Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/1125ffed-df74-3aa7-8809-a2e430d7fa38.roa
File: 1125ffed-df74-3aa7-8809-a2e430d7fa38.roa (raw, json)
Hash identifier: RXL+o2iv+VMWuhEM8FnzgyWez4yrlZWgfAsWTq64vHc=
Subject key identifier: 98:7D:91:A3:AE:DF:24:20:5A:EA:FA:5E:6E:DA:F8:AB:5E:7B:42:21
Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial: 010D0C9F4328584179D2BB977FE33E6434B57760
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/1125ffed-df74-3aa7-8809-a2e430d7fa38.roa
Signing time: Fri 07 Apr 2023 13:45:35 +0000
ROA not before: Fri 07 Apr 2023 13:45:35 +0000
ROA not after: Thu 10 Jul 2025 04:00:00 +0000
asID: 21700
IP address blocks: 206.168.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:79:d2:bb:97:7f:e3:3e:64:34:b5:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Validity
Not Before: Apr 7 13:45:35 2023 GMT
Not After : Jul 10 04:00:00 2025 GMT
Subject: CN=21e76c35-5cb2-4646-aa4e-e13c1036991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:35:e9:a2:46:4b:64:12:8c:f9:26:58:c7:
ac:b1:ef:62:97:6b:a8:55:be:bd:09:51:2c:94:be:
d5:b6:98:d2:93:e4:04:58:87:d2:72:f6:85:df:9e:
8a:e1:27:ca:eb:a1:8f:fe:ff:55:44:8f:6d:bc:8a:
15:19:2d:5e:02:c9:47:ee:34:25:42:c8:5a:2b:03:
2a:1a:09:6e:64:dc:e0:44:1d:81:74:87:06:5f:d9:
81:c5:69:89:70:c0:e4:d8:04:27:5c:c7:20:61:58:
5d:d4:f9:fb:b9:b0:11:b8:f7:3a:63:b6:18:ea:99:
c0:14:a3:61:93:fe:41:44:f5:b3:dd:64:81:a7:c4:
a4:47:de:5d:27:1f:09:ec:07:25:f3:d5:f8:c4:5c:
05:61:c7:f7:dd:bb:69:2e:39:56:c7:ec:34:b1:fa:
d3:16:bb:37:2d:62:c6:92:6d:bc:1f:b1:b0:48:f5:
00:3e:bb:8f:76:3d:4f:b5:53:07:1f:ae:86:90:c3:
19:ee:b4:f0:24:47:e4:00:a7:41:3e:f9:76:25:68:
cf:ce:9d:af:50:dd:75:a9:66:e7:66:f3:50:1f:cf:
59:03:56:b5:74:6d:61:04:3b:8e:09:5d:1c:e4:e2:
be:68:94:07:a5:c7:fe:41:5b:ea:32:99:af:c8:80:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7D:91:A3:AE:DF:24:20:5A:EA:FA:5E:6E:DA:F8:AB:5E:7B:42:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/1125ffed-df74-3aa7-8809-a2e430d7fa38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
X509v3 Authority Key Identifier:
keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
sbgp-ipAddrBlock: critical
IPv4:
206.168.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:58:21:51:7b:5b:f9:42:f4:09:2e:76:24:dd:43:33:bb:52:
fd:51:20:d0:ee:c5:bd:c1:97:ff:5e:42:7e:47:e2:d2:db:29:
c7:01:10:74:a7:74:cd:39:4e:9c:41:12:03:9d:48:f1:ff:07:
45:36:19:a2:34:66:11:36:3a:7f:03:22:03:c6:a2:c8:41:22:
68:4e:49:4b:2c:71:a0:b8:e6:5d:53:30:6a:8b:7f:d9:6a:1d:
a9:46:16:e8:c6:6b:3c:a9:7b:26:db:18:ab:24:46:a5:8b:61:
86:94:24:2d:47:b7:d0:8f:3f:74:1c:2e:0b:7d:3b:88:1d:63:
7b:8c:26:06:80:95:13:29:6e:36:29:c9:bd:2e:c3:28:ff:23:
bb:f0:f5:e7:20:f0:c3:ab:82:c3:6a:4c:c1:39:cc:a8:dc:16:
56:79:dd:c3:6b:1c:2d:d9:8e:e4:82:26:da:5f:f2:42:6a:81:
8b:b2:f9:70:9a:a1:a6:10:1c:6a:90:1a:8f:e1:b1:64:3d:3b:
46:d5:c7:6b:99:ff:73:30:69:19:7e:a2:7c:31:63:83:79:59:
9a:52:64:c5:59:81:29:cd:ba:68:9f:6a:03:39:82:a4:c1:e5:
a0:d8:db:68:cc:34:7e:d3:2d:52:0e:17:29:29:d7:2b:91:22:
30:33:26:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEF50ruXf+M+ZDS1d2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk
N2M1MB4XDTIzMDQwNzEzNDUzNVoXDTI1MDcxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MjFlNzZjMzUtNWNiMi00NjQ2LWFhNGUtZTEzYzEwMzY5OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV416aJGS2QSjPkmWMesse9il2uoVb69CVEs
lL7VtpjSk+QEWIfScvaF356K4SfK66GP/v9VRI9tvIoVGS1eAslH7jQlQshaKwMq
GgluZNzgRB2BdIcGX9mBxWmJcMDk2AQnXMcgYVhd1Pn7ubARuPc6Y7YY6pnAFKNh
k/5BRPWz3WSBp8SkR95dJx8J7Acl89X4xFwFYcf33btpLjlWx+w0sfrTFrs3LWLG
km28H7GwSPUAPruPdj1PtVMHH66GkMMZ7rTwJEfkAKdBPvl2JWjPzp2vUN11qWbn
ZvNQH89ZA1a1dG1hBDuOCV0c5OK+aJQHpcf+QVvqMpmvyIAdCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJh9kaOu3yQgWur6Xm7a+Ktee0IhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx
OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvMTEyNWZmZWQtZGY3NC0z
YWE3LTg4MDktYTJlNDMwZDdmYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1
MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl
ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4
NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqjLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFYIVF7W/lC9AkudiTdQzO7Uv1RINDuxb3Bl/9eQn5H4tLbKccBEHSn
dM05TpxBEgOdSPH/B0U2GaI0ZhE2On8DIgPGoshBImhOSUsscaC45l1TMGqLf9lq
HalGFujGazypeybbGKskRqWLYYaUJC1Ht9CPP3QcLgt9O4gdY3uMJgaAlRMpbjYp
yb0uwyj/I7vw9ecg8MOrgsNqTME5zKjcFlZ53cNrHC3ZjuSCJtpf8kJqgYuy+XCa
oaYQHGqQGo/hsWQ9O0bVx2uZ/3MwaRl+onwxY4N5WZpSZMVZgSnNumifagM5gqTB
5aDY22jMNH7TLVIOFykp1yuRIjAzJrE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org