Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceced83e-3a2e-3058-8ffc-46de481a75ea.roa
File: ceced83e-3a2e-3058-8ffc-46de481a75ea.roa (raw, json)
Hash identifier: ghbceRpnWCEGfYWydPts/vTvlRyvDuA0LZ7EO6q7hY8=
Subject key identifier: 6A:9E:E9:7D:42:EC:D7:D9:8D:25:2A:3D:18:DB:BA:37:60:16:98:4D
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661AEFDB609AFCA517DA0400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceced83e-3a2e-3058-8ffc-46de481a75ea.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 75.89.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1a:ef:db:60:9a:fc:a5:17:da:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=a7e885a5-7d04-47c6-b8cc-e6754bc5c894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d6:54:c2:08:ce:05:88:55:38:17:54:28:f0:
8b:8a:4a:f3:45:26:70:66:3d:0a:68:61:bd:f7:40:
16:fd:cb:30:b4:8d:2b:6f:a4:05:82:e7:ae:23:63:
63:b4:20:93:db:fe:ca:f2:48:bd:e7:00:3a:07:0b:
35:01:e5:dc:a6:b4:d8:5f:e0:d1:a6:eb:d0:cc:17:
8c:87:c3:c2:ad:5e:d2:dd:a6:b7:7f:c1:bd:08:b4:
98:05:0e:33:9f:d7:ed:85:60:b1:fb:96:01:92:7f:
a3:3a:d0:0f:bd:21:07:05:1a:1f:73:e3:53:12:89:
78:a5:99:9c:3a:91:43:4c:60:30:e7:47:6a:78:05:
c8:be:ba:e8:eb:28:39:60:31:8a:50:5b:11:af:8f:
2b:99:82:89:e2:7f:87:92:5a:13:c2:c1:95:9f:60:
01:ab:a4:bb:4a:15:4e:a2:df:75:e4:b7:75:2f:72:
f2:ac:fc:19:33:9a:54:fd:7b:87:6f:ab:20:dd:c5:
42:7c:2c:6d:83:76:5c:03:04:35:ef:fc:15:d1:c4:
81:19:d3:18:9f:95:88:a6:a8:73:fe:17:4a:10:00:
e3:6f:e9:31:a2:2c:94:f8:14:0f:b9:40:1b:bb:5e:
f4:e8:d6:1d:58:cc:bd:65:35:63:62:01:80:87:09:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:E9:7D:42:EC:D7:D9:8D:25:2A:3D:18:DB:BA:37:60:16:98:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceced83e-3a2e-3058-8ffc-46de481a75ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
75.89.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:6e:91:c7:97:43:8d:de:03:c8:23:8c:7f:20:cd:6d:ca:39:
e7:f6:a1:93:99:ce:6c:d3:8e:94:2e:d0:66:4b:07:0a:b8:1e:
84:4b:37:7e:fc:8e:6c:fa:6c:5c:6c:90:76:83:35:0e:30:9f:
44:86:d6:d9:d8:7a:12:44:6e:23:cf:0c:d3:d1:c1:51:38:60:
47:a0:2a:0d:6d:bb:b6:5d:8b:26:1f:06:f9:e7:07:e8:06:b3:
53:21:6e:60:86:b6:e3:fa:08:0f:43:ec:1f:20:1d:54:54:85:
1c:c0:87:50:6e:ea:69:73:a1:df:7c:f1:89:42:1e:4a:bf:92:
84:a0:34:00:d0:2c:36:a5:56:bf:ff:af:f7:87:28:b1:7f:1a:
4d:b6:fc:ec:4b:86:b9:5b:a8:94:94:87:83:19:a4:81:b5:15:
d0:96:d5:28:ab:dc:4a:cb:62:3d:07:84:75:e2:05:92:a2:e9:
75:0f:38:92:7a:c9:29:82:d5:b2:17:a7:b4:01:3e:5b:78:06:
53:01:b5:48:f4:72:61:11:8e:32:71:7e:cc:db:9c:d3:03:46:
0a:85:a2:c9:ab:31:02:39:b6:c9:60:82:4b:5b:3f:fc:a6:f4:
71:8e:2f:b5:0f:4c:1e:c2:d0:58:3f:78:c4:1b:dd:49:aa:34:
7b:b5:6e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mGu/bYJr8pRfaBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTdlODg1YTUtN2QwNC00N2M2LWI4Y2MtZTY3NTRiYzVjODk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NZUwgjOBYhVOBdUKPCLikrzRSZwZj0KaGG9
90AW/cswtI0rb6QFgueuI2NjtCCT2/7K8ki95wA6Bws1AeXcprTYX+DRpuvQzBeM
h8PCrV7S3aa3f8G9CLSYBQ4zn9fthWCx+5YBkn+jOtAPvSEHBRofc+NTEol4pZmc
OpFDTGAw50dqeAXIvrro6yg5YDGKUFsRr48rmYKJ4n+HkloTwsGVn2ABq6S7ShVO
ot915Ld1L3LyrPwZM5pU/XuHb6sg3cVCfCxtg3ZcAwQ17/wV0cSBGdMYn5WIpqhz
/hdKEADjb+kxoiyU+BQPuUAbu1706NYdWMy9ZTVjYgGAhwlNnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGqe6X1C7NfZjSUqPRjbujdgFphNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VjZWQ4M2UtM2EyZS0z
MDU4LThmZmMtNDZkZTQ4MWE3NWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApukceXQ43eA8gjjH8gzW3KOef2oZOZzmzTjpQu0GZLBwq4HoRLN378
jmz6bFxskHaDNQ4wn0SG1tnYehJEbiPPDNPRwVE4YEegKg1tu7ZdiyYfBvnnB+gG
s1MhbmCGtuP6CA9D7B8gHVRUhRzAh1Bu6mlzod988YlCHkq/koSgNADQLDalVr//
r/eHKLF/Gk22/OxLhrlbqJSUh4MZpIG1FdCW1Sir3ErLYj0HhHXiBZKi6XUPOJJ6
ySmC1bIXp7QBPlt4BlMBtUj0cmERjjJxfszbnNMDRgqFosmrMQI5tslggktbP/ym
9HGOL7UPTB7C0Fg/eMQb3UmqNHu1bnA=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:33 2024 by rpki-client on console-ams.rpki-client.org