Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfed7a79-ba60-3743-8e04-9ca78564c15c.roa
File: bfed7a79-ba60-3743-8e04-9ca78564c15c.roa (raw, json)
Hash identifier: BipLDYQ7yVoDQCl4GIWZLlAAuWwPqBxihjGAXVfCPsc=
Subject key identifier: 68:54:89:EB:FC:41:88:72:87:DD:23:E3:35:65:54:5D:00:48:BA:CA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D4FBACB6525917144C730AF50
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfed7a79-ba60-3743-8e04-9ca78564c15c.roa
Signing time: Mon 21 Mar 2022 04:00:00 +0000
ROA not before: Mon 21 Mar 2022 04:00:00 +0000
ROA not after: Mon 13 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 63.252.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:4f:ba:cb:65:25:91:71:44:c7:30:af:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 21 04:00:00 2022 GMT
Not After : Mar 13 04:00:00 2028 GMT
Subject: CN=8ba2b711-453c-4481-9d11-16dbe0ee20b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:f4:b1:8b:15:a9:5c:58:b8:f5:fd:99:e9:
56:ff:31:f1:65:ba:fd:9c:85:73:35:c1:33:50:68:
e4:f3:eb:88:23:dd:9c:14:7a:c8:23:20:5a:b2:56:
dc:24:4f:3b:42:cb:f5:ff:76:e3:1c:23:e6:e7:07:
e1:16:50:0b:b9:e7:83:4f:1b:89:c3:68:7a:9a:ac:
5d:51:0e:64:f0:86:2f:f4:1b:3b:ed:43:9c:c2:fe:
ac:ae:e5:f6:88:13:32:2e:17:11:7c:1f:df:c7:d4:
bd:b9:5e:42:2a:01:ac:7f:a4:f1:7f:05:4b:4f:aa:
3b:69:73:eb:e9:0c:17:80:c5:a6:83:02:d8:f9:c2:
77:b3:6f:e8:5c:7a:a9:5e:ef:ed:78:2c:96:e4:bb:
c2:56:90:dd:0c:d5:46:5e:64:e0:14:d8:11:80:be:
d7:37:7f:70:ce:bd:08:2c:a9:3e:fa:e9:fe:f0:68:
66:95:42:c3:2f:a9:1a:8f:23:4c:ec:b5:d7:73:e1:
dd:4c:0d:6d:53:62:d2:3b:e5:7a:9c:48:29:66:9f:
e8:92:d2:0d:dd:81:67:8b:c9:91:e3:ae:39:6b:3e:
b3:39:71:c9:d4:13:f0:cd:4e:ba:d0:d7:26:bd:fb:
0d:6d:d0:bd:c8:06:00:88:4f:4b:3d:fa:52:b8:d6:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:54:89:EB:FC:41:88:72:87:DD:23:E3:35:65:54:5D:00:48:BA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bfed7a79-ba60-3743-8e04-9ca78564c15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
63.252.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:ba:85:f1:a4:1f:60:5a:a8:bd:c2:90:70:d7:89:ad:ba:8d:
42:3c:9f:d2:91:ff:8e:2f:4e:35:e1:aa:6d:a4:43:14:58:5f:
c3:86:f6:bd:93:73:45:65:a5:e7:0b:26:a1:f5:9e:8f:ad:51:
cd:eb:b3:e2:83:40:03:ce:f3:60:25:c4:a5:eb:4e:ac:dc:de:
c5:ac:a7:85:7c:70:49:a5:80:9d:ce:ee:a1:8b:01:2e:bf:79:
aa:22:88:29:c2:1d:47:81:8d:2f:5d:36:91:08:57:7a:16:b5:
97:8d:b4:f8:83:1d:81:17:73:1a:85:43:b3:48:7e:55:c8:22:
e4:90:80:4e:0d:b6:24:b0:a5:57:7d:38:a8:75:d3:5b:89:59:
79:a2:81:94:14:18:25:d6:a6:4d:9d:2a:c6:95:34:48:7e:fa:
d9:a5:09:c7:d0:d7:fe:ee:30:cd:57:cd:e7:92:97:05:23:76:
a0:84:79:c6:33:f4:4b:1c:b9:2b:ca:65:14:bb:e1:0a:a3:3a:
aa:72:6a:ef:d5:60:8c:1c:c5:9c:c4:94:8b:06:25:e0:c4:6f:
b5:b7:3a:9f:db:68:9c:63:0d:6f:b2:fe:99:0e:f0:a4:b5:2b:
42:b0:64:27:78:0e:01:f9:ce:0b:79:b4:fc:02:62:59:06:33:
23:d4:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:10 2024 by rpki-client on console-fra.rpki-client.org