Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6364d86-09a6-3978-8907-5007365d5962.roa
File: a6364d86-09a6-3978-8907-5007365d5962.roa (raw, json)
Hash identifier: jbBl0+LMFh9hrwxUvWemTC/NA7ifOfp2wvBEU8/i08E=
Subject key identifier: 77:A6:A2:FA:4A:E5:22:46:A1:75:60:C4:8D:6A:7F:64:F3:9A:30:2C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DA14A21F5D906C1B4D3971480
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6364d86-09a6-3978-8907-5007365d5962.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 11 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 2604:cb00:d00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:4a:21:f5:d9:06:c1:b4:d3:97:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : Apr 11 04:00:00 2028 GMT
Subject: CN=e418e580-2737-40a6-b0e7-bddcdf3c20e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:df:a7:b9:1a:5f:28:ce:a4:e0:9d:c3:d4:39:
a2:2a:cb:fe:31:c2:d0:9c:0c:3a:32:10:93:82:ac:
98:d7:e1:8a:fa:82:33:dc:ce:e4:90:94:8d:2f:c1:
4d:af:eb:79:cb:a4:33:19:77:94:bd:98:cb:05:30:
d1:5d:6c:f9:6b:36:21:ae:e7:30:96:fc:1c:78:be:
73:b2:d0:0d:29:02:f8:6e:ab:3a:09:fc:7b:7f:11:
0c:5d:f7:ff:3e:fa:54:79:31:d8:ac:5b:79:6c:6c:
dc:d5:40:78:d6:9b:9a:99:6b:c4:14:e8:66:a4:59:
52:36:18:04:11:5d:ed:08:1b:8a:54:16:c4:25:f8:
78:3f:d4:00:5c:36:53:c9:4a:06:28:bf:39:d6:64:
ca:d3:93:b9:ed:7f:bb:24:b7:0a:1a:29:a1:79:50:
ef:d3:6c:4a:2d:32:48:fc:87:f9:5c:a5:84:af:8b:
21:01:bf:a3:ed:c9:28:29:f5:4c:4b:96:2e:14:93:
e8:cf:14:3a:7a:cf:4e:93:5a:05:10:8a:20:31:a7:
af:f7:3e:89:d5:02:15:23:29:c8:cd:87:c9:a0:0b:
8c:26:5d:85:b8:c5:0c:9a:ab:c9:7c:25:9e:27:0a:
08:1d:d7:65:bb:22:38:1d:22:c4:95:59:84:7b:3b:
23:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A6:A2:FA:4A:E5:22:46:A1:75:60:C4:8D:6A:7F:64:F3:9A:30:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6364d86-09a6-3978-8907-5007365d5962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:cb00:d00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ad:29:92:fc:4e:da:03:80:11:49:a7:07:05:80:4d:da:53:
fb:c6:1e:0b:07:15:aa:d8:c2:c9:00:37:92:54:bc:52:93:b1:
f9:6c:d0:00:0a:76:43:f9:51:e0:81:6b:d9:56:49:5d:9b:7c:
52:7c:4f:03:5b:f8:66:1e:2e:26:e8:45:cc:86:0b:0a:dd:ce:
d0:e1:76:fc:d6:8a:ec:e1:7d:5b:1b:f3:7e:4e:f7:87:5f:27:
10:66:03:d0:5b:45:24:f8:06:cc:98:15:b3:ff:f2:37:7a:8b:
27:51:35:d3:15:2c:14:9c:dd:34:8d:d3:c7:72:d3:65:ca:ae:
f7:a7:c0:49:6e:b5:d3:35:15:15:c7:fe:e4:7b:ab:f6:60:f1:
c6:ed:83:f1:6a:b0:e9:7c:3a:9d:75:13:e9:c6:54:14:07:33:
81:3d:cc:b0:5e:fc:6d:32:30:e4:42:97:ab:bb:59:e1:46:6b:
0c:98:a4:56:14:d3:0d:8e:48:af:4a:e5:f6:03:9b:46:e0:e8:
5f:c3:9a:75:ef:c7:ee:2e:d2:a9:c7:f6:64:27:98:1b:83:bb:
9d:17:c2:b3:63:92:5a:81:af:aa:04:1b:62:d6:66:e3:36:28:
4d:f8:6a:a8:86:af:78:61:16:e9:09:f3:71:8a:e2:64:78:f2:
09:5c:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:29 2024 by rpki-client on console-ams.rpki-client.org