Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/c47d7fdd-fc6b-3ef5-9eaa-169a674529ad.roa
File: c47d7fdd-fc6b-3ef5-9eaa-169a674529ad.roa (raw, json)
Hash identifier: T1HAcTVLQtLShqVhW2plTMe3VoEE8IwNbGKXjh69IgQ=
Subject key identifier: EA:4D:55:A4:DB:9D:6C:70:C0:B4:03:07:44:5F:1B:60:70:C2:1E:1E
Certificate issuer: /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial: 010D0C9F4328584515E5931FA3D7234F8FA211F0
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/c47d7fdd-fc6b-3ef5-9eaa-169a674529ad.roa
Signing time: Sun 03 Mar 2024 14:00:31 +0000
ROA not before: Sun 03 Mar 2024 14:00:31 +0000
ROA not after: Sat 01 Jun 2024 13:00:31 +0000
asID: 54681
IP address blocks: 23.133.249.0/24 maxlen: 32
23.133.250.0/24 maxlen: 32
23.133.251.0/24 maxlen: 32
23.133.254.0/24 maxlen: 32
23.133.255.0/24 maxlen: 32
23.133.248.0/24 maxlen: 32
23.133.252.0/24 maxlen: 32
23.133.253.0/24 maxlen: 32
2602:fba2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 04:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:15:e5:93:1f:a3:d7:23:4f:8f:a2:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Validity
Not Before: Mar 3 14:00:31 2024 GMT
Not After : Jun 1 13:00:31 2024 GMT
Subject: CN=dcfa777d-c761-4522-aef4-75098f6bbd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:8f:69:af:43:f5:e2:c7:ff:4b:1e:17:2d:
85:0e:59:34:db:e5:24:a5:21:74:4d:bb:b1:5d:94:
37:63:c7:a7:8c:a4:27:6c:0e:b0:e3:ba:a9:9d:6b:
f9:0e:2f:7e:dd:be:30:62:ac:8d:aa:79:ec:fe:bb:
fa:16:81:63:98:e3:30:44:dd:56:79:cb:8d:21:1e:
82:46:c5:65:a5:6a:62:f0:96:2d:38:5f:e4:0f:3a:
bf:b4:4d:14:19:d7:b3:de:34:8f:85:db:b7:e2:20:
8f:8a:85:f8:15:0a:8c:d5:65:82:f2:64:b7:fa:21:
cf:09:02:77:bb:0b:ff:69:a1:22:9c:99:cd:fa:ee:
b3:b1:5a:7d:30:bc:1a:5e:28:2b:fd:f5:25:ff:ea:
46:4a:fd:ac:5b:d8:36:4d:61:45:82:48:2f:57:d5:
45:d5:52:41:e4:d6:cf:ef:22:69:5e:1e:b0:8c:d5:
c8:11:bf:c5:74:a4:c2:10:62:0f:84:a1:60:37:a4:
79:ca:e1:04:81:89:09:7d:e7:4c:89:5e:55:97:db:
2b:63:be:b2:96:cb:86:8d:38:d2:97:78:e9:76:f0:
15:53:dc:48:fe:e5:a1:bc:e1:10:ae:19:fa:6b:f8:
f0:21:f4:37:16:89:1e:49:2e:0d:23:74:e5:f4:1f:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4D:55:A4:DB:9D:6C:70:C0:B4:03:07:44:5F:1B:60:70:C2:1E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/c47d7fdd-fc6b-3ef5-9eaa-169a674529ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
X509v3 Authority Key Identifier:
keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.248.0/21
IPv6:
2602:fba2::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:01:c7:5d:a8:c9:65:10:06:7e:62:23:aa:73:00:cf:0a:15:
