Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a623c96b-4477-30b9-ac2a-9fd652907a49.roa
File: a623c96b-4477-30b9-ac2a-9fd652907a49.roa (raw, json)
Hash identifier: UBJ3b+FWwYyQX7jaBxlA9zlyLptfnHg4Xi/vlmpFNdM=
Subject key identifier: 22:F0:EE:67:E1:FF:F0:F8:26:F3:00:17:74:98:26:56:E9:73:5C:50
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FB7036425C7B7B3783E5E00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a623c96b-4477-30b9-ac2a-9fd652907a49.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 398741
IP address blocks: 40.136.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:b7:03:64:25:c7:b7:b3:78:3e:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=06885357-ed95-4548-af98-72aef36d4ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:f4:fe:f7:6f:4d:98:4b:10:d8:41:b1:51:
81:05:10:67:10:c4:ae:e7:0f:63:1c:ad:6b:68:a6:
62:71:85:20:3d:0b:97:7b:56:dc:f8:02:94:cf:58:
7a:c4:03:25:3f:3e:dc:b2:1e:f0:6a:d6:9f:14:64:
57:97:bd:41:12:6c:ef:6e:94:75:bd:fe:37:4b:39:
e8:20:00:b1:87:6b:3c:a4:a7:ff:b4:30:ea:b4:94:
17:0f:b5:94:e8:ba:89:d4:1e:47:e8:89:c3:85:1f:
5f:a8:be:02:67:76:98:3b:a3:b4:36:8a:af:2d:c8:
e5:08:11:91:84:29:bf:91:81:dc:a1:60:df:fe:0a:
3e:2b:6f:51:5d:7d:31:65:02:7d:2a:24:d5:1a:69:
84:f2:a9:7f:f8:92:07:c3:e9:0e:f2:e8:26:3e:96:
66:11:2e:f0:06:a6:15:4b:d6:d2:f3:b4:bd:1b:66:
c8:e5:9e:8f:4d:02:fc:6a:81:3a:9c:33:df:ac:73:
85:92:43:f8:ef:26:b2:30:89:9d:79:aa:23:26:8c:
4c:dc:62:05:ac:3d:bd:7e:be:66:86:c4:27:7e:2a:
3f:fb:b5:99:45:10:76:76:f9:59:99:9c:6d:d4:72:
2d:35:dc:e2:75:1b:1f:91:5d:b2:d8:24:fe:e9:b1:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:EE:67:E1:FF:F0:F8:26:F3:00:17:74:98:26:56:E9:73:5C:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a623c96b-4477-30b9-ac2a-9fd652907a49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
40.136.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:e4:8c:e0:72:34:75:d2:ac:bd:d9:44:f5:71:55:3f:af:b3:
b2:87:ed:b6:17:c4:5e:0d:5c:02:36:81:82:d7:f6:ec:77:c6:
04:fb:c8:1a:ff:f8:8c:20:2a:7d:03:92:0c:03:f6:4f:d4:ca:
06:1b:73:41:d3:c8:18:e5:2d:26:c6:d8:5b:e0:e1:8f:07:25:
3f:df:8c:61:e9:0c:ba:96:1a:46:a5:f3:ba:f6:06:30:ac:e1:
48:08:97:a2:a5:bf:3d:2b:1d:8d:cf:0f:77:ff:ce:f0:a5:38:
11:84:01:40:28:fc:ca:08:72:51:5f:b9:1e:8c:fc:36:13:e0:
8f:f4:43:92:f3:14:6b:5c:55:2a:8c:51:9e:f7:96:75:18:62:
9a:03:0d:93:e5:74:26:87:c7:b2:00:60:39:c8:72:86:66:53:
4b:b6:c5:41:ef:a0:3b:23:09:3f:aa:3f:b3:9d:f5:7d:21:aa:
92:3f:19:28:9b:6e:c3:56:80:48:16:c9:29:ac:17:05:15:db:
c4:46:df:49:c2:16:82:41:fe:5d:a1:a5:00:7e:b7:39:6c:e2:
82:5b:da:86:09:65:ab:b2:9c:7d:1e:b9:ff:ff:a0:bb:57:d1:
d6:79:49:84:4f:4e:56:d2:af:32:9c:f9:f3:12:b7:99:1e:3a:
f0:53:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:42 2024 by rpki-client on console-ams.rpki-client.org