Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fda3d2f5-2e11-3e0c-a320-2f5afbdf3220.roa
File: fda3d2f5-2e11-3e0c-a320-2f5afbdf3220.roa (raw, json)
Hash identifier: sDdhdTWwpV4Se1Ioj3nTToejlqaBxp0fxNFTlu5PvhU=
Subject key identifier: F2:5C:6B:1D:38:47:EC:43:5D:85:72:8E:10:B1:30:90:79:87:57:1C
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583DB440E74BD04986C8E3367200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fda3d2f5-2e11-3e0c-a320-2f5afbdf3220.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 18 Apr 2028 04:00:00 +0000
asID: 7029
IP address blocks: 173.189.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b4:40:e7:4b:d0:49:86:c8:e3:36:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : Apr 18 04:00:00 2028 GMT
Subject: CN=e3dcbabe-ddd4-4363-881b-98a4a44101a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:46:f9:75:f2:f3:76:43:b9:7a:67:cd:86:3d:
c5:88:66:63:13:89:a1:11:aa:db:3b:ac:1b:b0:ba:
24:89:b4:6b:6c:cc:7b:11:ba:76:4b:8e:09:c5:a6:
a5:ba:df:9e:6a:41:12:48:e4:1e:60:a1:d4:9b:f4:
d5:1d:2c:0e:47:ac:48:0e:5e:14:18:62:3f:b9:da:
e1:20:6a:7f:4e:9f:2e:cc:78:8f:40:89:24:eb:5d:
73:95:5e:65:7a:4d:67:52:cd:ff:33:54:e2:ec:b8:
69:8d:27:4a:42:ee:39:af:fa:5c:2e:7e:5a:bc:da:
3b:9f:05:cf:b3:82:7f:9d:b9:52:cb:3c:80:2c:1e:
5c:a5:64:9d:de:bd:f2:c4:99:b3:2f:5c:f6:c2:28:
a7:32:ed:df:75:7c:d1:d8:5a:fc:28:f0:15:f1:b6:
7a:79:f7:4a:dd:53:ec:67:84:64:cd:d3:62:bf:ed:
5b:ba:54:a7:aa:e2:ba:66:90:59:88:a4:9b:62:96:
79:b6:33:29:2f:94:d0:b0:64:0c:e8:37:4c:5f:33:
bb:cf:9b:29:de:9d:e1:4a:e8:d4:25:be:1d:eb:86:
3f:43:7d:62:0e:a9:29:2e:74:e2:ad:0b:1d:82:eb:
2c:a9:12:ec:62:0c:bb:99:41:5f:14:d0:5d:ca:63:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:6B:1D:38:47:EC:43:5D:85:72:8E:10:B1:30:90:79:87:57:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fda3d2f5-2e11-3e0c-a320-2f5afbdf3220.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
173.189.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b0:20:aa:e8:6c:cf:66:5c:4a:7e:c6:7f:58:d3:ca:eb:89:
4d:d3:63:6b:ff:79:5c:53:9c:6e:fd:a6:4a:c9:89:b2:0f:9a:
04:75:bd:4d:d7:83:58:f9:fa:a4:fc:22:2d:77:30:5e:46:f7:
f9:1a:0f:ec:ec:53:c7:a4:04:30:ac:1b:b0:77:57:d4:3a:f2:
10:46:a2:bb:3f:8a:18:fb:69:2e:79:a5:b2:c3:ef:be:60:82:
bb:48:9e:26:c7:80:0a:d4:9a:3c:23:0a:74:42:eb:fe:aa:2b:
d5:94:7c:05:5e:ad:66:17:5d:4b:9f:7c:e6:e1:90:50:55:05:
bf:cc:4e:71:0d:04:c5:9c:9f:1e:e5:5c:f6:a2:33:66:12:c8:
04:a7:50:3f:55:aa:1e:ab:c8:e8:72:b4:d6:35:d4:0f:cb:17:
7a:21:d3:fc:bb:11:9c:db:9e:5d:a5:3f:f1:9d:16:ed:27:09:
fc:a4:e0:e1:cf:7d:cd:e5:4f:4d:56:da:64:5e:ac:a5:7e:db:
9a:ca:8b:43:2b:0d:ea:a8:47:9a:34:91:35:6f:ef:54:60:2b:
c4:0a:8f:a2:65:27:82:52:b3:6a:78:4f:a7:b5:90:5b:e2:67:
d8:57:57:3c:9c:8f:dd:a7:0e:30:21:ba:49:eb:bd:fa:d8:c3:
dd:8e:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 08:48:36 2024 by rpki-client on console-ams.rpki-client.org