Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4d5a91a-e72e-39e6-bbf5-aab9cb2a6543.roa
File: c4d5a91a-e72e-39e6-bbf5-aab9cb2a6543.roa (raw, json)
Hash identifier: 0VSlikvG8IgS1esk+LBHXxLWY2g4jsYtKk1TfdUm8kg=
Subject key identifier: 93:4D:40:2A:B2:8E:08:1F:9E:5A:A2:D8:FC:F8:5E:E3:58:7D:B3:9D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618C5C0DCCFD412DA429C80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4d5a91a-e72e-39e6-bbf5-aab9cb2a6543.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.30.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:c5:c0:dc:cf:d4:12:da:42:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=31d2fb82-0a59-4ddb-9a95-e547dfbf77ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:28:a0:9d:44:74:bd:ac:5e:e5:9e:54:b2:
06:96:fa:55:19:77:15:d9:12:9d:f6:47:48:ae:04:
80:30:43:11:31:63:0b:59:9e:82:3a:e2:b8:dd:aa:
27:94:75:1e:58:c8:2b:d7:c2:b6:23:10:d0:04:c3:
be:9a:73:e3:f4:aa:2a:7b:e2:2e:d0:32:20:d4:af:
dc:7e:5c:0c:8a:f6:6d:66:bc:e8:b5:6a:78:85:62:
f1:8c:c8:d1:82:36:94:de:3f:ba:94:71:0e:c2:12:
35:00:c8:00:fa:1c:a5:9d:04:99:70:81:9a:d2:bb:
89:d6:b2:ce:7b:3b:56:ed:18:72:33:20:60:da:de:
b3:78:2c:fe:de:7a:74:f5:db:65:33:37:dd:0e:60:
fd:ab:c6:47:64:75:d7:0e:8a:0c:fc:f0:cc:6b:4e:
15:90:56:2d:9f:08:17:6c:f3:06:a0:28:c1:62:39:
9c:f0:78:b2:e7:22:3c:83:c7:02:21:be:95:40:e8:
a6:9c:71:ab:13:16:9a:88:7a:29:ad:df:ab:e6:63:
8f:9d:94:0a:9b:75:6a:75:fd:0a:db:9a:2d:26:a5:
b9:2e:a7:4d:0a:b4:15:35:0b:8a:2e:c6:5b:b6:8e:
6e:f2:74:7a:e7:88:51:ac:98:0c:8d:64:88:2c:f6:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:40:2A:B2:8E:08:1F:9E:5A:A2:D8:FC:F8:5E:E3:58:7D:B3:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4d5a91a-e72e-39e6-bbf5-aab9cb2a6543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:09:90:ae:0b:a6:df:fb:a2:49:ae:03:e2:89:21:dc:96:1d:
6b:50:e1:fd:22:ff:fd:03:4b:c3:36:31:3c:3e:4a:02:e7:14:
3d:c6:49:c5:8e:40:0b:bb:c8:cd:6f:1f:db:27:2e:4d:22:ee:
3b:2c:ff:bf:dd:c4:84:6c:40:08:71:61:d7:38:c6:98:65:ac:
09:4e:bb:de:7f:6a:c0:33:3e:01:db:5d:7e:d5:4f:ee:b1:29:
e9:a3:6e:f4:41:cc:13:f1:45:9b:d7:f0:7d:43:50:95:de:64:
3d:89:a6:80:24:49:3e:61:9c:27:77:9c:5f:d9:1a:3b:10:8c:
81:cf:07:ef:e1:cb:0b:d8:00:22:b4:cc:3f:d8:3b:0c:08:b2:
71:83:1a:b3:a4:ab:1a:32:11:90:fa:15:07:15:e0:bb:0b:26:
cf:f0:73:e1:85:01:bb:37:d3:1e:7e:7d:95:a4:4c:4f:53:d8:
5c:b1:ee:64:dc:4e:1c:f7:d8:70:77:88:b6:be:f3:89:63:ff:
71:50:5a:c7:b8:ff:f6:52:5f:a9:b6:bd:0b:39:3e:dc:60:b0:
b0:8c:14:b1:cf:63:6b:5d:79:bc:d8:2a:82:24:cc:f2:87:42:
9c:6c:0d:85:da:6a:f7:65:4d:a3:ef:e2:88:6a:17:e3:ee:26:
6b:53:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:11 2024 by rpki-client on console-fra.rpki-client.org