Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/aa87a7ef-823f-3598-9b40-9f6aa288ff44.roa
File: aa87a7ef-823f-3598-9b40-9f6aa288ff44.roa (raw, json)
Hash identifier: JYjGfyPvrg/lHgkS6wgHtGMyOW72K1Uwd6DFh3fqkc0=
Subject key identifier: CA:5A:67:DC:ED:4D:01:B3:E8:13:9C:67:09:F5:CD:4E:2C:6B:E9:B7
Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial: 010D0C9F432858448A4F507DCBFBDE1B6ABEB500
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/aa87a7ef-823f-3598-9b40-9f6aa288ff44.roa
Signing time: Sat 13 Jan 2024 14:00:29 +0000
ROA not before: Sat 13 Jan 2024 14:00:29 +0000
ROA not after: Fri 12 Apr 2024 13:00:29 +0000
asID: 211138
IP address blocks: 23.134.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 00:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:8a:4f:50:7d:cb:fb:de:1b:6a:be:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Validity
Not Before: Jan 13 14:00:29 2024 GMT
Not After : Apr 12 13:00:29 2024 GMT
Subject: CN=9407e7ba-04d1-4c81-b03b-22db463eae6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:8b:b7:8e:4b:05:4b:29:47:b5:9c:1f:65:
0f:f5:30:f7:6e:4f:b7:7a:36:d2:cf:1c:92:29:75:
70:1e:cb:59:fd:a5:c3:75:88:d0:7b:2f:d3:df:f2:
00:23:a2:de:ce:80:04:96:0d:e7:c8:4f:9e:e4:38:
40:9b:f8:7a:d3:4d:64:35:e7:37:81:ac:a0:28:f2:
46:13:af:ac:8c:96:0f:1c:33:97:54:9f:cf:b6:1b:
75:b9:53:c1:23:61:3a:14:df:89:28:c1:2b:9d:8f:
7f:24:aa:29:57:f6:93:57:6b:00:88:e7:17:26:19:
a8:b7:7e:2d:72:48:1a:dc:c9:49:78:c1:38:48:55:
0c:86:3b:82:d5:7e:dd:2c:1c:ed:92:95:6b:81:b3:
50:8c:d6:db:1b:0e:dd:d3:f9:2c:2c:34:4a:6b:ab:
d5:38:c9:08:dd:5e:15:50:e7:74:a5:97:d5:fc:d7:
53:83:18:bd:0a:17:14:99:8b:50:ee:19:cb:06:1c:
be:c5:34:55:bf:65:e3:b0:8f:86:d1:4f:52:14:c6:
af:ae:70:2c:5a:91:d3:d0:3f:2f:b8:ff:85:fc:c0:
fe:f5:ff:dd:6d:b7:3b:2b:67:ce:be:37:08:d9:0e:
2c:f1:09:4b:cf:c4:71:60:9d:7c:82:cb:84:a2:2e:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:67:DC:ED:4D:01:B3:E8:13:9C:67:09:F5:CD:4E:2C:6B:E9:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/aa87a7ef-823f-3598-9b40-9f6aa288ff44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
X509v3 Authority Key Identifier:
keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:af:34:a9:56:b9:16:a3:b6:03:7b:17:7f:4d:7c:fe:bc:1a:
6f:81:34:06:e9:61:6b:6b:b3:53:26:d8:a1:fc:06:fb:76:66:
2b:0e:66:78:bf:e6:81:04:7a:dc:37:7e:2e:a3:85:5d:f2:87:
d5:c7:ea:d7:87:da:07:43:1d:73:a1:15:1a:be:95:72:f8:80:
21:f9:97:62:61:7a:d3:93:75:4c:11:83:ce:b8:bf:81:a0:0b:
0c:f5:85:82:47:a2:2f:c9:c3:f5:c2:36:d4:bb:97:df:13:97:
0d:16:a6:03:7a:3c:2a:a2:b0:28:c1:21:3b:b5:d2:e5:57:48:
6e:51:9f:88:8b:30:11:8e:b9:7f:be:d6:ef:ba:4c:26:9b:f7:
bc:40:89:e6:48:e5:c9:af:e7:92:37:b1:df:60:c9:74:30:37:
1b:20:67:c7:ee:af:a0:02:a0:44:ac:8c:bd:41:89:b0:86:35:
49:d6:03:e2:57:e5:7f:12:c7:7d:e9:ad:c1:99:42:a1:6b:fa:
2d:d4:a4:57:8c:86:55:ce:43:12:30:bb:be:82:6d:0e:33:1a:
b6:a3:02:a1:d5:a3:97:72:78:49:43:be:83:ad:64:10:f6:ec:
8e:01:58:22:1e:33:40:10:9e:c3:58:d9:86:83:cc:69:c2:d3:
71:22:27:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESKT1B9y/veG2q+tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTI0MDExMzE0MDAyOVoXDTI0MDQxMjEzMDAyOVowLzEtMCsGA1UEAxMk
OTQwN2U3YmEtMDRkMS00YzgxLWIwM2ItMjJkYjQ2M2VhZTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv6Lt45LBUspR7WcH2UP9TD3bk+3ejbSzxyS
KXVwHstZ/aXDdYjQey/T3/IAI6LezoAElg3nyE+e5DhAm/h6001kNec3gaygKPJG
E6+sjJYPHDOXVJ/Ptht1uVPBI2E6FN+JKMErnY9/JKopV/aTV2sAiOcXJhmot34t
ckga3MlJeME4SFUMhjuC1X7dLBztkpVrgbNQjNbbGw7d0/ksLDRKa6vVOMkI3V4V
UOd0pZfV/NdTgxi9ChcUmYtQ7hnLBhy+xTRVv2XjsI+G0U9SFMavrnAsWpHT0D8v
uP+F/MD+9f/dbbc7K2fOvjcI2Q4s8QlLz8RxYJ18gsuEoi7E5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMpaZ9ztTQGz6BOcZwn1zU4sa+m3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvYWE4N2E3ZWYtODIzZi0z
NTk4LTliNDAtOWY2YWEyODhmZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAyvNKlWuRajtgN7F39NfP68Gm+BNAbpYWtrs1Mm2KH8Bvt2ZisOZni/
5oEEetw3fi6jhV3yh9XH6teH2gdDHXOhFRq+lXL4gCH5l2JhetOTdUwRg864v4Gg
Cwz1hYJHoi/Jw/XCNtS7l98Tlw0WpgN6PCqisCjBITu10uVXSG5Rn4iLMBGOuX++
1u+6TCab97xAieZI5cmv55I3sd9gyXQwNxsgZ8fur6ACoESsjL1BibCGNUnWA+JX
5X8Sx33prcGZQqFr+i3UpFeMhlXOQxIwu76CbQ4zGrajAqHVo5dyeElDvoOtZBD2
7I4BWCIeM0AQnsNY2YaDzGnC03EiJ9M=
-----END CERTIFICATE-----
Generated at Tue Jan 30 02:28:26 2024 by rpki-client on console-ams.rpki-client.org