Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabe502a-96fa-3ff7-b33d-1dd8c9942ba2.roa
File: cabe502a-96fa-3ff7-b33d-1dd8c9942ba2.roa (raw, json)
Hash identifier: qoOHnV4Cjknc1De4IFuvBdaBjXwQfMxJ3YH/Ltai5aU=
Subject key identifier: 69:86:8A:95:AC:F1:C7:70:4A:CE:DB:ED:CB:B8:07:D0:A0:FD:97:C6
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D662113970EA68C67FB481400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabe502a-96fa-3ff7-b33d-1dd8c9942ba2.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 174.130.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:21:13:97:0e:a6:8c:67:fb:48:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=43c5e4ca-752e-45af-8aee-22a5f8b73743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:d8:28:8b:18:5b:7d:89:33:86:b8:cc:dd:
8b:54:c9:ba:36:a4:d3:d2:6e:dc:87:bd:af:89:99:
3d:d4:34:2a:0d:77:6e:02:7f:e8:da:05:30:3f:64:
c4:58:2c:7e:58:0a:8d:98:d0:5a:79:30:c9:8e:4c:
4f:f2:b5:16:fa:02:1b:3c:62:94:ae:60:40:b7:61:
8a:a6:70:50:b4:b4:38:c9:5d:f5:81:37:20:aa:40:
9d:a1:6a:ca:83:71:81:2d:00:fd:b6:60:2f:ec:32:
ad:d7:e0:b3:5c:a5:5a:08:28:ff:17:dd:8e:42:92:
08:eb:c9:5f:6f:04:14:95:f2:4d:ed:ef:05:00:62:
4a:02:96:5d:7e:c5:1d:b5:1b:09:6e:f0:6d:25:27:
b3:80:35:f5:8d:b1:b2:0e:40:0f:1b:d3:65:81:5f:
33:2c:9f:0d:a1:42:9d:aa:d6:07:82:a5:46:d6:22:
2c:99:ae:94:d8:ff:1a:d1:3d:6c:3b:6c:64:5f:ba:
48:25:32:ab:01:90:c2:8c:f0:30:52:f4:f2:69:48:
b3:9a:60:a3:49:d3:b3:c1:04:69:6a:04:1d:86:df:
c9:c2:2e:9a:ce:0a:9f:1b:90:e4:14:a0:91:0c:f7:
9c:d9:08:cc:80:bc:82:f7:4b:59:91:d0:f2:81:85:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:86:8A:95:AC:F1:C7:70:4A:CE:DB:ED:CB:B8:07:D0:A0:FD:97:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cabe502a-96fa-3ff7-b33d-1dd8c9942ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
174.130.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:ed:be:82:36:bf:58:e7:60:42:88:80:3b:a4:60:cc:c8:e1:
f7:aa:25:53:f6:62:e9:3a:3b:83:e8:e1:ed:d2:5c:fb:cc:5e:
aa:33:4a:5b:5e:e8:01:61:ea:81:44:8e:ed:ad:81:a0:8c:b3:
47:d7:28:84:2e:ec:c4:d4:1d:0c:69:30:06:de:92:27:be:34:
50:1e:03:fa:0b:a8:33:a2:9d:97:48:dc:fa:d0:1d:dc:7e:24:
60:c2:40:f5:0c:b5:49:57:22:c0:35:df:00:55:db:1c:74:20:
c7:f5:23:ce:d2:5b:71:a7:a2:2f:5b:aa:05:08:c3:34:31:55:
93:07:de:48:06:22:97:c4:88:aa:f9:b2:2a:15:0e:b0:26:a6:
94:60:4e:a4:68:f6:8a:5c:d1:8a:1a:96:52:5e:69:1d:59:1a:
ff:d9:3b:bc:ef:7e:40:63:b0:df:94:59:b8:69:e5:31:02:03:
8f:4b:a2:8e:b2:81:7f:37:48:00:86:52:e1:60:93:8b:b6:70:
df:ee:ae:f4:be:4d:ce:8b:1f:e0:1e:67:44:63:3e:a7:01:4d:
5d:8a:17:33:17:8c:78:de:12:dd:f8:4c:f3:b3:71:e2:ec:db:
4b:3c:77:96:c8:81:30:e0:71:46:2c:3b:a5:53:53:a9:4d:11:
cf:53:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:12 2024 by rpki-client on console-fra.rpki-client.org