Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/36b5c728-f5fa-3a85-9c84-7de27917a102.roa
File: 36b5c728-f5fa-3a85-9c84-7de27917a102.roa (raw, json)
Hash identifier: VQEvEse3J4+NZ8fI+0yxdhcsHx5I5W20FEpS1UoydTo=
Subject key identifier: 54:20:D5:C1:74:18:91:E4:00:C0:D4:B6:08:FC:D9:55:D4:AE:F8:E1
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328583DB6746BB1C5C9E379616A2E00
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/36b5c728-f5fa-3a85-9c84-7de27917a102.roa
Signing time: Wed 07 Oct 2020 14:30:11 +0000
ROA not before: Wed 07 Oct 2020 14:30:11 +0000
ROA not after: Tue 30 Jul 2024 04:00:00 +0000
asID: 23470
IP address blocks: 163.123.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b6:74:6b:b1:c5:c9:e3:79:61:6a:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Oct 7 14:30:11 2020 GMT
Not After : Jul 30 04:00:00 2024 GMT
Subject: CN=95404be1-1b02-44c9-b040-d3ae024e0109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:ee:f8:d2:75:70:c1:ff:f7:3d:19:aa:27:
6e:b9:03:fb:8e:25:79:5e:16:0b:98:28:0d:84:44:
b0:95:ec:a6:bc:39:fd:2a:27:65:31:3c:64:cf:59:
49:c7:be:4a:b0:a1:be:a0:50:70:80:d6:d8:8b:3f:
33:b1:53:05:21:60:87:b6:03:cf:90:bb:5b:3f:b8:
e9:7e:99:d1:6a:87:26:33:3f:fe:5f:8a:b5:13:83:
83:22:0a:89:4d:c8:ef:08:32:1c:e4:5b:9f:1a:71:
00:fc:a6:25:4d:ab:d6:77:a1:a7:49:61:68:fe:fe:
f2:a0:ef:72:be:bb:05:ea:18:6e:af:0a:6f:9b:af:
f7:09:f8:46:1c:83:89:e2:2a:0b:28:9f:f1:88:be:
92:61:ec:ee:8e:77:95:09:c2:f3:19:cc:69:14:22:
f2:fe:4b:9e:5b:19:32:df:06:fc:89:18:87:bd:3f:
4d:bb:9e:c9:30:17:8c:1a:d5:4b:39:20:55:be:3e:
b2:5e:a5:b4:43:fb:7f:b1:d9:e3:c8:43:7c:e1:5d:
bd:c4:25:42:83:e2:62:60:93:fe:bf:e1:02:16:f9:
b0:50:28:44:e8:d3:56:32:fb:77:b9:d2:fa:76:48:
ed:c9:01:a8:67:cd:29:95:c1:ed:73:cb:bb:bc:9a:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:D5:C1:74:18:91:E4:00:C0:D4:B6:08:FC:D9:55:D4:AE:F8:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/36b5c728-f5fa-3a85-9c84-7de27917a102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:83:01:9c:08:9f:0d:68:97:46:71:06:07:19:93:83:90:5a:
96:8a:45:9d:7b:90:f5:20:52:12:dc:cf:d6:71:47:1f:6c:53:
eb:fa:46:52:1f:40:af:e5:53:bb:cb:51:9b:20:f9:c2:97:a5:
88:bd:9e:3c:ac:4c:1f:73:b6:84:c0:cb:46:cd:3b:16:a5:90:
8e:75:3c:a4:b0:be:32:de:06:92:8e:f6:fe:f7:47:e5:ae:04:
4c:62:8a:84:97:52:8b:40:d6:25:12:12:b7:d6:d3:54:f7:61:
82:5b:68:5e:94:f9:7c:0f:16:69:0c:eb:29:3b:ea:e0:af:fc:
97:35:e8:1a:a4:2b:bc:ef:c9:e6:dc:ae:3c:21:45:c1:27:ba:
75:94:d5:83:9e:f8:2d:62:54:ed:2c:8c:91:ff:65:92:58:5b:
a8:af:6a:80:42:47:02:03:fd:2c:b9:09:3d:4c:19:7d:4c:8c:
94:6b:11:e0:8e:60:16:9c:e5:e0:e1:9c:d8:91:86:94:0f:69:
6d:3b:b3:3d:22:5e:23:20:92:49:3f:cd:51:db:2e:36:33:8f:
26:b3:f0:98:eb:97:80:7a:7d:0b:d9:2d:ae:5b:05:62:7c:5b:
6c:00:a3:69:44:23:61:de:ce:14:31:2c:05:ee:b7:a9:8d:1a:
0c:45:3b:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD22dGuxxcnjeWFqLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTIwMTAwNzE0MzAxMVoXDTI0MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTU0MDRiZTEtMWIwMi00NGM5LWIwNDAtZDNhZTAyNGUwMTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphfu+NJ1cMH/9z0ZqiduuQP7jiV5XhYLmCgN
hESwleymvDn9KidlMTxkz1lJx75KsKG+oFBwgNbYiz8zsVMFIWCHtgPPkLtbP7jp
fpnRaocmMz/+X4q1E4ODIgqJTcjvCDIc5FufGnEA/KYlTavWd6GnSWFo/v7yoO9y
vrsF6hhurwpvm6/3CfhGHIOJ4ioLKJ/xiL6SYezujneVCcLzGcxpFCLy/kueWxky
3wb8iRiHvT9Nu57JMBeMGtVLOSBVvj6yXqW0Q/t/sdnjyEN84V29xCVCg+JiYJP+
v+ECFvmwUChE6NNWMvt3udL6dkjtyQGoZ80plcHtc8u7vJowNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQg1cF0GJHkAMDUtgj82VXUrvjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvMzZiNWM3MjgtZjVmYS0z
YTg1LTljODQtN2RlMjc5MTdhMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3uaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWDAZwInw1ol0ZxBgcZk4OQWpaKRZ17kPUgUhLcz9ZxRx9sU+v6RlIf
QK/lU7vLUZsg+cKXpYi9njysTB9ztoTAy0bNOxalkI51PKSwvjLeBpKO9v73R+Wu
BExiioSXUotA1iUSErfW01T3YYJbaF6U+XwPFmkM6yk76uCv/Jc16BqkK7zvyebc
rjwhRcEnunWU1YOe+C1iVO0sjJH/ZZJYW6ivaoBCRwID/Sy5CT1MGX1MjJRrEeCO
YBac5eDhnNiRhpQPaW07sz0iXiMgkkk/zVHbLjYzjyaz8Jjrl4B6fQvZLa5bBWJ8
W2wAo2lEI2HezhQxLAXut6mNGgxFO4g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:29 2023 by rpki-client on console-fra.rpki-client.org