Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfd543db-1106-3cb6-848d-3d5a9d78e641.roa
File: bfd543db-1106-3cb6-848d-3d5a9d78e641.roa (raw, json)
Hash identifier: 0vL3hFMZc935NVKZaYRRfIQUcnN2dX+v/c55lJBnth4=
Subject key identifier: 84:16:60:09:14:FC:0C:5F:6B:FF:B5:43:15:28:7D:D4:57:49:C6:3A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F579823C6C002F8D2369920
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfd543db-1106-3cb6-848d-3d5a9d78e641.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 198.211.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:57:98:23:c6:c0:02:f8:d2:36:99:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=33736153-9af5-4977-adf7-fbe997b639ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:5a:5e:c6:d8:0d:e4:fd:eb:f2:0d:98:69:
d8:41:2e:6c:23:56:39:0f:be:c2:45:06:e3:fb:73:
90:a9:77:68:85:fc:7d:2d:a7:19:47:32:a8:ab:38:
c0:aa:ff:38:48:cf:e5:2b:76:b7:64:57:89:9d:36:
b1:1e:fa:e9:25:8f:8d:43:11:4f:8e:5f:9a:83:ed:
21:28:7f:a8:e5:7a:01:a8:2d:c6:bc:e5:b8:4f:71:
fa:c7:12:4d:4a:e0:65:48:ad:22:5e:21:92:52:c0:
c5:b6:2c:cf:27:fd:96:7d:5b:e4:4f:eb:0d:eb:fc:
87:b4:52:21:3a:00:c7:33:54:92:b1:42:33:74:99:
77:97:25:53:41:2d:e1:a5:b3:12:0c:07:7e:2a:81:
b1:d2:e7:6a:e3:71:96:f3:4f:ef:bf:ad:dc:e7:25:
1b:a5:a7:16:c4:30:4a:79:8c:90:28:c1:7f:87:d0:
56:da:5d:f4:73:a8:ba:6c:b3:e8:5c:d5:d4:4d:83:
43:44:d6:87:d7:c8:8d:ca:f8:0f:28:58:cc:12:ef:
be:57:ae:45:30:1d:a5:d6:e7:e4:30:e7:82:f4:b0:
d2:1f:3f:93:04:a2:c8:26:a6:8c:a5:88:1b:b1:14:
4d:ce:0c:f1:b2:d5:6d:35:2a:cb:91:fe:a4:36:e4:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:60:09:14:FC:0C:5F:6B:FF:B5:43:15:28:7D:D4:57:49:C6:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfd543db-1106-3cb6-848d-3d5a9d78e641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.211.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c1:b7:a6:2b:58:8a:38:4a:1c:c2:36:c6:a9:f5:73:db:bc:
dd:8a:86:ba:b2:9e:7b:30:4e:b3:91:3c:dc:64:9b:e8:c3:43:
bf:6d:14:db:da:2e:a8:9e:d0:59:19:22:14:7f:d4:ce:a8:0b:
0e:12:4e:f2:52:03:bd:a1:42:14:a0:81:d0:b7:2b:59:cf:47:
41:e2:44:26:a4:74:04:dd:62:e7:6d:e0:31:b8:05:16:1d:3d:
d2:0a:ad:33:dc:de:99:0e:4c:f8:44:e3:5a:b4:e4:17:a3:36:
45:7a:9f:cb:59:73:27:97:70:81:29:2d:5b:6a:c3:94:f7:a4:
bd:91:d4:4d:28:93:92:a0:2f:54:2d:19:d0:4a:28:16:4c:c3:
24:59:f5:df:b6:02:a8:51:1c:bc:48:e6:cd:16:e3:fe:f4:d7:
47:ee:d4:8b:95:2d:34:d2:aa:46:42:bd:9f:8f:d5:e9:ba:33:
7f:85:08:d1:e5:56:32:37:0a:4e:44:b6:8e:ab:3f:61:76:e4:
8d:0f:37:42:44:37:6b:f4:2f:41:18:3b:a9:52:0a:90:a2:c1:
1d:40:36:fa:fe:88:dd:0c:8b:50:28:69:86:da:cd:3b:a2:c2:
83:62:ae:ad:42:30:72:dc:47:d9:b1:53:5c:bb:41:56:45:51:
f7:67:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:10 2024 by rpki-client on console-fra.rpki-client.org