Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af68940-70bb-39d2-ab81-e3a1d345bbcb.roa
File: 8af68940-70bb-39d2-ab81-e3a1d345bbcb.roa (raw, json)
Hash identifier: 6jIK0uglYn4IG+8rHk5E23lfASAQhdSCgi0+EeTNY1s=
Subject key identifier: C1:06:C0:A3:40:E3:AF:86:EB:C3:B0:AF:B3:5F:60:2E:30:9C:7E:C7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D551B41D2D76C70C602959380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af68940-70bb-39d2-ab81-e3a1d345bbcb.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 15 Mar 2028 04:00:00 +0000
asID: 46145
IP address blocks: 75.77.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:1b:41:d2:d7:6c:70:c6:02:95:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Mar 15 04:00:00 2028 GMT
Subject: CN=e46ebdb8-4bb4-45e3-a4a6-099a9530a88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:6e:4e:f2:26:27:ac:ce:88:51:9f:46:9c:
1c:65:c2:20:6d:33:70:fe:d2:c9:78:c8:fc:a9:c3:
18:1d:a7:7a:62:3e:51:a5:86:0e:9e:d3:86:61:33:
05:80:c3:d6:fd:25:26:1f:5f:ae:da:a1:ea:8e:88:
ff:19:ea:da:48:13:7f:0b:e8:37:c8:60:96:4f:2e:
c6:f3:40:62:32:ce:59:ee:67:d7:20:d8:e7:ca:cb:
ce:8e:15:0e:91:03:91:b8:87:b8:ca:cb:b7:5f:bc:
fe:b0:db:49:2b:86:b4:9f:6b:19:4f:18:f2:72:0c:
80:a3:6f:80:49:62:62:cf:40:81:02:35:d3:ee:ce:
4e:57:1d:38:b7:8a:05:b3:8b:32:4e:07:72:db:72:
50:c9:e2:b2:bb:d5:74:23:5a:86:17:43:a6:5b:d9:
df:3b:9b:72:24:50:d3:df:bf:37:c6:ea:5c:73:f0:
9c:9f:1b:7a:c9:b1:31:ed:48:4b:ea:28:fd:35:2c:
90:cc:60:99:5a:d4:b4:b6:02:c2:75:8e:39:7a:3d:
9c:1b:36:51:1c:49:02:ae:cc:0f:2c:7e:39:ea:7e:
70:94:c9:f9:1c:05:0e:43:18:55:9f:04:0d:d3:c1:
b2:87:a0:42:b0:bf:2d:e0:9f:6a:51:fa:f8:e6:bd:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:C0:A3:40:E3:AF:86:EB:C3:B0:AF:B3:5F:60:2E:30:9C:7E:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8af68940-70bb-39d2-ab81-e3a1d345bbcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.77.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:b0:c0:85:f3:00:a7:76:1e:b2:d0:d4:6e:82:34:b4:ab:2e:
ca:71:1c:ad:d2:42:33:80:7f:4f:74:71:90:74:84:78:bc:f1:
bf:c8:fb:e4:4d:2f:a1:34:ee:27:4e:46:e6:ec:45:7e:68:01:
f3:49:48:1a:4e:83:dc:9a:42:d3:5d:11:b6:45:37:8d:d2:4b:
fa:d2:e9:9d:d0:08:88:29:49:62:e1:c4:e4:23:b3:5a:32:64:
2b:62:92:63:b5:f5:4c:91:3f:10:dc:9b:e9:0d:89:56:94:29:
97:34:a0:bf:5d:58:b5:0d:61:41:d6:95:16:f8:62:6b:aa:ed:
21:92:2d:94:2c:19:9f:a8:be:9e:f2:84:ea:1f:00:c8:4a:68:
5b:22:3b:bb:44:2a:c6:42:32:44:44:9c:c6:d8:fa:cd:51:18:
39:e1:1f:35:4d:84:4b:eb:59:88:49:e8:39:8c:a1:1e:50:8d:
80:c5:27:f3:8c:9f:aa:47:52:a5:b1:77:2b:b2:bd:6b:33:bd:
2e:68:a4:9b:a8:e5:f8:9e:37:e6:90:5b:d8:54:0a:12:86:c9:
12:37:81:5d:41:39:31:f8:d7:85:df:a2:8e:79:1e:63:db:cc:
a0:06:7f:42:49:09:ae:2a:63:7d:e1:23:8a:48:b4:1b:0b:d7:
2d:6a:43:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:42 2024 by rpki-client on console-ams.rpki-client.org