Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c342ac0e-b859-32cd-9e19-e37697cf25cd.roa
File: c342ac0e-b859-32cd-9e19-e37697cf25cd.roa (raw, json)
Hash identifier: ymVkOpvNGMNsbuWpCwB4JXRzi/d48VLEWx2nUqvTk+o=
Subject key identifier: 76:5B:73:4A:A5:12:19:C5:15:6F:3D:C9:3A:A1:95:8F:A2:43:D2:7D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661DF1CC0E6CED361C15C880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c342ac0e-b859-32cd-9e19-e37697cf25cd.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.21.48.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:f1:cc:0e:6c:ed:36:1c:15:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=9ad17fe1-7fe8-4fd3-91a8-9007587b39aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:99:42:ae:c8:d6:d7:cf:ce:97:eb:e0:5b:
e2:c3:42:93:09:2c:32:3a:ea:2c:38:80:c6:fa:22:
aa:cd:0c:a3:ff:13:b7:c2:fb:9f:fd:50:e0:47:5b:
67:36:f0:87:9a:7e:79:e9:07:11:3c:4d:e5:d8:48:
10:16:32:32:9a:d2:8b:f6:70:1e:59:bd:eb:7c:59:
99:0c:39:d0:77:4e:23:ee:39:1e:00:71:90:a4:b8:
13:f7:d3:15:ab:fd:a9:ee:bb:eb:54:a0:53:8f:30:
46:da:75:b2:7d:67:1a:99:68:ce:46:ae:d5:50:c5:
1b:ac:d6:9e:63:33:ab:cc:53:a2:71:f6:7e:8a:53:
45:9b:78:37:fd:e4:32:47:03:9c:d7:1a:89:84:88:
0b:72:8a:3b:7b:c1:24:62:94:f9:29:4d:99:db:e8:
64:b8:5a:4f:9e:54:34:be:32:d5:21:6c:25:45:c3:
a5:f6:f8:b5:3f:3d:5d:44:47:3c:8d:67:d5:2d:99:
d5:6e:51:1e:5a:43:64:c3:b5:bf:25:c2:cc:db:29:
a7:6e:95:7e:ec:f3:57:f4:28:5c:7e:de:c9:df:d5:
12:b7:f4:47:a7:3f:86:9d:a4:f7:3d:b3:a6:cd:fc:
e0:8e:74:be:96:da:16:b2:af:3c:9a:cb:e1:2c:ed:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5B:73:4A:A5:12:19:C5:15:6F:3D:C9:3A:A1:95:8F:A2:43:D2:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c342ac0e-b859-32cd-9e19-e37697cf25cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.21.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:38:84:66:76:62:16:90:10:a2:dc:00:48:97:34:c6:ba:da:
1d:8d:b9:91:4a:f9:3a:fb:69:7b:56:38:84:31:3d:79:d4:01:
b4:a0:be:f5:75:48:d6:28:cf:38:86:cd:fa:69:b0:f5:35:ca:
31:aa:c3:46:da:1b:d4:15:31:d1:b3:34:04:2d:e5:ca:8b:ab:
d0:df:82:94:95:6a:79:6d:99:7d:32:d1:71:a1:ac:92:91:37:
11:2b:d8:d2:c6:9a:aa:0d:c3:65:45:73:1b:33:25:01:28:69:
39:9a:b0:b4:f7:ed:f4:21:18:6c:50:9d:2e:cc:7d:84:86:a8:
68:87:77:0c:da:f6:eb:48:1e:df:75:58:6f:cd:82:ea:e9:14:
96:a7:5f:44:4d:0f:c1:7b:6c:5e:86:86:39:85:b1:49:48:0a:
f1:e4:70:42:88:d5:18:08:b5:d4:2d:8f:f7:c6:8e:5e:eb:35:
83:e4:f1:81:a1:7c:85:ef:ff:68:a1:32:be:8e:2d:8f:96:11:
04:9a:b2:b6:b0:f4:fe:86:d8:71:80:ad:ac:a1:dd:3d:c8:c7:
0c:90:4f:af:38:67:07:b5:3e:f6:2f:cd:6a:b4:b3:76:1c:a7:
3b:1d:cb:0f:52:b5:fd:2b:fc:01:d2:0c:91:1a:4f:d5:b8:7d:
8d:02:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:11 2024 by rpki-client on console-fra.rpki-client.org