Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6cd5f6c1-4350-3f17-b73c-fb3063ee122f.roa
File: 6cd5f6c1-4350-3f17-b73c-fb3063ee122f.roa (raw, json)
Hash identifier: GZ1KGQzihs+mN588HBiK69MNb0UkK+4ZiT8vucWOF7c=
Subject key identifier: 63:0A:9B:50:51:71:54:6E:63:CE:6B:5C:F3:46:52:C4:B3:FB:AB:83
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858434B5AB321561123EC53C9B85E
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6cd5f6c1-4350-3f17-b73c-fb3063ee122f.roa
Signing time: Thu 21 Sep 2023 08:00:34 +0000
ROA not before: Thu 21 Sep 2023 08:00:34 +0000
ROA not after: Wed 20 Dec 2023 09:00:34 +0000
asID: 140227
IP address blocks: 104.143.46.0/23 maxlen: 24
198.176.60.0/22 maxlen: 24
172.81.96.0/22 maxlen: 24
172.81.100.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:4b:5a:b3:21:56:11:23:ec:53:c9:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Sep 21 08:00:34 2023 GMT
Not After : Dec 20 09:00:34 2023 GMT
Subject: CN=c949686a-695b-40c0-9726-1825d060c18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:11:3c:8e:52:c7:28:38:20:95:3c:e9:18:
3a:88:7f:20:df:ef:89:d4:2e:a9:6b:ae:ce:a8:fc:
ea:9c:b1:25:c5:9a:38:04:cc:0d:48:67:00:e9:11:
4a:54:5a:ce:4e:a2:7e:95:94:b2:48:3b:f7:2e:1a:
de:2b:d9:59:63:35:c7:e2:8b:f9:e2:4c:61:f3:ce:
ed:c1:19:d9:8d:47:75:6f:3e:0c:cd:d2:4d:24:f5:
64:80:f3:b9:e6:e9:86:a0:d9:2f:7f:d7:e4:f1:a0:
40:1f:dd:7c:d9:3c:63:fd:83:ba:f5:d0:27:35:fd:
7a:e6:e9:a2:41:0d:cf:1c:f1:bf:d9:f2:d1:d1:d5:
be:b9:07:51:67:7b:29:89:46:b8:aa:88:9e:f5:b0:
59:96:3f:83:ff:6d:c4:10:8b:21:26:34:8d:34:29:
fd:c8:7f:f8:fa:d6:1e:33:c6:38:2b:54:b1:b4:67:
ca:34:ba:40:db:7f:7b:18:33:9d:fc:e7:08:01:be:
80:80:63:2d:ac:af:6c:05:20:16:b5:1d:3e:5f:dd:
77:a1:98:00:9b:27:62:a9:2f:41:4a:cd:17:35:45:
18:a9:bf:b2:a8:7a:3f:89:70:a0:45:cd:1a:4f:ed:
e6:09:8e:28:5e:9e:57:01:16:da:57:7f:65:9c:7f:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:9B:50:51:71:54:6E:63:CE:6B:5C:F3:46:52:C4:B3:FB:AB:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/6cd5f6c1-4350-3f17-b73c-fb3063ee122f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.46.0/23
172.81.96.0-172.81.101.255
198.176.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fb:1c:cc:3e:31:1e:fb:26:f7:90:a5:0f:c3:d3:db:24:3b:
7c:00:20:a2:af:f9:c7:cb:91:0e:69:e2:80:ff:dc:d5:af:42:
a9:fa:5c:7c:36:08:49:2d:d0:f4:52:31:f2:1a:de:23:5c:da:
b6:89:bb:11:07:97:3c:83:a4:01:5b:48:ea:e9:78:60:e1:b6:
ce:1a:f6:68:80:73:43:cc:56:9c:a2:aa:2b:f2:b2:2b:be:ab:
a8:b8:21:6b:e1:3d:11:61:1c:b6:a0:39:f6:ec:f8:49:b7:83:
55:2f:3c:e6:02:55:f6:4e:0b:0c:98:d8:20:e5:cc:b0:35:6b:
e2:6d:00:e5:6b:56:2e:f0:58:39:60:86:83:78:36:37:e6:27:
b4:e7:2d:42:32:8f:fc:36:43:65:83:bb:35:0d:3f:ef:22:d5:
12:21:05:e0:c5:c5:71:59:72:b3:ee:90:38:0d:64:d7:e9:4a:
21:70:da:7a:5a:40:f6:bf:ae:c6:9c:b0:51:f5:ca:6b:e9:04:
d9:79:8c:95:28:d4:57:b3:7b:49:04:72:af:15:b2:1a:e8:8d:
18:23:bc:7b:a6:ca:60:d9:49:e6:89:e3:5b:76:ab:85:0b:e7:
a1:a4:a1:bf:35:fa:fc:31:7c:64:02:5c:6d:d7:3f:c1:3d:35:
87:d2:01:3f
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWENLWrMhVhEj7FPJuF4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTIzMDkyMTA4MDAzNFoXDTIzMTIyMDA5MDAzNFowLzEtMCsGA1UEAxMk
Yzk0OTY4NmEtNjk1Yi00MGMwLTk3MjYtMTgyNWQwNjBjMThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEERPI5Sxyg4IJU86Rg6iH8g3++J1C6pa67O
qPzqnLElxZo4BMwNSGcA6RFKVFrOTqJ+lZSySDv3LhreK9lZYzXH4ov54kxh887t
wRnZjUd1bz4MzdJNJPVkgPO55umGoNkvf9fk8aBAH9182Txj/YO69dAnNf165umi
QQ3PHPG/2fLR0dW+uQdRZ3spiUa4qoie9bBZlj+D/23EEIshJjSNNCn9yH/4+tYe
M8Y4K1SxtGfKNLpA2397GDOd/OcIAb6AgGMtrK9sBSAWtR0+X913oZgAmydiqS9B
Ss0XNUUYqb+yqHo/iXCgRc0aT+3mCY4oXp5XARbaV39lnH9wpQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFGMKm1BRcVRuY85rXPNGUsSz+6uDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvNmNkNWY2YzEtNDM1MC0z
ZjE3LWI3M2MtZmIzMDYzZWUxMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBaI8uMAwD
BAWsUWADBAGsUWQDBALGsDwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYPsczD4xHvsm95ClD8PT2yQ7fAAg
oq/5x8uRDmnigP/c1a9CqfpcfDYISS3Q9FIx8hreI1zatom7EQeXPIOkAVtI6ul4
YOG2zhr2aIBzQ8xWnKKqK/KyK76rqLgha+E9EWEctqA59uz4SbeDVS885gJV9k4L
DJjYIOXMsDVr4m0A5WtWLvBYOWCGg3g2N+YntOctQjKP/DZDZYO7NQ0/7yLVEiEF
4MXFcVlys+6QOA1k1+lKIXDaelpA9r+uxpywUfXKa+kE2XmMlSjUV7N7SQRyrxWy
GuiNGCO8e6bKYNlJ5onjW3arhQvnoaShvzX6/DF8ZAJcbdc/wT01h9IBPw==
-----END CERTIFICATE-----
Generated at Thu Oct 19 11:31:07 2023 by rpki-client on console-ams.rpki-client.org