4f:68:83:bf:64:05:f4:f2:8f:8d:67:53:96:c9:50:d9:5e:f4:
0b:e3:15:55:e3:12:21:d3:9a:30:da:28:96:c2:91:4f:9c:1e:
01:67:79:43:33:d5:78:07:67:06:85:dc:66:c8:06:cb:cf:79:
ce:42:4c:fc:13:7d:f9:95:aa:74:3c:58:9a:cc:58:1d:09:7a:
94:d7:4b:00:77:46:7b:47:3b:12:27:fa:88:a5:b5:42:d5:cc:
6c:bd:b6:d1:b2:38:cc:15:b3:5a:70:3e:7d:92:fb:3d:15:71:
ad:8a:b2:f7:8e:65:76:c3:31:9e:71:b5:00:f5:b0:27:1f:09:
69:65:10:b9:47:e5:79:0e:71:c8:21:26:1b:d7:d4:91:f9:16:
88:b3:c6:97:96:f0:61:1d:ae:ce:8d:d6:1d:8b:69:77:71:08:
39:82:ba:2e:6f:e2:a7:59:3c:4d:3e:e1:01:ad:ee:2d:76:39:
cf:c6:bc:7d:12:1f:51:86:f1:70:77:ca:aa:02:87:f8:11:ae:
8a:b2:8a:d6:79:b2:d0:82:44:03:fd:16:56:71:0b:ed:7b:16:
3c:cb:02:bd:49:47:14:be:fc:eb:ba:00:ce:ed:54:31:38:8b:
de:51:10:ba
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEUV5ZMfo9cjT4+iEfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdjMmM5YTYtODk4NC00YzI1LTkxMzYtNmE4Y2E3ZDNm
NzUwMB4XDTI0MDMwMzE0MDAzMVoXDTI0MDYwMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZGNmYTc3N2QtYzc2MS00NTIyLWFlZjQtNzUwOThmNmJiZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHGPaa9D9eLH/0seFy2FDlk02+UkpSF0Tbux
XZQ3Y8enjKQnbA6w47qpnWv5Di9+3b4wYqyNqnns/rv6FoFjmOMwRN1WecuNIR6C
RsVlpWpi8JYtOF/kDzq/tE0UGdez3jSPhdu34iCPioX4FQqM1WWC8mS3+iHPCQJ3
uwv/aaEinJnN+u6zsVp9MLwaXigr/fUl/+pGSv2sW9g2TWFFgkgvV9VF1VJB5NbP
7yJpXh6wjNXIEb/FdKTCEGIPhKFgN6R5yuEEgYkJfedMiV5Vl9srY76ylsuGjTjS
l3jpdvAVU9xI/uWhvOEQrhn6a/jwIfQ3FokeSS4NI3Tl9B+eAQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFOpNVaTbnWxwwLQDB0RfG2Bwwh4eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mN2My
YzlhNi04OTg0LTRjMjUtOTEzNi02YThjYTdkM2Y3NTAvYzQ3ZDdmZGQtZmM2Yi0z
ZWY1LTllYWEtMTY5YTY3NDUyOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjdjMmM5YTYtODk4NC00YzI1LTkx
MzYtNmE4Y2E3ZDNmNzUwL2Y3YzJjOWE2LTg5ODQtNGMyNS05MTM2LTZhOGNhN2Qz
Zjc1MC5jcmwwHwYDVR0jBBgwFoAUC2u5YG7aKsiSDncnjFrS72hiJEcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mN2MyYzlhNi04OTg0LTRjMjUtOTEzNi02YThj
YTdkM2Y3NTAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDF4X4MA0E
AgACMAcDBQAmAvuiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBABEBx12oyWUQBn5iI6pzAM8KFU9og79kBfTy
j41nU5bJUNle9AvjFVXjEiHTmjDaKJbCkU+cHgFneUMz1XgHZwaF3GbIBsvPec5C
TPwTffmVqnQ8WJrMWB0JepTXSwB3RntHOxIn+oiltULVzGy9ttGyOMwVs1pwPn2S
+z0Vca2KsveOZXbDMZ5xtQD1sCcfCWllELlH5XkOccghJhvX1JH5FoizxpeW8GEd
rs6N1h2LaXdxCDmCui5v4qdZPE0+4QGt7i12Oc/GvH0SH1GG8XB3yqoCh/gRroqy
itZ5stCCRAP9FlZxC+17FjzLAr1JRxS+/Ou6AM7tVDE4i95RELo=
-----END CERTIFICATE-----
Generated at Wed Apr 10 05:26:28 2024 by rpki-client on console-ams.rpki-client.org