Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3a168be-133c-386b-9072-8e9e726de7ab.roa
File: f3a168be-133c-386b-9072-8e9e726de7ab.roa (raw, json)
Hash identifier: I3a3JBRZCYNO9JTFAjWDFmeMtjwFcOOy0G30tXgbgNM=
Subject key identifier: 3A:7B:66:50:38:C6:CF:F0:A0:37:6E:F6:22:7D:C1:DD:15:CB:E6:C2
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D66178731DD09D3B2C533D380
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3a168be-133c-386b-9072-8e9e726de7ab.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 71.28.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:17:87:31:dd:09:d3:b2:c5:33:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=77f36485-9193-4616-92bc-fe45ac122c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:1c:e1:3d:de:a4:b0:bb:9f:59:05:3d:46:
de:b0:26:6b:3f:84:61:2d:83:d2:4d:0e:8f:17:31:
ff:57:75:af:b1:9c:29:72:72:69:c7:2b:04:1e:24:
6c:fe:c8:00:6f:37:56:7f:e0:62:3a:14:5b:be:1d:
c1:23:82:b5:77:a2:11:83:1d:d8:46:a8:49:95:58:
5d:6d:8f:6e:52:f5:63:bc:e9:ca:96:a8:cd:73:7a:
3d:15:29:0d:c0:c0:fd:5d:9f:a3:9b:14:b2:e8:71:
f6:89:4a:a1:7d:a1:37:31:92:c9:25:cd:26:34:92:
41:09:fa:3b:0b:36:a9:0e:f1:2c:73:f7:65:b1:0c:
9b:5f:4f:c2:dd:cf:60:4b:cc:0a:01:c2:ef:b9:8c:
4a:8f:c6:ca:00:bf:7f:0b:ff:9a:dc:fb:11:4e:cb:
b9:a5:00:46:22:20:80:94:02:c0:07:6c:5b:da:4a:
a4:85:ce:31:14:a9:7b:b4:47:96:8a:c0:79:ff:07:
e7:5e:42:dd:cc:3d:67:d9:84:1a:4e:0f:62:bf:f2:
b1:4b:b1:b2:30:58:e7:2f:7f:20:34:8b:01:12:29:
9b:4e:53:ab:8e:0b:60:c9:2f:c1:0d:62:0a:de:72:
54:a5:12:b8:df:bd:0b:19:c8:66:6d:7d:c2:23:2e:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:66:50:38:C6:CF:F0:A0:37:6E:F6:22:7D:C1:DD:15:CB:E6:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f3a168be-133c-386b-9072-8e9e726de7ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
71.28.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:86:71:4d:48:d1:a3:6d:d9:bd:68:3e:d1:2c:c3:1e:9b:84:
90:a5:d9:e9:0d:9a:e7:0f:40:cd:72:bc:aa:60:f5:b7:d1:49:
f4:05:02:b8:7e:cf:0a:fb:df:f2:55:a5:6b:16:c3:fa:ea:4d:
3e:d4:b4:12:8f:ac:ce:af:53:55:1e:d0:88:d4:ed:6e:db:83:
2d:19:58:d1:11:ce:f1:b6:48:d2:14:06:f8:de:f0:af:36:f8:
3d:e1:d3:59:07:00:6d:30:3f:ef:ee:5e:ba:ae:86:04:e6:50:
d5:40:15:23:32:22:c6:04:5d:c8:09:3c:27:33:4c:1f:f7:f3:
6f:25:76:a8:a7:59:29:42:45:0d:13:42:c5:bc:aa:89:07:0f:
42:54:29:d3:fc:ea:18:08:54:d1:59:36:e7:d7:01:69:23:48:
0f:86:18:fa:b6:01:58:d6:be:60:22:f9:e7:e3:43:da:a8:f5:
23:fc:a3:23:44:0b:fd:42:a5:4c:7b:07:ce:09:38:4e:84:26:
b7:99:81:fa:05:d5:8d:9c:c9:b1:dc:ba:09:07:8e:12:f2:5c:
21:a8:ec:ba:88:29:f3:36:ac:a9:f5:71:77:6e:50:5e:81:37:
68:d5:a9:80:43:38:cd:04:ce:94:c3:df:26:80:ce:8e:10:d0:
bf:65:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:36 2024 by rpki-client on console-ams.rpki-client.org