Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4de3d1-0a9e-3f9e-afb6-6ef8c5468e2b.roa
File: 5c4de3d1-0a9e-3f9e-afb6-6ef8c5468e2b.roa (raw, json)
Hash identifier: bcmXzCq88s1GwXFlyB3ob9PxJAk48gzd0a2UA44VtAg=
Subject key identifier: B5:DA:60:2D:4D:E3:DB:23:40:C4:97:83:D2:A8:A5:07:76:4D:3C:A9
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D3F5FE4E1B9BCD5FC88292300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4de3d1-0a9e-3f9e-afb6-6ef8c5468e2b.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 07 Mar 2028 05:00:00 +0000
asID: 7029
IP address blocks: 205.147.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3f:5f:e4:e1:b9:bc:d5:fc:88:29:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Mar 7 05:00:00 2028 GMT
Subject: CN=72fc5f61-4207-4f6a-b8b6-a9096499c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:9c:dd:f1:c4:9f:c7:4c:18:5f:a1:ee:9c:
58:2e:96:b0:73:aa:9b:40:74:e6:ab:3d:75:5b:f1:
93:bf:98:96:37:6b:77:e4:bc:07:a5:70:3b:56:03:
b7:35:93:01:99:4d:7a:c6:fb:b1:d4:b3:80:60:49:
0e:5c:7c:49:0c:19:c2:ae:68:33:ff:6f:5b:76:52:
e1:12:7e:87:96:47:ce:61:bc:09:8d:06:55:c4:a2:
9d:f6:99:50:7c:ba:49:5c:e7:84:9d:ef:35:99:6a:
f9:43:07:ad:3a:31:64:29:52:3e:9b:a7:a7:a8:01:
3a:cc:fa:dd:91:b2:88:5f:fc:4d:a0:47:99:d1:a5:
77:30:6d:0f:96:0c:a7:1a:17:0d:bd:46:54:12:34:
9e:be:5d:d7:c5:a0:11:88:84:b1:eb:f5:5b:a7:ca:
4d:63:4e:98:69:96:31:a2:2e:dc:82:0f:68:d4:d1:
7a:ed:c3:3d:10:7a:d2:07:7a:ca:51:94:41:b5:ed:
6a:12:d1:32:09:a9:9d:d9:3a:a6:86:91:ed:f2:28:
ce:18:5a:ff:69:d6:12:5c:b0:17:db:a6:56:31:ed:
f4:d1:cc:3f:a3:6b:39:fe:cd:70:61:5b:3c:7a:c2:
7a:58:7b:2e:e1:6a:fc:61:64:98:55:2a:94:71:e1:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:60:2D:4D:E3:DB:23:40:C4:97:83:D2:A8:A5:07:76:4D:3C:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4de3d1-0a9e-3f9e-afb6-6ef8c5468e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
205.147.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b5:05:93:e0:e0:20:18:c0:01:20:9d:02:6a:b4:fa:ba:84:
21:b4:b0:2e:ac:cc:6e:d5:b3:ff:16:21:57:92:fd:fb:f3:e4:
c3:97:e7:f1:1a:11:12:9e:59:d5:96:e8:66:29:8f:4f:dc:68:
8d:2a:9c:ca:e9:44:f1:a2:a1:13:1c:90:22:50:0f:3c:2c:f8:
c6:f3:89:53:6b:1e:7b:47:3f:ed:f9:00:32:74:f4:8a:c4:f8:
e7:20:16:8f:26:0a:9e:9d:96:be:77:d6:73:3c:08:5f:9f:3e:
55:a7:94:ea:88:18:d7:01:ae:65:3d:32:c9:c1:c5:c8:f3:65:
a2:45:8b:9f:5e:e6:8c:3c:21:6a:a7:66:fa:0a:fb:a8:74:5a:
2a:3b:4b:2f:48:ba:80:7b:ee:df:cf:10:96:30:c1:b4:b4:7c:
20:b8:e4:17:49:80:e6:df:e3:9f:f0:53:80:d5:28:a1:0c:af:
7e:5f:bb:5a:97:b3:35:63:2e:b0:ae:69:6d:98:6f:31:ce:92:
f2:58:f4:8e:11:0e:5c:67:b7:09:a6:5b:cc:48:97:11:c7:d6:
88:f6:6a:f5:c1:20:3a:f1:6b:d4:3c:7b:e3:70:82:63:2e:ab:
75:f6:f8:a9:60:c7:77:44:83:0f:3c:20:bc:8c:3c:c8:9c:73:
2d:b1:81:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0/X+ThubzV/IgpIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMxNTA0MDAwMFoXDTI4MDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NzJmYzVmNjEtNDIwNy00ZjZhLWI4YjYtYTkwOTY0OTljNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+c3fHEn8dMGF+h7pxYLpawc6qbQHTmqz11
W/GTv5iWN2t35LwHpXA7VgO3NZMBmU16xvux1LOAYEkOXHxJDBnCrmgz/29bdlLh
En6HlkfOYbwJjQZVxKKd9plQfLpJXOeEne81mWr5QwetOjFkKVI+m6enqAE6zPrd
kbKIX/xNoEeZ0aV3MG0PlgynGhcNvUZUEjSevl3XxaARiISx6/Vbp8pNY06YaZYx
oi7cgg9o1NF67cM9EHrSB3rKUZRBte1qEtEyCamd2TqmhpHt8ijOGFr/adYSXLAX
26ZWMe300cw/o2s5/s1wYVs8esJ6WHsu4Wr8YWSYVSqUceHW9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXaYC1N49sjQMSXg9KopQd2TTypMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM0ZGUzZDEtMGE5ZS0z
ZjllLWFmYjYtNmVmOGM1NDY4ZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZPLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABu1BZPg4CAYwAEgnQJqtPq6hCG0sC6szG7Vs/8WIVeS/fvz5MOX5/Ea
ERKeWdWW6GYpj0/caI0qnMrpRPGioRMckCJQDzws+MbziVNrHntHP+35ADJ09IrE
+OcgFo8mCp6dlr531nM8CF+fPlWnlOqIGNcBrmU9MsnBxcjzZaJFi59e5ow8IWqn
ZvoK+6h0Wio7Sy9IuoB77t/PEJYwwbS0fCC45BdJgObf45/wU4DVKKEMr35fu1qX
szVjLrCuaW2YbzHOkvJY9I4RDlxntwmmW8xIlxHH1oj2avXBIDrxa9Q8e+NwgmMu
q3X2+Klgx3dEgw88ILyMPMiccy2xgVc=
-----END CERTIFICATE-----
Generated at Fri Jan 5 08:59:00 2024 by rpki-client on console-fra.rpki-client.org