Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/cdcf974a-2f13-3f5f-b8b2-f2d22ea8685c.roa
File: cdcf974a-2f13-3f5f-b8b2-f2d22ea8685c.roa (raw, json)
Hash identifier: 0GXDVaM/fkxmFt77onEKgsq6do7HTRRb+U/poRdVMJc=
Subject key identifier: 3B:5E:5C:42:40:95:EE:B2:7A:56:5A:98:3E:3A:B1:E5:0D:0A:D2:64
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285840FFACD85D04B0F4B962F71300
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/cdcf974a-2f13-3f5f-b8b2-f2d22ea8685c.roa
Signing time: Wed 22 Feb 2023 17:04:07 +0000
ROA not before: Wed 22 Feb 2023 17:04:07 +0000
ROA not after: Tue 27 May 2025 04:00:00 +0000
asID: 21559
IP address blocks: 198.52.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ff:ac:d8:5d:04:b0:f4:b9:62:f7:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Feb 22 17:04:07 2023 GMT
Not After : May 27 04:00:00 2025 GMT
Subject: CN=1c514c21-66aa-4223-beba-65126b725d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:33:65:f4:ab:4d:28:7f:96:fa:d7:ab:ce:
db:6e:2f:d5:74:f0:3a:1b:a6:c7:4c:a0:03:eb:df:
c0:78:2f:f9:1a:82:bf:46:22:87:c5:1e:f3:80:7c:
78:f4:77:28:5e:5f:5c:bb:d9:83:18:a8:c0:eb:82:
d0:e3:de:62:99:5b:90:6d:1e:42:57:10:63:8d:f6:
f2:26:ef:38:45:db:ee:65:7d:b9:01:cc:31:88:2b:
2b:00:fd:e1:b9:dc:bf:a6:70:33:05:03:9d:73:59:
4c:15:c3:53:f2:7e:70:69:60:c5:ea:63:64:b8:2a:
57:15:0d:28:f7:a4:c5:3a:a4:2b:d6:d1:05:1b:b7:
3f:26:cc:db:ca:8d:a9:4c:d2:11:a3:78:fd:47:4c:
c5:bf:55:a2:a8:cd:51:02:86:94:0d:c9:5c:b4:f5:
23:60:d1:a0:57:aa:19:0b:57:25:3c:d8:80:99:1e:
1b:44:60:5b:1a:20:85:b0:51:9f:a0:00:da:8b:7f:
e2:75:f3:12:02:92:06:9d:07:8d:60:e7:d4:66:c2:
25:31:69:e7:27:de:23:d8:f4:9b:a3:81:8e:45:fc:
4d:97:d4:be:e4:1e:09:2e:06:c0:a9:4e:38:75:04:
90:d7:50:b7:21:b6:14:1f:4c:a0:b7:b3:34:5a:f3:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:5C:42:40:95:EE:B2:7A:56:5A:98:3E:3A:B1:E5:0D:0A:D2:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/cdcf974a-2f13-3f5f-b8b2-f2d22ea8685c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.52.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:75:9f:5f:d6:f0:eb:85:45:5d:b0:74:de:cb:fe:f8:ca:3d:
41:60:48:8f:44:fa:85:15:7f:83:86:ea:d2:23:f0:80:f1:64:
cb:bb:1c:3a:83:a1:63:04:9f:ad:0e:77:ed:33:e6:53:f5:6d:
84:f8:73:4f:6e:5a:1a:74:73:a1:7b:4b:be:8d:b4:a8:56:82:
74:1e:2e:b8:f8:18:8a:8f:43:e7:2c:21:9a:4c:ea:b6:12:35:
ba:47:cf:96:4b:f8:59:3e:fa:4a:77:7c:b3:6c:cc:cd:99:41:
4d:fc:2a:ec:70:5a:ee:ef:5f:1d:53:fc:57:ea:4c:cf:d6:7b:
01:3b:63:1a:a7:45:36:7c:29:68:e5:ff:87:28:d5:b3:b6:dc:
16:38:67:17:37:b4:d1:48:e8:28:a9:9a:ea:50:05:74:9d:47:
f7:ae:9b:08:40:a7:29:6f:cb:05:6b:50:42:dd:c5:20:5a:ea:
2f:c4:48:da:f0:11:b3:6d:75:eb:96:0f:b4:54:01:23:f4:92:
0f:58:53:88:25:c0:9a:be:a6:ef:03:94:d0:44:ca:23:4c:a5:
22:c3:af:40:fb:32:a8:4c:89:27:68:a5:bf:ab:cd:d9:6e:ca:
b0:22:a7:2d:3c:77:12:50:16:70:9e:bc:6a:a2:4a:aa:f9:26:
a2:0c:fd:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWED/rNhdBLD0uWL3EwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg4Y2JiMGItOWUxOS00ZWYwLTljMWMtMDYyZGYwNzI5
ZDVhMB4XDTIzMDIyMjE3MDQwN1oXDTI1MDUyNzA0MDAwMFowLzEtMCsGA1UEAxMk
MWM1MTRjMjEtNjZhYS00MjIzLWJlYmEtNjUxMjZiNzI1ZDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySYzZfSrTSh/lvrXq87bbi/VdPA6G6bHTKAD
69/AeC/5GoK/RiKHxR7zgHx49HcoXl9cu9mDGKjA64LQ495imVuQbR5CVxBjjfby
Ju84RdvuZX25AcwxiCsrAP3hudy/pnAzBQOdc1lMFcNT8n5waWDF6mNkuCpXFQ0o
96TFOqQr1tEFG7c/Jszbyo2pTNIRo3j9R0zFv1WiqM1RAoaUDclctPUjYNGgV6oZ
C1clPNiAmR4bRGBbGiCFsFGfoADai3/idfMSApIGnQeNYOfUZsIlMWnnJ94j2PSb
o4GORfxNl9S+5B4JLgbAqU44dQSQ11C3IbYUH0ygt7M0WvOpnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDteXEJAle6yelZamD46seUNCtJkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mODhj
YmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJkZjA3MjlkNWEvY2RjZjk3NGEtMmYxMy0z
ZjVmLWI4YjItZjJkMjJlYTg2ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjg4Y2JiMGItOWUxOS00ZWYwLTlj
MWMtMDYyZGYwNzI5ZDVhL2Y4OGNiYjBiLTllMTktNGVmMC05YzFjLTA2MmRmMDcy
OWQ1YS5jcmwwHwYDVR0jBBgwFoAUumtvErjf7FdMpuDrBh2cPZWqzL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mODhjYmIwYi05ZTE5LTRlZjAtOWMxYy0wNjJk
ZjA3MjlkNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB11n1/W8OuFRV2wdN7L/vjKPUFgSI9E+oUVf4OG6tIj8IDxZMu7HDqD
oWMEn60Od+0z5lP1bYT4c09uWhp0c6F7S76NtKhWgnQeLrj4GIqPQ+csIZpM6rYS
NbpHz5ZL+Fk++kp3fLNszM2ZQU38KuxwWu7vXx1T/FfqTM/WewE7YxqnRTZ8KWjl
/4co1bO23BY4Zxc3tNFI6CipmupQBXSdR/eumwhApylvywVrUELdxSBa6i/ESNrw
EbNtdeuWD7RUASP0kg9YU4glwJq+pu8DlNBEyiNMpSLDr0D7MqhMiSdopb+rzdlu
yrAipy08dxJQFnCevGqiSqr5JqIM/UI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org