Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/0f5da008-5b70-3bf2-8895-d99176144b04.roa
File: 0f5da008-5b70-3bf2-8895-d99176144b04.roa (raw, json)
Hash identifier: AOczwdXE4PL/CymnccQA2m7htD1LM6hHWfQOPyVhlEY=
Subject key identifier: E5:AD:DC:78:B9:1C:8F:D3:D9:F7:1C:34:C9:5A:36:D8:64:13:3E:04
Certificate issuer: /CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Certificate serial: 010D0C9F432858422402FB6599D08A9DA77DEA00
Authority key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/0f5da008-5b70-3bf2-8895-d99176144b04.roa
Signing time: Wed 07 Jun 2023 13:00:18 +0000
ROA not before: Wed 07 Jun 2023 13:00:18 +0000
ROA not after: Tue 05 Sep 2023 13:00:18 +0000
asID: 53667
IP address blocks: 23.129.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:24:02:fb:65:99:d0:8a:9d:a7:7d:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf
Validity
Not Before: Jun 7 13:00:18 2023 GMT
Not After : Sep 5 13:00:18 2023 GMT
Subject: CN=cd14a8c8-f6c8-43c3-9625-bbbeb7b70d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:e7:d4:63:cd:a5:ec:3b:57:24:e9:f2:50:
12:17:c1:35:13:f2:a1:ef:6c:2a:fc:06:d5:09:e1:
b1:21:bc:a9:e2:c4:c9:c4:d2:3e:0b:d6:c9:04:a4:
a7:94:aa:62:ef:76:99:4e:03:80:4d:4d:6d:0b:bf:
75:00:f5:4a:84:14:2d:5f:2c:7b:94:23:eb:09:5b:
48:34:86:b1:27:30:fb:f8:d5:82:0b:7f:9c:8f:d5:
a9:30:d3:ce:cd:5c:62:ac:a8:2b:3d:33:da:49:4b:
31:57:e5:0d:c1:e3:bb:db:f5:4a:02:59:ae:ad:cc:
67:c9:43:92:bf:aa:42:43:46:70:87:ca:01:11:c8:
fd:ae:b8:6b:9d:3b:06:e3:4c:d2:4d:6a:8a:7d:e2:
a3:95:4d:14:42:ef:91:91:a1:68:ff:f3:1e:93:58:
88:21:08:c4:4a:ea:23:e9:de:68:88:32:50:1d:69:
2b:9e:ce:05:c5:41:e6:a2:91:40:92:fd:8c:17:fd:
01:dd:38:24:cb:a5:2a:90:e5:c7:31:73:9a:78:9e:
86:58:10:18:2b:bc:98:2e:0e:e8:d6:47:b8:6e:46:
e1:1c:bb:0a:4b:7c:95:31:fd:c1:15:fc:25:60:54:
f4:88:f4:e9:c5:b9:2a:53:c9:da:8a:76:1c:b0:d2:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AD:DC:78:B9:1C:8F:D3:D9:F7:1C:34:C9:5A:36:D8:64:13:3E:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/0f5da008-5b70-3bf2-8895-d99176144b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.crl
X509v3 Authority Key Identifier:
keyid:9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:04:df:b5:c9:64:ce:f2:30:d4:7a:72:c1:f2:49:1e:20:8e:
f7:5d:37:1a:64:3e:fe:dc:fd:c3:70:f5:a6:24:f7:ab:1b:8a:
32:af:22:ca:c3:a2:69:3c:b9:4a:df:6c:f3:6e:bd:44:75:dd:
e7:3c:ec:69:81:4f:d4:de:1c:16:d5:ce:c2:ae:47:77:5d:b8:
7e:5f:c3:c2:6e:4e:25:d9:69:63:fe:6d:76:aa:e9:94:cb:2b:
41:90:92:12:68:3d:15:97:4c:8e:ee:c9:a9:2e:2f:dc:58:ce:
5d:1e:6e:ba:43:74:e9:18:9a:1e:97:ec:4d:1f:79:58:fd:53:
8e:bc:54:1a:8c:56:fa:45:26:cf:17:ec:9d:cd:a3:83:d6:73:
1f:2a:6d:85:84:9b:df:d4:5c:50:a9:15:ee:be:1c:f1:89:ed:
96:d6:f1:da:57:78:da:7d:ef:d7:26:b5:ba:cd:f2:ef:19:63:
e2:bd:fb:a3:0c:ba:d6:10:fe:7a:66:12:22:6a:86:59:98:8a:
67:ef:b0:4e:37:d2:bf:35:c4:0a:4f:08:8d:0a:58:59:ce:c2:
40:89:e1:5a:0b:5f:42:aa:27:00:08:bf:8f:f5:0e:86:47:29:
92:b8:41:b3:ac:f5:7a:75:f6:bb:85:f1:43:69:f3:4a:7c:0e:
bc:b5:64:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIkAvtlmdCKnad96gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRk
Y2JmMB4XDTIzMDYwNzEzMDAxOFoXDTIzMDkwNTEzMDAxOFowLzEtMCsGA1UEAxMk
Y2QxNGE4YzgtZjZjOC00M2MzLTk2MjUtYmJiZWI3YjcwZDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/n1GPNpew7VyTp8lASF8E1E/Kh72wq/AbV
CeGxIbyp4sTJxNI+C9bJBKSnlKpi73aZTgOATU1tC791APVKhBQtXyx7lCPrCVtI
NIaxJzD7+NWCC3+cj9WpMNPOzVxirKgrPTPaSUsxV+UNweO72/VKAlmurcxnyUOS
v6pCQ0Zwh8oBEcj9rrhrnTsG40zSTWqKfeKjlU0UQu+RkaFo//Mek1iIIQjESuoj
6d5oiDJQHWkrns4FxUHmopFAkv2MF/0B3Tgky6UqkOXHMXOaeJ6GWBAYK7yYLg7o
1ke4bkbhHLsKS3yVMf3BFfwlYFT0iPTpxbkqU8nainYcsNKZWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWt3Hi5HI/T2fccNMlaNthkEz4EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3
MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMGY1ZGEwMDgtNWI3MC0z
YmYyLTg4OTUtZDk5MTc2MTQ0YjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVhNzI2MDUtOTliYy00YzRiLTk5
NWUtYzAxYTM2ODRkY2JmLzM1YTcyNjA1LTk5YmMtNGM0Yi05OTVlLWMwMWEzNjg0
ZGNiZi5jcmwwHwYDVR0jBBgwFoAUnSedZlfExijXDhO+lc06f9crhFAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFh
MzY4NGRjYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4H4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFME37XJZM7yMNR6csHySR4gjvddNxpkPv7c/cNw9aYk96sbijKvIsrD
omk8uUrfbPNuvUR13ec87GmBT9TeHBbVzsKuR3dduH5fw8JuTiXZaWP+bXaq6ZTL
K0GQkhJoPRWXTI7uyakuL9xYzl0ebrpDdOkYmh6X7E0feVj9U468VBqMVvpFJs8X
7J3No4PWcx8qbYWEm9/UXFCpFe6+HPGJ7ZbW8dpXeNp979cmtbrN8u8ZY+K9+6MM
utYQ/npmEiJqhlmYimfvsE430r81xApPCI0KWFnOwkCJ4VoLX0KqJwAIv4/1DoZH
KZK4QbOs9Xp19ruF8UNp80p8Dry1ZBU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:31 2023 by rpki-client on console-ams.rpki-client.org