Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/85c84770-5272-3032-8568-12709d418932.roa
File: 85c84770-5272-3032-8568-12709d418932.roa (raw, json)
Hash identifier: uR6HFpR6FRnGYdHCgt0dhwK3QVeyBZagv1BeaiyWSMc=
Subject key identifier: 33:53:BE:75:20:04:96:3D:AC:91:09:49:34:4B:6E:00:D1:0D:60:88
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F432858441C08AC5579A4F63284FA5800
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/85c84770-5272-3032-8568-12709d418932.roa
Signing time: Tue 05 Dec 2023 01:59:15 +0000
ROA not before: Tue 05 Dec 2023 01:59:15 +0000
ROA not after: Mon 04 Mar 2024 01:59:15 +0000
asID: 398698
IP address blocks: 208.52.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1c:08:ac:55:79:a4:f6:32:84:fa:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Dec 5 01:59:15 2023 GMT
Not After : Mar 4 01:59:15 2024 GMT
Subject: CN=104a1a24-a914-4f88-b2a8-7139a5c57a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:48:24:f0:a2:40:2d:e0:b8:4e:d8:56:6b:
b1:44:c6:51:18:12:b1:c1:03:23:62:b5:c7:4a:11:
ab:7a:90:b4:55:ce:2e:e6:d8:9c:ad:ca:84:32:8e:
e9:92:0d:2a:59:11:94:25:91:d1:67:d9:7d:df:09:
a0:f1:96:a1:6f:b1:0f:9b:0e:99:0e:9e:5c:a0:09:
26:ae:e3:fb:9a:d1:fa:55:ea:0b:55:89:be:32:9e:
b9:22:50:46:4f:f4:74:cb:ba:7d:03:80:0c:a9:c7:
04:36:e0:b5:fa:5e:2d:08:57:f1:ae:e9:4b:83:c1:
79:27:c0:ac:05:46:a0:d0:46:12:59:14:7c:7d:87:
80:e0:69:ba:d5:16:78:b1:86:e6:02:d2:45:2a:88:
7b:6b:5c:6b:a4:c4:90:51:52:2f:19:86:94:33:37:
6a:b4:21:44:bb:ff:41:44:0d:4b:3b:ae:2f:04:2b:
01:b8:d6:77:22:f3:d6:3d:f7:0d:1e:22:25:3f:96:
9b:6f:34:fd:fc:51:05:9e:45:9c:ab:09:32:e5:8f:
43:07:88:ff:0c:24:6a:e3:aa:f8:f3:a2:a5:8e:4c:
cf:56:30:e0:79:f8:c2:4c:7c:c2:03:d9:2c:70:b4:
98:f8:8f:44:a1:81:c4:ba:bd:2f:e8:2a:91:e7:98:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:BE:75:20:04:96:3D:AC:91:09:49:34:4B:6E:00:D1:0D:60:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/85c84770-5272-3032-8568-12709d418932.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
208.52.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:26:3a:3d:63:12:81:88:3a:f3:7a:23:92:2e:be:5c:14:db:
5a:da:c6:7f:6a:71:58:ca:4b:a6:55:87:f9:20:a9:3e:50:22:
a5:bc:f5:df:bf:a8:f5:02:09:b8:b3:84:a5:ea:ac:d6:3a:71:
54:b1:98:80:d5:0d:ec:70:a5:32:7b:26:3a:d5:22:b7:eb:04:
9c:4b:66:31:76:ae:50:53:c8:16:38:5f:d4:ca:ee:74:d1:17:
a7:fa:1a:e4:5b:55:7e:db:c3:e9:c7:39:c3:18:2b:7e:ac:03:
dc:76:73:3d:91:4c:40:6d:23:7c:cd:63:ef:64:27:29:33:80:
c0:20:8d:36:d0:ed:fc:48:ae:c0:81:c2:16:fb:eb:e0:ed:6e:
e7:37:f1:37:14:57:c4:3d:8e:80:fd:0e:06:f6:89:58:0f:d6:
2e:eb:99:29:2b:5f:b8:4e:3f:3a:3f:9b:8a:53:e7:3d:6c:aa:
7d:ed:c1:14:8f:11:43:09:a7:1d:ba:9f:07:ee:34:6d:ed:e3:
8c:58:b4:f6:d0:0a:41:e1:e1:05:b8:39:be:f5:83:74:44:2f:
16:19:53:e4:b8:20:ab:76:44:9a:77:39:45:4e:00:fe:f3:6b:
d2:c0:3e:82:61:2a:6f:bc:ba:61:99:55:be:da:9b:32:43:d5:
ee:62:a0:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQcCKxVeaT2MoT6WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTIzMTIwNTAxNTkxNVoXDTI0MDMwNDAxNTkxNVowLzEtMCsGA1UEAxMk
MTA0YTFhMjQtYTkxNC00Zjg4LWIyYTgtNzEzOWE1YzU3YTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLRIJPCiQC3guE7YVmuxRMZRGBKxwQMjYrXH
ShGrepC0Vc4u5ticrcqEMo7pkg0qWRGUJZHRZ9l93wmg8Zahb7EPmw6ZDp5coAkm
ruP7mtH6VeoLVYm+Mp65IlBGT/R0y7p9A4AMqccENuC1+l4tCFfxrulLg8F5J8Cs
BUag0EYSWRR8fYeA4Gm61RZ4sYbmAtJFKoh7a1xrpMSQUVIvGYaUMzdqtCFEu/9B
RA1LO64vBCsBuNZ3IvPWPfcNHiIlP5abbzT9/FEFnkWcqwky5Y9DB4j/DCRq46r4
86KljkzPVjDgefjCTHzCA9kscLSY+I9EoYHEur0v6CqR55gk8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNTvnUgBJY9rJEJSTRLbgDRDWCIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvODVjODQ3NzAtNTI3Mi0z
MDMyLTg1NjgtMTI3MDlkNDE4OTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0mOj1jEoGIOvN6I5IuvlwU21raxn9qcVjKS6ZVh/kgqT5QIqW89d+/
qPUCCbizhKXqrNY6cVSxmIDVDexwpTJ7JjrVIrfrBJxLZjF2rlBTyBY4X9TK7nTR
F6f6GuRbVX7bw+nHOcMYK36sA9x2cz2RTEBtI3zNY+9kJykzgMAgjTbQ7fxIrsCB
whb76+Dtbuc38TcUV8Q9joD9Dgb2iVgP1i7rmSkrX7hOPzo/m4pT5z1sqn3twRSP
EUMJpx26nwfuNG3t44xYtPbQCkHh4QW4Ob71g3RELxYZU+S4IKt2RJp3OUVOAP7z
a9LAPoJhKm+8umGZVb7amzJD1e5ioE4=
-----END CERTIFICATE-----
Generated at Fri Jan 5 11:41:26 2024 by rpki-client on console-fra.rpki-client.org