Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea26ca04-ff71-3743-87f7-748274127fbe.roa
File: ea26ca04-ff71-3743-87f7-748274127fbe.roa (raw, json)
Hash identifier: jI3kmFPLsr0lSL/yCrWHDF+iLua2iq1EIPVROiDI1qo=
Subject key identifier: 85:2C:25:E8:56:C3:6F:54:3F:AD:80:93:B6:19:C3:AD:CE:A6:51:77
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661D6C1E4F0367B0DE1DB280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea26ca04-ff71-3743-87f7-748274127fbe.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.19.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1d:6c:1e:4f:03:67:b0:de:1d:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=f7e2d2a3-8236-4f50-905b-e40feb86c58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:57:2d:84:19:c5:85:00:de:a5:9e:89:ec:
b3:7b:ba:80:aa:2a:b4:47:c0:31:67:4d:fc:9a:21:
27:a9:fa:61:7a:16:a8:36:42:d6:71:a4:73:0d:cc:
03:1b:3b:cf:3a:63:57:6c:29:7c:ad:f6:c1:ac:d7:
a4:60:ab:f8:4e:d8:cb:9d:1f:42:12:7e:9f:ab:9e:
ac:8d:da:d6:ae:1a:f9:2d:3d:cd:d0:91:b8:bc:d5:
c5:40:41:c0:04:82:d8:11:e8:7c:21:8c:f2:17:cd:
de:5b:86:b4:23:09:0f:3e:29:66:f3:7b:16:08:97:
61:6e:4b:ef:ef:4d:08:90:ff:08:9f:07:3e:0c:e6:
62:3a:a6:b1:c7:75:de:ff:69:58:28:86:fc:f0:b8:
29:eb:31:9f:e4:3c:b6:5b:65:60:25:4e:63:df:5a:
2b:0d:05:3e:82:77:5f:56:d4:65:ac:47:93:86:1d:
3f:90:af:53:91:da:8a:41:88:0f:64:5f:54:40:c1:
b3:f1:ab:d7:a2:62:89:16:12:1f:c8:ed:ce:52:b5:
ed:20:5e:cf:a0:d7:49:ea:5d:cf:78:8d:fe:30:57:
ed:24:d7:d7:78:62:79:1b:57:0a:75:17:89:5b:d3:
4e:5d:26:d8:fc:a8:05:1b:4b:9d:d4:65:15:44:57:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:25:E8:56:C3:6F:54:3F:AD:80:93:B6:19:C3:AD:CE:A6:51:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea26ca04-ff71-3743-87f7-748274127fbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.19.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:99:65:c4:fc:97:e8:8e:1d:e9:15:c1:2b:2f:e4:67:80:bc:
d9:04:7c:a9:b5:c5:a7:fa:27:fc:2a:98:d0:cc:68:ed:3c:c5:
b4:e6:cd:97:0d:07:32:f4:81:3b:31:a2:10:3c:90:6b:82:25:
c0:0c:c5:be:14:b0:40:ff:56:0c:a3:a0:0f:f6:a8:83:10:86:
31:dc:cb:94:b2:b9:3f:93:25:c9:6e:ae:c7:1b:7d:b0:00:e8:
ba:82:b7:e4:bf:c7:fb:2c:16:29:e3:fd:c8:36:8b:d7:b8:a3:
cd:c8:9d:ec:0c:90:90:26:52:48:88:77:88:77:08:f6:c6:b4:
c0:90:4e:4b:73:3e:8e:07:5e:ef:11:7a:5a:5f:33:98:2e:9e:
7c:ae:44:06:17:10:79:42:7c:39:24:5d:dd:51:fa:d5:e6:ec:
a8:07:b1:8e:1f:b3:c2:aa:58:ea:31:50:d3:c6:b4:4e:0f:20:
54:5f:39:15:d9:42:51:e7:3a:28:43:f0:2f:e2:33:b9:ef:19:
5a:3c:07:e8:7b:e4:57:d0:de:88:f8:6d:c8:f3:53:75:01:9c:
ac:a2:ad:a0:a1:15:71:1b:ea:5f:5a:c1:be:83:af:63:0b:f7:
51:70:ba:36:e5:88:f4:98:7c:35:f5:d7:b0:d2:ae:a8:9d:e9:
b7:56:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:14 2024 by rpki-client on console-fra.rpki-client.org