Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8d1ce3-f4e6-395b-abd0-e0cb432e5344.roa
File: df8d1ce3-f4e6-395b-abd0-e0cb432e5344.roa (raw, json)
Hash identifier: FwWVyTPVp/+tE27Nw8FWIyhws6fBrV5h6EUfXeaPDt0=
Subject key identifier: 0F:DA:DA:06:62:25:43:69:A2:CF:03:60:41:FF:26:FB:01:68:F6:E7
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D6618D4D046A4411CC1186700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8d1ce3-f4e6-395b-abd0-e0cb432e5344.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.30.104.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 05 Jan 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:18:d4:d0:46:a4:41:1c:c1:18:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=1faff31f-aec6-4e23-bc0d-759d48b638b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:e5:56:47:1e:fd:1e:f1:26:7d:eb:9c:fa:
bf:7d:cc:d6:1b:42:61:0c:62:7a:e3:df:44:bf:0c:
c7:49:fa:e5:bd:c3:1c:a1:40:2e:a2:86:05:7c:15:
02:fa:f0:7d:54:5c:6d:04:f4:d1:c2:be:16:bf:8a:
d8:45:e2:3b:e7:fe:c8:aa:09:fb:1d:d5:16:8b:89:
78:86:db:a5:a5:a0:03:b7:db:1b:6e:26:05:19:dc:
34:f2:54:cf:ed:34:a0:ea:3c:c3:6f:a2:03:16:38:
bd:ee:91:99:b0:09:f9:ff:5a:6a:e7:85:3a:c1:cd:
b4:2c:cc:bf:53:4a:76:f8:f3:64:f4:d2:ed:f2:b0:
94:d6:23:af:cd:40:19:49:26:ce:34:4d:55:15:7b:
48:62:3e:3d:8e:7d:b3:73:51:8f:34:7c:84:b6:5c:
ef:0b:27:f0:84:70:16:37:46:0f:f7:5e:32:d4:0f:
7d:79:8a:42:45:0e:0d:e7:c1:ae:ee:2c:1d:0a:99:
f2:24:0d:fa:17:e8:ec:91:9f:aa:53:0f:88:36:9a:
20:a0:02:45:9c:07:50:be:29:c3:fb:58:8f:b7:6c:
de:2d:86:ad:da:21:19:95:82:80:96:61:be:f2:81:
9a:6b:0f:5a:25:2a:51:7c:d0:a4:df:3e:54:15:99:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:DA:06:62:25:43:69:A2:CF:03:60:41:FF:26:FB:01:68:F6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df8d1ce3-f4e6-395b-abd0-e0cb432e5344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.30.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:87:97:37:b9:7f:7a:82:95:ed:d2:8b:f6:96:54:90:6a:98:
f3:5c:2a:0e:5b:59:e3:34:e4:48:b5:e9:f1:25:08:a5:62:5a:
a7:37:93:d7:98:fe:7f:2f:42:e1:04:a7:9a:1b:32:43:8a:66:
e2:ef:52:67:41:51:2c:8d:25:59:51:f0:55:1f:bf:a9:35:ce:
9c:a6:e0:07:a5:98:ab:96:e1:f4:4e:b3:20:a7:48:c4:67:4e:
57:f4:35:98:9c:d0:64:26:90:43:5f:a9:7e:78:13:3b:0b:1d:
9a:0d:a3:19:18:24:46:d6:59:b9:68:ca:21:54:02:af:50:3c:
38:54:be:04:03:60:0b:12:b5:cc:8c:f5:ee:df:fd:0b:b9:ef:
e2:e1:1d:69:a7:37:c0:ff:2b:1d:35:b2:90:52:75:37:88:db:
d8:66:ce:0d:13:9b:4e:c0:f1:dd:f1:26:9f:a9:ad:50:f1:ee:
1f:23:17:44:d5:89:f3:9f:be:93:29:bd:3d:f8:ca:25:2c:6f:
7c:03:d0:ce:33:b9:96:e4:ed:55:41:5a:27:4f:96:8b:58:e1:
fa:23:d4:da:0c:7c:72:65:03:c8:f8:75:8e:da:74:5e:f5:b6:
02:cd:c8:b7:b3:50:da:97:59:4a:8c:e8:1e:a8:26:8b:0f:54:
63:99:d1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:05 2025 by rpki-client