Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/915d21f3-4db7-3d9b-af2f-701c754d1d99.roa
File: 915d21f3-4db7-3d9b-af2f-701c754d1d99.roa (raw, json)
Hash identifier: hqjVQJvRsJxjwuOHzNH/J1ccMkxzG5iUFIJ+LTuMOCI=
Subject key identifier: 0E:14:E4:D6:70:17:C0:B5:8A:52:2A:D9:AF:18:36:47:ED:2E:A5:3B
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB9D310F339A77E55757390
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/915d21f3-4db7-3d9b-af2f-701c754d1d99.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 393278
IP address blocks: 63.246.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b9:d3:10:f3:39:a7:7e:55:75:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=f41315ae-07af-4ef8-b366-6fb07a7bbb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:c7:ba:50:f9:6b:f3:6d:08:a0:66:00:e6:
ca:cb:99:4b:2c:3f:5e:03:61:8c:53:10:0b:76:b2:
b6:0d:73:f8:b6:7c:51:e2:ac:06:6c:eb:43:cf:a6:
0e:48:62:77:d6:93:7c:e3:56:96:d1:c6:f7:eb:7f:
41:d0:41:06:64:d6:04:ab:db:d5:84:df:10:56:fe:
4d:90:d3:e5:5b:7c:bc:48:53:6b:c3:ef:92:fe:2c:
f5:52:c2:97:3b:6f:2c:05:81:bc:7e:01:10:33:fc:
7c:f8:6d:aa:b7:ab:15:5c:3f:3a:47:ac:7a:71:3d:
cb:ae:9b:4a:2f:ee:8c:23:7c:b4:58:5d:98:f7:da:
ce:14:ae:1b:27:f4:4e:83:7f:5c:84:5a:9d:67:9f:
9d:00:f2:0a:21:c7:a9:82:b3:fe:ca:08:a3:02:59:
e0:af:86:fa:6c:93:dc:38:4c:94:ea:12:7b:44:41:
d7:7e:ee:ec:0e:4a:0a:e9:0d:41:1a:8f:8c:35:38:
aa:60:e4:1c:d3:e7:53:11:44:5a:ed:4a:89:8c:ff:
2a:38:6f:89:80:cc:c6:40:4b:90:3f:4b:c0:af:df:
66:09:05:f2:ef:77:77:8a:e6:13:d4:9c:6e:6d:ba:
24:9f:bc:97:d5:8d:f8:c8:25:97:91:b9:6a:57:ed:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:E4:D6:70:17:C0:B5:8A:52:2A:D9:AF:18:36:47:ED:2E:A5:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/915d21f3-4db7-3d9b-af2f-701c754d1d99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.246.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:0b:ce:81:8c:d9:01:a7:2f:02:25:e7:2e:4e:a1:24:c6:6b:
6b:66:f1:5c:5a:42:83:1b:cc:89:45:d7:95:25:0f:7b:7f:53:
bf:bc:e8:81:66:11:2c:2b:81:83:c6:00:c6:00:b7:da:cb:1e:
16:4f:4f:04:39:68:66:16:e2:ca:71:64:6e:e5:ae:20:b8:2a:
2c:57:26:a4:b7:d1:1b:41:ed:e6:2b:df:c0:f1:88:31:69:cb:
6e:15:57:62:3a:29:a4:eb:2b:47:18:65:ed:76:02:f6:33:d9:
ed:65:b3:5c:00:4c:8d:f0:be:2e:b1:15:75:0e:e9:aa:42:d6:
eb:eb:cd:ae:81:e4:87:76:03:81:f5:18:92:fa:7b:2c:96:9d:
79:94:ff:b7:2a:cc:53:4d:80:db:7d:e5:38:80:2f:cf:cc:e3:
b3:07:b8:2d:f8:fd:7a:64:cb:48:40:6a:a2:17:ab:9e:16:46:
a3:64:7b:6c:45:a0:bf:8b:d8:d3:bd:a0:16:0f:63:55:06:40:
38:08:a9:88:bb:e3:66:fc:86:b9:a6:a0:e4:e1:42:bd:89:1e:
8a:ba:60:ea:88:00:c1:53:5d:29:a2:09:a9:56:f9:16:ab:f2:
89:9d:cd:78:ea:50:19:18:34:32:1f:f8:1a:9a:58:42:7e:8e:
fb:86:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:41:25 2024 by rpki-client on console-fra.rpki-client.org