Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7d8a2db-e7a4-3dcb-a83b-3effa5c26361.roa
File: c7d8a2db-e7a4-3dcb-a83b-3effa5c26361.roa (raw, json)
Hash identifier: tNQEOhUuwWn7kmuIFEH5UzfLau0EP9FD8+M+HtGEFAY=
Subject key identifier: A8:A0:89:60:E2:9D:0B:3D:09:9E:02:9D:2E:02:B8:E6:D9:42:0E:AC
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66173472B6BAA72218FA8000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7d8a2db-e7a4-3dcb-a83b-3effa5c26361.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 69.40.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:17:34:72:b6:ba:a7:22:18:fa:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=c731c761-78d6-482f-aa69-c37ad568f73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:1a:7d:b4:50:65:8b:07:81:86:25:8c:39:
cb:45:85:03:2f:3e:2d:7c:e6:b0:50:99:f2:11:f3:
41:fa:c0:c2:d7:4a:45:f2:1a:6a:38:af:e8:03:e9:
35:08:e9:a4:97:10:5c:81:cf:cb:62:ee:8a:df:59:
c9:d3:b3:03:b3:cb:c6:fb:35:5c:1e:cf:7d:31:c3:
cf:02:ec:9f:3b:46:66:cd:0d:df:90:33:52:82:f5:
4d:ba:dd:db:de:ef:91:f5:02:9e:de:d8:81:e9:a6:
27:49:22:9a:a4:d2:2e:07:47:62:b5:7b:7f:53:1d:
c8:26:f9:e3:f1:1b:04:95:3b:71:37:fb:6e:24:5e:
e6:e7:4b:79:20:a1:05:90:cd:16:c5:db:d2:2f:f9:
75:db:e1:0f:a2:f4:47:d8:a2:3d:97:d4:0a:64:e2:
4f:b5:6d:bd:6a:ff:fb:29:87:b2:ee:b2:2e:3c:20:
ad:0d:16:3f:9a:11:f0:fd:7c:d0:d5:e4:d9:e7:59:
ba:a8:e3:37:76:cd:8c:f1:23:76:41:f2:ff:46:c8:
d1:d8:86:cc:b5:d8:8d:ba:2c:83:1a:c4:a2:ec:77:
0d:85:99:9a:ee:ae:db:76:8b:ec:b2:8c:38:30:74:
11:88:68:a5:85:ab:5a:63:85:1c:64:22:65:43:ba:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:89:60:E2:9D:0B:3D:09:9E:02:9D:2E:02:B8:E6:D9:42:0E:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7d8a2db-e7a4-3dcb-a83b-3effa5c26361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
69.40.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:98:eb:c3:22:fd:f0:dd:2b:13:da:b1:3e:b2:b8:08:75:40:
7b:90:de:87:a3:93:fb:0c:35:f6:f3:64:4e:b1:a5:64:da:44:
d6:a3:e6:66:6c:57:49:35:dc:0f:54:dd:bb:25:6d:36:35:4e:
43:05:a2:c0:c2:6c:51:1e:32:c1:91:d6:90:ba:2a:02:e2:cd:
04:7f:e4:d2:e8:9b:32:91:9e:97:7c:19:9f:5c:a0:b4:61:81:
21:79:2a:b5:c3:38:2e:88:32:0c:ca:60:9d:e4:3b:92:8f:40:
5c:fd:6f:72:92:ee:b2:40:14:d4:ac:d0:a6:5e:33:6a:70:e9:
8f:33:b9:54:2a:35:41:e3:a6:a7:0e:16:5a:16:57:78:1d:3c:
f8:15:a4:78:d2:b2:1c:74:37:70:ee:ee:a6:68:57:0c:29:47:
57:42:6d:3e:e3:eb:6e:06:34:8a:1b:a1:31:3d:14:df:85:b9:
08:3b:45:fa:19:3d:53:c0:9a:73:48:e8:62:b0:00:e1:69:a1:
b2:f1:b0:27:99:ff:38:2c:14:ec:0b:b2:10:b6:06:e8:bf:2e:
94:e6:b8:6b:2b:e4:3f:10:44:cc:e7:9f:2e:3f:ef:24:63:cb:
a1:e1:b9:b1:77:de:7b:5e:67:38:23:66:c8:7d:f0:b7:36:e3:
12:eb:d0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mFzRytrqnIhj6gAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzczMWM3NjEtNzhkNi00ODJmLWFhNjktYzM3YWQ1NjhmNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JAafbRQZYsHgYYljDnLRYUDLz4tfOawUJny
EfNB+sDC10pF8hpqOK/oA+k1COmklxBcgc/LYu6K31nJ07MDs8vG+zVcHs99McPP
AuyfO0ZmzQ3fkDNSgvVNut3b3u+R9QKe3tiB6aYnSSKapNIuB0ditXt/Ux3IJvnj
8RsElTtxN/tuJF7m50t5IKEFkM0WxdvSL/l12+EPovRH2KI9l9QKZOJPtW29av/7
KYey7rIuPCCtDRY/mhHw/XzQ1eTZ51m6qOM3ds2M8SN2QfL/RsjR2IbMtdiNuiyD
GsSi7HcNhZma7q7bdovssow4MHQRiGilhataY4UcZCJlQ7oL3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKigiWDinQs9CZ4CnS4CuObZQg6sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdkOGEyZGItZTdhNC0z
ZGNiLWE4M2ItM2VmZmE1YzI2MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI6Y68Mi/fDdKxPasT6yuAh1QHuQ3oejk/sMNfbzZE6xpWTaRNaj5mZs
V0k13A9U3bslbTY1TkMFosDCbFEeMsGR1pC6KgLizQR/5NLomzKRnpd8GZ9coLRh
gSF5KrXDOC6IMgzKYJ3kO5KPQFz9b3KS7rJAFNSs0KZeM2pw6Y8zuVQqNUHjpqcO
FloWV3gdPPgVpHjSshx0N3Du7qZoVwwpR1dCbT7j624GNIoboTE9FN+FuQg7RfoZ
PVPAmnNI6GKwAOFpobLxsCeZ/zgsFOwLshC2Bui/LpTmuGsr5D8QRMznny4/7yRj
y6HhubF33nteZzgjZsh98Lc24xLr0Co=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:32 2024 by rpki-client on console-ams.rpki-client.org