Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7dc9c0c-7ba9-319b-9371-0b6f46ae8e0c.roa
File: c7dc9c0c-7ba9-319b-9371-0b6f46ae8e0c.roa (raw, json)
Hash identifier: fp/cO1efUoMDKyfrwGwif0ELBrNbnwU+OvPX2FsCeoc=
Subject key identifier: 19:F1:88:AF:4C:2D:F1:77:CF:7A:63:BD:74:74:A5:B9:A9:AD:8E:10
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66203B06E9554C8CD85DBB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7dc9c0c-7ba9-319b-9371-0b6f46ae8e0c.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.189.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:20:3b:06:e9:55:4c:8c:d8:5d:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=051e9b57-8256-45c7-98fe-34180893a7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:af:3e:31:eb:26:56:6f:ac:52:98:fd:ba:
10:ba:31:d4:c4:e4:5b:f5:59:e4:16:1e:6e:90:ae:
d8:cf:eb:13:f3:a0:90:aa:6f:d7:42:8e:88:87:7f:
ca:dd:f4:65:11:60:db:c1:3e:4e:d0:f1:77:1c:4a:
c7:73:6e:d1:7a:e5:7f:ed:5d:3f:7c:2c:4d:30:08:
9d:18:19:de:b5:86:ad:a7:6a:b3:87:c6:f8:89:32:
cd:b4:f2:f7:1c:07:73:b0:be:b9:a3:0a:d4:a7:ae:
b3:39:da:b1:eb:1e:87:f6:59:30:3d:7e:a4:3c:ca:
1d:a8:85:86:a1:9b:4b:89:9e:08:94:07:6c:71:58:
64:a6:2e:7e:06:a0:92:fc:7a:a5:c6:9a:a1:bb:b7:
7b:e8:14:15:66:81:58:97:9f:64:2e:c0:f9:2e:2e:
8e:02:72:0f:9e:23:86:c0:f6:14:c3:c8:e5:92:c9:
3a:cd:ac:05:85:dd:46:81:cf:a9:d7:d3:ca:fe:a1:
0c:de:a0:65:8f:cb:aa:e3:a6:c7:1a:d4:c9:ed:c5:
96:e1:3c:e1:68:fe:60:11:44:e2:72:f6:99:c5:d6:
7f:e3:c3:0b:ef:cf:5a:2a:52:35:65:16:f9:26:d1:
21:09:52:28:80:11:4e:a3:47:51:95:cd:aa:08:49:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:88:AF:4C:2D:F1:77:CF:7A:63:BD:74:74:A5:B9:A9:AD:8E:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7dc9c0c-7ba9-319b-9371-0b6f46ae8e0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:cc:3d:8f:cf:6b:83:15:4a:0b:da:fd:7c:5a:54:6f:8b:e6:
2f:47:11:40:de:5a:19:d8:b7:61:22:61:bd:56:06:32:de:71:
bf:ef:cf:aa:65:a5:43:de:13:90:63:39:2d:4a:b3:c7:c5:aa:
08:2e:64:18:f6:b0:39:cc:13:46:92:ab:5f:69:18:1b:29:5a:
72:c3:28:68:48:1c:f3:35:27:7c:d9:40:99:ef:3b:a2:ca:79:
88:6a:3c:3a:bd:a8:04:6a:52:75:ff:03:52:ac:9c:1b:15:88:
28:17:23:66:ba:45:63:20:b7:ea:20:91:d4:c8:41:a1:4c:eb:
f5:51:9a:5b:8e:ee:ce:e1:32:44:9f:f7:10:42:82:4c:32:a4:
41:3e:85:f5:7f:74:2c:f6:4b:bb:9c:15:3c:a8:2d:59:6c:32:
d5:58:4a:9c:a1:58:0a:23:3a:8a:94:2f:29:f0:5b:64:f1:f8:
18:b8:8d:db:2c:9e:a3:43:87:18:88:e3:bb:5b:98:35:34:db:
b7:cf:97:a8:7a:7f:2b:18:58:7b:d8:e6:72:6e:16:28:24:ce:
38:a7:ed:9c:16:bf:49:65:94:f4:3f:44:50:2c:4b:09:0f:96:
7d:f2:30:eb:f5:1a:5e:64:5b:1b:ba:5c:f0:41:2b:b8:74:36:
17:3f:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:43 2025 by rpki-client