Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db64f163-adc2-39c9-9934-051a449be712.roa
File: db64f163-adc2-39c9-9934-051a449be712.roa (raw, json)
Hash identifier: UwNdTxwPtxFuu5G7BLr56DOM0rrofj1PlcL2WOjCdQs=
Subject key identifier: 6D:A8:9A:C1:67:2E:96:06:2C:B6:CA:C3:22:E9:B3:3F:D1:0A:4F:73
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D57E3A9DB00F22B915DDF9B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db64f163-adc2-39c9-9934-051a449be712.roa
Signing time: Thu 24 Mar 2022 04:00:00 +0000
ROA not before: Thu 24 Mar 2022 04:00:00 +0000
ROA not after: Thu 16 Mar 2028 04:00:00 +0000
asID: 7018
IP address blocks: 209.125.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:57:e3:a9:db:00:f2:2b:91:5d:df:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 24 04:00:00 2022 GMT
Not After : Mar 16 04:00:00 2028 GMT
Subject: CN=21376931-3395-4510-b5f2-821305d32242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:a3:a6:cd:8f:6d:44:7e:51:12:05:73:42:
1f:97:1c:23:82:22:34:3b:4e:4f:43:9a:1e:50:b6:
7b:d5:00:80:80:f3:d8:3a:ec:27:83:9b:14:dd:3d:
d1:e7:54:3f:a7:16:45:d3:bc:9a:d3:a2:7d:9c:a1:
38:ec:57:0b:44:e7:9c:e9:a4:bd:19:dc:4b:02:29:
aa:eb:5e:f1:06:e1:f0:c5:a6:65:72:78:2e:49:94:
d7:14:e9:71:3b:0a:68:1a:58:e2:94:68:ba:c5:fb:
75:9b:f3:4c:fb:8f:a9:cd:a1:96:3d:6f:f5:a1:d6:
54:1d:13:1c:ec:61:22:9a:5f:dc:e4:be:e3:5d:a9:
dd:fd:41:dd:83:b8:c9:30:53:23:15:96:fb:b8:1b:
20:c6:a6:6c:ef:85:47:e8:05:91:c1:92:4c:77:30:
c0:b6:dd:27:6f:dc:df:46:ac:25:5c:e1:ab:cf:f1:
d1:40:30:38:99:84:1a:03:6b:96:10:07:88:dd:cc:
a6:63:9b:01:05:05:bc:1b:b6:3c:74:88:fb:8f:f8:
93:82:b2:13:98:2f:33:0f:1e:3f:26:a4:c7:bb:9f:
03:86:5e:ad:81:08:4f:78:58:1c:7c:a2:2f:3e:35:
6d:74:ce:05:12:74:fa:48:fb:23:09:73:ac:b2:86:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A8:9A:C1:67:2E:96:06:2C:B6:CA:C3:22:E9:B3:3F:D1:0A:4F:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db64f163-adc2-39c9-9934-051a449be712.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
209.125.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:bd:27:55:cb:cb:30:87:c3:4f:73:94:52:e2:1b:bb:f8:df:
6b:1b:6d:dd:fc:53:92:f9:69:ba:80:58:16:d8:20:f9:1f:19:
b4:a3:ac:c5:69:94:b1:37:6f:79:d7:93:0d:2f:b4:55:cf:62:
c8:28:22:5c:a6:4f:64:76:be:68:6d:2f:b1:8e:39:cf:10:65:
01:de:96:d1:c4:f3:32:79:ce:f7:8e:ef:6c:2e:bb:78:1b:c5:
b1:6f:a6:91:43:32:9a:a8:f6:1c:ba:0b:9e:5d:cc:0f:6b:e0:
29:bc:ca:55:d2:ca:fa:a2:8c:88:59:05:cc:d9:54:5b:de:26:
99:e6:a6:b6:6f:8d:c4:a4:60:27:d7:95:3c:51:89:b2:73:c8:
24:fc:66:9a:11:bb:67:36:72:be:5b:7b:e8:90:d2:19:f5:6f:
bd:90:7c:01:02:40:b9:83:59:25:a4:91:57:f3:ce:93:e7:7a:
76:bf:96:f4:f9:7f:d3:56:1a:88:0c:74:3f:99:85:42:83:b2:
9e:db:ff:2e:46:2a:3b:07:4d:0f:49:ba:09:0d:4a:b0:5b:93:
93:13:3a:3a:8d:5c:b8:10:88:6b:46:74:68:be:54:38:49:64:
c3:aa:73:c3:27:38:b7:a9:e9:19:14:c9:93:fb:d1:c6:34:38:
ea:a0:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 06:12:50 2024 by rpki-client on console-fra.rpki-client.org