Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6e3318a-cb2e-363f-ad56-8b3412a5e1e3.roa
File: b6e3318a-cb2e-363f-ad56-8b3412a5e1e3.roa (raw, json)
Hash identifier: Zy1kT0x6vsNTFuyJP+/IsH1dqri5bx8+qaUlxaBnrl8=
Subject key identifier: 33:C8:30:50:AA:BC:62:51:B4:F3:E3:31:86:C8:3D:D2:79:0A:74:75
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DB239A1DB2B78928295C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6e3318a-cb2e-363f-ad56-8b3412a5e1e3.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.19.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:b2:39:a1:db:2b:78:92:82:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=436b6531-3d65-4548-9fcc-0796d217450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:14:27:39:d9:40:ae:f0:be:59:9b:62:84:
06:cb:58:d2:80:51:2a:14:4d:57:1b:f9:f5:1d:d7:
ba:66:58:e9:2f:dc:10:1a:94:88:4e:28:70:5d:97:
78:13:27:1a:23:dc:22:b2:73:26:d9:88:a4:6f:d2:
be:eb:c9:e0:77:ed:73:0b:7b:6f:f9:04:8b:2d:63:
6b:73:97:01:98:ab:25:26:35:93:a9:ca:11:da:e0:
a2:f7:0d:92:1e:08:9e:80:d4:40:24:4a:42:9e:12:
d2:04:ed:b9:f1:07:a5:29:b8:f6:50:d2:31:78:58:
51:d2:dd:b4:00:7c:9b:3d:71:20:32:a9:c0:23:85:
53:98:84:6d:81:94:c3:f5:87:a5:06:b7:20:cb:41:
28:35:fa:75:7e:e4:d4:25:50:e2:ab:fc:3b:bb:d3:
0a:3f:88:5b:c9:90:a9:30:70:0e:65:15:81:3c:a2:
97:5c:3e:73:17:28:5a:07:13:df:c5:d5:38:df:a1:
61:ca:0b:5f:7e:bd:39:60:27:db:b8:7f:96:d4:34:
e9:9d:4f:f5:4e:44:24:27:5f:29:f5:64:99:70:ef:
bc:4d:0a:8b:1e:26:20:76:8f:28:ab:64:8f:8d:d2:
d3:52:0e:3e:c6:dd:aa:7a:43:72:26:ca:91:72:f7:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:30:50:AA:BC:62:51:B4:F3:E3:31:86:C8:3D:D2:79:0A:74:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6e3318a-cb2e-363f-ad56-8b3412a5e1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:19:5d:fe:de:c5:52:59:38:2d:84:86:0d:6b:e3:a7:94:bd:
f5:3d:1c:da:20:39:f4:63:2d:11:9a:3a:e7:ec:11:4c:13:3b:
5a:71:55:af:6d:a0:40:a5:cc:dc:05:42:86:b6:ba:dd:15:71:
48:c5:26:6e:b2:0c:2d:57:f8:97:57:6d:aa:17:52:d8:78:a3:
b2:82:2d:bd:4a:a7:92:53:f0:c0:d9:2b:8a:50:98:34:4c:56:
94:e3:42:55:98:ee:cf:94:a3:fb:b6:5f:7b:7c:25:ea:12:fb:
72:e0:bb:f3:b9:58:7d:5e:48:49:c1:57:d8:34:20:8b:5c:81:
37:a3:ce:88:d6:f2:1e:ee:3e:dc:49:7c:04:22:b3:52:bc:17:
b6:95:45:5b:82:eb:9f:ca:01:a0:a8:87:3c:89:b3:2b:18:22:
46:ce:e5:43:fd:c1:b0:10:81:56:df:2c:d6:8f:d1:50:29:65:
77:ca:bb:92:cd:90:c3:6f:46:8b:d9:8e:51:74:5b:13:7e:a9:
0c:72:cc:1e:ed:e8:97:5b:ce:57:4f:29:1f:77:26:a0:1b:88:
87:28:dc:7c:72:78:53:6a:9e:28:5d:9c:41:6f:41:f1:71:8b:
0c:c1:c9:fc:fc:55:bc:54:09:69:cc:96:9e:e7:30:67:ab:b7:
01:64:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:31 2024 by rpki-client on console-ams.rpki-client.org