Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/024c5038-344e-3cc3-8f8a-699535cdffb5.roa
File: 024c5038-344e-3cc3-8f8a-699535cdffb5.roa (raw, json)
Hash identifier: Bl6IQ/Y66i28DF16m8ypPk/O29AiSqur8ycHUqTu8zQ=
Subject key identifier: 0F:09:43:57:AD:CA:89:0A:48:D0:6C:A5:4B:4A:C7:A6:09:57:99:75
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858446339B71C15CB47B111C7E0C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/024c5038-344e-3cc3-8f8a-699535cdffb5.roa
Signing time: Sat 30 Dec 2023 14:00:21 +0000
ROA not before: Sat 30 Dec 2023 14:00:21 +0000
ROA not after: Fri 29 Mar 2024 13:00:21 +0000
asID: 11232
IP address blocks: 67.217.28.0/22 maxlen: 22
209.169.192.0/22 maxlen: 22
24.54.152.0/22 maxlen: 22
24.236.60.0/22 maxlen: 22
64.17.64.0/22 maxlen: 22
67.217.20.0/22 maxlen: 22
24.52.36.0/22 maxlen: 22
24.52.40.0/22 maxlen: 22
24.52.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:63:39:b7:1c:15:cb:47:b1:11:c7:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Dec 30 14:00:21 2023 GMT
Not After : Mar 29 13:00:21 2024 GMT
Subject: CN=abaf35ac-fbc3-4366-9263-cd949a933020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:23:14:71:b6:10:3c:3c:2e:a4:18:fb:f3:
82:0f:90:31:1a:de:48:bb:cc:d6:94:86:8a:c4:8f:
5b:ce:5e:c3:ba:ae:2e:92:6e:a7:ae:cf:32:ba:08:
3e:71:cc:e5:15:54:b9:0e:1b:96:a4:3c:cb:01:2e:
7c:40:73:1c:c9:f4:45:36:72:02:c1:6c:d4:7e:7b:
33:7a:bf:50:0e:93:f5:6d:6e:e4:66:6b:e2:28:2a:
3b:62:f9:ce:05:e1:f4:a0:b7:c0:3e:7a:ac:78:cf:
b7:23:46:9c:b4:3b:4e:3f:26:b3:e2:6a:6b:88:27:
92:b4:c1:d8:49:23:a0:db:19:df:47:79:d3:b7:91:
66:19:8d:86:e6:ae:60:05:fe:50:84:1d:9a:8d:9a:
8c:67:65:72:0d:bc:f9:c5:76:a8:4d:7d:f0:59:f2:
ae:01:57:35:4a:41:5d:1f:a1:c4:8b:eb:c5:86:ea:
b2:bb:f8:39:64:49:f0:69:3a:ed:c2:5f:29:a1:ee:
fb:75:d9:17:f5:8e:41:40:7c:38:ac:b1:34:98:99:
2e:db:7a:75:34:fd:4a:97:91:dc:b7:02:55:23:de:
53:48:28:38:89:f1:30:4b:c8:52:90:24:73:0a:71:
03:4c:4e:6b:ca:e0:10:a7:27:ca:7a:89:7f:21:f8:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:43:57:AD:CA:89:0A:48:D0:6C:A5:4B:4A:C7:A6:09:57:99:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/024c5038-344e-3cc3-8f8a-699535cdffb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.36.0-24.52.43.255
24.52.52.0/22
24.54.152.0/22
24.236.60.0/22
64.17.64.0/22
67.217.20.0/22
67.217.28.0/22
209.169.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:6a:1d:d8:5c:63:f0:52:40:4f:51:9a:f1:04:fe:48:60:c5:
06:29:a8:df:68:9e:02:50:da:eb:45:04:f0:dc:8e:d7:89:71:
d7:1b:8a:37:ee:16:b3:5e:56:84:0f:7e:31:13:94:17:57:be:
68:1a:48:7c:35:1b:84:28:0a:c7:b4:8d:b0:42:5d:00:52:ed:
ff:1c:d9:9e:95:d7:50:fa:b7:1d:99:be:7e:b0:a3:2d:2d:e0:
4f:07:04:49:ca:9a:ed:1b:dd:1c:cd:b1:15:00:5e:8b:4f:eb:
19:c8:2e:5b:3e:12:db:83:2c:b9:de:af:c4:ea:80:7f:e4:51:
f6:3c:63:c1:9c:2a:8c:4c:f1:4f:3f:a5:5c:01:bc:74:64:64:
de:bf:42:44:41:4b:61:e2:3f:58:3d:a4:4c:d6:ca:bb:19:8b:
a2:a0:a0:98:26:01:f4:d6:02:e1:d4:84:b4:39:d5:17:9b:33:
f9:e6:75:57:92:08:66:fa:ea:6a:11:e7:44:e5:42:e1:6f:40:
24:98:67:1e:18:a4:3c:69:12:ca:9a:0b:36:23:ec:f4:c3:10:
0b:33:e7:69:e4:18:83:23:f1:96:83:41:20:a8:02:5a:33:fc:
53:a9:32:3c:36:08:f6:5e:25:00:91:92:2b:e1:b0:50:7b:4e:
71:7c:07:d6
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWERjObccFctHsRHH4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTIzMTIzMDE0MDAyMVoXDTI0MDMyOTEzMDAyMVowLzEtMCsGA1UEAxMk
YWJhZjM1YWMtZmJjMy00MzY2LTkyNjMtY2Q5NDlhOTMzMDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzkjFHG2EDw8LqQY+/OCD5AxGt5Iu8zWlIaK
xI9bzl7Duq4ukm6nrs8yugg+cczlFVS5DhuWpDzLAS58QHMcyfRFNnICwWzUfnsz
er9QDpP1bW7kZmviKCo7YvnOBeH0oLfAPnqseM+3I0actDtOPyaz4mpriCeStMHY
SSOg2xnfR3nTt5FmGY2G5q5gBf5QhB2ajZqMZ2VyDbz5xXaoTX3wWfKuAVc1SkFd
H6HEi+vFhuqyu/g5ZEnwaTrtwl8poe77ddkX9Y5BQHw4rLE0mJku23p1NP1Kl5Hc
twJVI95TSCg4ifEwS8hSkCRzCnEDTE5ryuAQpyfKeol/Ifg/jwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFA8JQ1etyokKSNBspUtKx6YJV5l1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMDI0YzUwMzgtMzQ0ZS0z
Y2MzLThmOGEtNjk5NTM1Y2RmZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAIYNCQD
BAIYNCgDBAIYNDQDBAIYNpgDBAIY7DwDBAJAEUADBAJD2RQDBAJD2RwDBALRqcAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEGod2Fxj8FJAT1Ga8QT+SGDFBimo32ieAlDa60UE8NyO14lx1xuK
N+4Ws15WhA9+MROUF1e+aBpIfDUbhCgKx7SNsEJdAFLt/xzZnpXXUPq3HZm+frCj
LS3gTwcEScqa7RvdHM2xFQBei0/rGcguWz4S24Msud6vxOqAf+RR9jxjwZwqjEzx
Tz+lXAG8dGRk3r9CREFLYeI/WD2kTNbKuxmLoqCgmCYB9NYC4dSEtDnVF5sz+eZ1
V5IIZvrqahHnROVC4W9AJJhnHhikPGkSypoLNiPs9MMQCzPnaeQYgyPxloNBIKgC
WjP8U6kyPDYI9l4lAJGSK+GwUHtOcXwH1g==
-----END CERTIFICATE-----
Generated at Thu Feb 22 18:56:46 2024 by rpki-client on console-ams.rpki-client.org