Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a2355d-e533-385c-aba5-14d40b3ef9d8.roa
File: a6a2355d-e533-385c-aba5-14d40b3ef9d8.roa (raw, json)
Hash identifier: Z7GnDo5LUizb9xenByjZln+VRfyS/HowAyGlrSFTcVI=
Subject key identifier: 3A:6F:13:E0:C1:D5:44:7A:2C:BD:98:44:50:A2:6F:04:2A:3D:70:85
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB4410E581E15A52C2A28B440
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a2355d-e533-385c-aba5-14d40b3ef9d8.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.29.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:41:0e:58:1e:15:a5:2c:2a:28:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=2af1a1a0-f241-4eb1-af76-66f4040d3911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:56:1f:d5:cc:bf:e3:ea:8a:5d:97:83:bb:
39:18:35:e4:86:7f:81:c4:9b:c0:34:b1:d5:0c:a9:
43:5e:f1:47:e1:5c:18:89:7f:97:c8:bf:8d:6e:57:
ca:18:a4:f5:21:d2:93:5e:46:1f:9e:22:32:4d:94:
f7:d9:3a:cd:96:f4:32:51:76:59:e7:18:d8:2b:02:
38:ea:49:b6:08:58:a7:c2:a3:e8:58:18:a5:27:12:
34:51:e3:47:27:b9:58:33:84:19:20:47:f2:c3:a3:
ae:e1:3e:c1:66:be:cb:76:bb:9c:ba:8a:e0:a1:8f:
12:f5:7a:9f:14:08:67:ba:92:94:ef:fd:6f:9f:f6:
8d:af:3b:16:bb:de:c0:03:23:f1:c3:bd:6f:ea:f9:
66:6a:55:ee:81:c0:02:46:54:38:d2:a7:af:94:75:
79:28:19:ba:66:04:3e:50:62:ac:32:99:57:85:5f:
d1:51:3a:aa:e6:44:3e:1a:8b:f0:17:05:7a:1f:9b:
49:df:cd:e1:f2:75:2a:96:89:76:98:67:2f:63:e5:
66:03:db:28:87:77:73:33:11:f5:59:ab:42:b1:48:
d6:26:67:57:44:01:57:45:34:71:ad:1e:4f:6c:e7:
d7:c7:c6:ad:c6:d9:7f:0b:64:61:89:44:d1:3d:2c:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:13:E0:C1:D5:44:7A:2C:BD:98:44:50:A2:6F:04:2A:3D:70:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a2355d-e533-385c-aba5-14d40b3ef9d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.29.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:bf:da:f9:e8:3b:fe:60:f6:3a:48:62:54:03:5d:4d:e7:3e:
a6:7c:56:07:21:39:83:1c:8c:64:04:16:31:8b:5c:31:52:f2:
88:36:40:99:b5:62:83:f3:11:31:52:6c:fd:95:c5:03:30:21:
6a:1b:6f:0f:00:b2:5d:2a:c6:78:8d:fa:40:21:1c:07:18:f8:
c5:dc:01:51:94:01:e8:b7:24:5d:10:5d:6e:0b:cb:b4:ff:59:
3c:f4:80:4e:92:f0:34:1b:43:ab:92:fb:d2:d2:74:aa:6e:8a:
12:fc:7e:f6:85:26:70:f0:59:90:eb:9b:c8:36:e6:5a:9f:a2:
08:27:f1:f1:4e:1f:62:af:50:dc:12:1d:a7:b2:43:0f:27:68:
25:68:87:a6:eb:1d:df:f0:72:64:f0:af:c2:b1:41:d0:7c:64:
39:96:79:0b:35:1e:69:32:b0:ec:cd:c8:03:16:38:79:c5:39:
a8:6e:5f:71:9d:1e:ad:2c:3d:3e:3a:f7:a2:23:d1:65:f2:3d:
d9:bf:26:f3:65:53:d1:84:48:12:fc:68:e7:38:f8:19:8e:2b:
98:82:47:ff:41:6b:c2:47:50:5a:fe:7d:6a:5e:46:13:04:94:
d7:f4:11:47:33:73:73:cd:e3:c7:c7:f1:25:f9:6e:6e:21:81:
01:cb:6f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:29 2024 by rpki-client on console-ams.rpki-client.org