address blocks: 216.41.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e5:9a:54:38:39:e2:2d:7a:60:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=28ec87c6-a9b5-405a-8f94-b9fc2af93e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:fa:86:b6:5a:23:5e:ee:61:c0:f9:97:cc:
c9:0a:f9:66:61:94:d8:cf:fd:91:e5:15:a8:89:a2:
5c:32:ce:1e:e7:6d:75:f9:11:15:3b:6d:59:f3:43:
ff:67:24:b5:f5:19:df:eb:ed:b6:a7:51:14:fa:eb:
ee:6d:c7:dd:b7:61:57:40:1d:2b:c0:bc:13:5e:53:
70:88:ab:a9:4a:43:f6:6c:1e:5f:c3:c4:58:5c:1a:
23:ec:2f:6b:b0:fc:cd:7c:96:00:4e:98:7c:f5:5c:
ad:7b:40:84:4b:31:32:e2:06:3e:3b:77:77:91:87:
84:d3:dd:bc:b2:6e:dd:3c:ac:3e:67:20:e4:6f:30:
c2:9d:77:ea:1e:e3:e5:a6:b5:34:fb:23:6e:db:d8:
be:c2:77:da:62:d8:6a:fb:9f:34:51:41:ea:2d:74:
e0:72:79:58:35:e3:94:db:1e:20:c5:f6:2d:09:9e:
ac:8c:c8:44:62:cc:54:50:5a:3d:f2:15:cb:84:b2:
46:55:1b:a8:6b:d1:47:6f:00:20:ef:71:c6:73:dc:
03:ba:7b:62:0f:1d:ae:ed:7b:bb:f4:60:02:1e:46:
2b:bd:7b:39:25:52:7d:71:4e:ee:f5:38:ac:2b:41:
46:24:db:25:1e:5b:e1:fb:e8:a8:51:9a:34:28:85:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:61:37:49:95:0C:DA:F3:15:F2:2D:51:82:68:B5:E5:FF:62:93:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868dec1d-0a06-3679-aa9d-b59d04977819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.41.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:02:e3:a3:75:08:e6:99:88:3b:c3:05:ad:9b:31:c9:39:63:
24:2d:44:bf:1b:5f:e9:4e:11:f6:e7:3a:ea:e3:eb:c6:5a:f2:
a5:73:97:02:6a:53:66:fe:60:82:9d:07:29:6e:8f:42:13:5a:
ba:12:5b:4b:51:08:00:48:b8:bc:85:c0:d9:86:bd:83:0a:46:
97:ca:8a:40:ea:bb:92:f0:84:4d:e7:ba:ce:76:2c:29:92:9c:
e1:1f:31:2c:6b:30:25:76:98:db:bf:af:e1:3a:60:42:d1:e5:
be:a5:85:91:c4:84:4d:1a:4f:3e:00:4e:16:56:91:09:a5:6e:
20:ba:f4:bf:1f:68:20:dd:6f:6a:b6:7d:85:78:d8:09:56:a5:
58:97:ef:d6:45:74:7e:c8:d4:ee:1d:b4:72:47:81:72:c1:d7:
dd:86:ee:13:83:a7:b2:00:b4:b5:77:3d:7d:39:1d:31:27:2c:
c1:b4:37:a7:37:fd:e1:fb:66:bc:dd:cf:41:9d:5a:19:2c:a9:
be:0a:10:82:f3:e9:51:54:0d:99:98:67:5b:05:51:a2:b7:ce:
42:15:85:70:14:a9:f3:82:a8:28:f6:87:28:3d:f4:4b:07:85:
9e:b1:50:21:cc:13:7f:ab:b1:9b:64:35:d3:5e:7a:c0:44:f1:
19:2a:a2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:41:25 2024 by rpki-client on console-fra.rpki-client.org