Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e7eb59b-f11b-3fa6-8b5b-4d871181fb78.roa
File: 9e7eb59b-f11b-3fa6-8b5b-4d871181fb78.roa (raw, json)
Hash identifier: FdQ/OUjKEOG/CsncTBJZ2CerC1TNfaQXRL8TRfDOwi0=
Subject key identifier: DA:3B:E8:1F:8D:5C:4D:43:E7:5C:38:D1:9A:B1:C4:B6:8F:4E:98:2D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661FAF1377549A0A4EB47780
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e7eb59b-f11b-3fa6-8b5b-4d871181fb78.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.186.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1f:af:13:77:54:9a:0a:4e:b4:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=fa4971b0-e630-4414-88ae-79d40d187503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:29:65:ab:59:01:85:d4:75:17:d1:b1:e6:
7f:52:6d:3b:3e:24:bb:b3:65:c0:85:e8:77:dd:7b:
68:a8:9d:af:c3:71:9f:77:44:78:8b:75:b1:f8:ba:
1b:eb:c4:11:00:6d:d2:24:70:8d:4d:e6:89:f8:87:
b5:95:6b:42:5d:45:ea:dd:67:99:10:76:e5:75:dc:
37:c1:71:32:0f:03:35:e9:9f:74:d1:f0:c5:c0:ae:
f4:be:8b:94:3b:af:04:74:81:40:37:88:9c:28:00:
95:ad:56:da:a9:be:f3:6a:2a:1e:0b:08:ab:5a:66:
dd:19:f4:b1:b9:9c:a2:cf:c5:77:31:85:ac:17:5b:
ec:2b:f6:44:3f:ca:bc:17:c4:17:a7:db:d0:ce:a5:
df:3f:0e:aa:74:a2:84:e9:07:00:cc:53:a6:d0:a8:
a4:4f:0c:d4:4c:79:19:b1:68:87:07:f4:11:b7:00:
1b:ca:c5:e3:b1:12:b9:cb:93:db:9c:80:d6:da:48:
22:ec:44:c0:10:6e:10:ac:fd:30:b5:8d:91:2d:f2:
85:66:e0:3f:db:92:ea:b5:4c:38:4e:cf:56:55:16:
bf:29:8e:52:6e:6c:15:67:0c:35:8b:86:fa:f5:e2:
cc:a4:32:95:4a:38:52:01:85:af:04:54:b1:b7:97:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:E8:1F:8D:5C:4D:43:E7:5C:38:D1:9A:B1:C4:B6:8F:4E:98:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e7eb59b-f11b-3fa6-8b5b-4d871181fb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.186.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:c7:92:5a:20:64:64:65:14:3e:33:7c:f2:c5:1d:ea:0e:24:
cb:e0:61:60:aa:e1:16:ef:0b:f3:e0:15:0b:53:c8:ff:39:cc:
8f:03:44:31:4a:65:ef:a8:e8:cf:99:bf:f2:c2:0f:b5:e0:06:
1e:9a:bb:a2:4d:0a:36:82:52:e2:86:2e:ad:f4:6d:13:44:21:
80:31:75:77:5f:bb:75:8c:d5:80:7e:15:e5:1a:e9:89:c6:4a:
0e:78:c6:af:6f:c2:be:b2:e7:9b:28:10:2a:0e:94:9c:cc:10:
46:e3:d2:74:62:07:a9:2e:e2:15:10:30:7b:79:7d:6a:15:19:
9a:0d:84:35:dc:a9:1b:64:fe:01:5b:85:70:89:54:6b:e7:fc:
db:0d:01:55:c7:40:78:17:b5:6b:0e:5e:cd:bc:d2:f7:20:87:
31:1b:ed:d4:0b:62:4b:eb:4d:54:e3:86:76:ba:02:80:ae:89:
17:3f:5d:20:fe:54:64:de:78:e1:9b:42:1f:f5:6b:f6:8a:0a:
5c:77:0f:35:38:c6:5a:5f:74:8d:68:ad:2e:eb:dc:e5:48:f7:
3a:f3:9d:59:cf:24:ad:f6:22:86:f9:87:98:c6:df:bb:71:e0:
f4:df:37:e9:8e:3e:71:5b:af:de:47:b2:df:73:f8:c9:23:e5:
b7:a0:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:07 2024 by rpki-client on console-fra.rpki-client.org