Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1f9ccfb-5657-31f7-95c9-b45d7c4a8d23.roa
File: f1f9ccfb-5657-31f7-95c9-b45d7c4a8d23.roa (raw, json)
Hash identifier: xL+28QKH5GILSwGWJNCdBtGg0mwBV6bff6AgvNLRTQQ=
Subject key identifier: EB:1E:45:90:E6:C6:38:40:76:46:A0:3B:E2:99:5B:51:81:1D:0E:33
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285845131ADBD4C2AA7762CDEEE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1f9ccfb-5657-31f7-95c9-b45d7c4a8d23.roa
Signing time: Sat 02 Mar 2024 14:00:31 +0000
ROA not before: Sat 02 Mar 2024 14:00:31 +0000
ROA not after: Fri 31 May 2024 13:00:31 +0000
asID: 4775
IP address blocks: 23.33.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 09 May 2024 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:13:1a:db:d4:c2:aa:77:62:cd:ee:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 2 14:00:31 2024 GMT
Not After : May 31 13:00:31 2024 GMT
Subject: CN=bbc59ecb-c19b-44f8-8368-e39f1b721ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:40:0f:d1:53:0c:4a:35:27:64:b6:29:fb:
09:fc:80:2e:7d:1d:b1:a4:b3:8c:07:b7:44:bc:a7:
8e:6b:5c:61:00:30:6d:01:f1:f0:ed:99:24:26:b7:
f4:6a:6f:95:bf:2f:c5:c8:e9:99:01:56:61:f5:81:
37:ac:33:53:68:14:63:13:f9:54:cd:ea:8e:f1:2a:
d3:0e:28:a4:83:14:53:6e:a8:59:96:b8:47:1e:04:
c1:4a:cf:4c:5a:26:44:73:c9:d8:73:e6:f1:9b:78:
ac:7b:f4:b2:d6:e5:b7:c6:d8:12:06:1e:92:8f:d6:
cf:57:93:80:b9:a6:90:6e:ea:e8:97:fb:5d:2a:2c:
67:b6:40:01:9f:53:b6:a4:e1:bd:35:64:d0:96:df:
ba:7d:41:2a:ef:23:da:94:f7:06:18:1d:c1:c0:e4:
42:04:ff:ff:3c:75:15:c0:16:e7:9f:53:9e:0e:9e:
12:39:b1:6a:25:b7:d8:46:63:97:72:90:ad:2c:9a:
3c:71:bd:ff:db:95:e0:77:4f:93:6f:d6:da:ff:64:
8b:d3:af:3a:6c:62:64:e7:6a:4a:86:aa:67:98:f0:
2b:48:9a:00:ff:c6:dc:51:7d:6c:2e:66:55:dc:3a:
d2:31:c1:fa:18:0f:51:de:8f:04:ad:4e:08:04:02:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:45:90:E6:C6:38:40:76:46:A0:3B:E2:99:5B:51:81:1D:0E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1f9ccfb-5657-31f7-95c9-b45d7c4a8d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:a7:2d:6e:2a:f8:23:67:42:8a:2c:c5:57:da:72:e8:d9:c9:
c0:b0:4d:9b:15:50:1b:fd:cd:5f:9b:16:78:ac:3a:4c:2c:81:
65:49:a5:e3:84:3e:04:82:3f:e0:4b:d0:76:aa:94:04:44:99:
65:18:93:31:ec:be:b2:53:f9:c0:a7:f1:22:48:02:e3:94:36:
f8:21:4a:7e:55:f9:88:e9:1a:2a:d4:da:d0:3b:af:21:3a:6f:
f2:7c:b7:65:ed:62:01:09:be:c3:f1:a7:bd:c2:c0:60:97:72:
41:e8:d9:fd:4f:f1:b3:4d:31:49:0e:0b:fa:8c:2e:24:6e:a9:
7b:0b:25:20:02:03:9d:70:b6:45:c8:91:70:6b:4b:32:41:52:
16:68:d5:fa:86:84:37:63:7d:cb:e0:ec:3c:ef:64:39:b4:c3:
0e:ec:8c:f7:74:20:1b:a7:ae:9c:94:f2:00:17:bb:81:ca:82:
6b:79:46:8d:9b:e6:86:73:5c:f2:b7:50:17:42:b4:2c:cd:f7:
e1:56:3a:44:df:a4:6d:7b:3b:75:f0:88:f9:84:f2:a4:65:b7:
0f:01:3e:f5:18:5e:38:50:bb:28:15:b0:54:09:a6:63:bd:a4:
1b:cb:98:b5:da:c0:dd:b2:e9:5e:e3:d4:ae:f4:91:7d:67:25:
e0:ab:02:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUTGtvUwqp3Ys3u5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDMwMjE0MDAzMVoXDTI0MDUzMTEzMDAzMVowLzEtMCsGA1UEAxMk
YmJjNTllY2ItYzE5Yi00NGY4LTgzNjgtZTM5ZjFiNzIxY2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUhAD9FTDEo1J2S2KfsJ/IAufR2xpLOMB7dE
vKeOa1xhADBtAfHw7ZkkJrf0am+Vvy/FyOmZAVZh9YE3rDNTaBRjE/lUzeqO8SrT
DiikgxRTbqhZlrhHHgTBSs9MWiZEc8nYc+bxm3ise/Sy1uW3xtgSBh6Sj9bPV5OA
uaaQburol/tdKixntkABn1O2pOG9NWTQlt+6fUEq7yPalPcGGB3BwORCBP//PHUV
wBbnn1OeDp4SObFqJbfYRmOXcpCtLJo8cb3/25Xgd0+Tb9ba/2SL0686bGJk52pK
hqpnmPArSJoA/8bcUX1sLmZV3DrSMcH6GA9R3o8ErU4IBALkLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOseRZDmxjhAdkagO+KZW1GBHQ4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjFmOWNjZmItNTY1Ny0z
MWY3LTk1YzktYjQ1ZDdjNGE4ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIWnLW4q+CNnQoosxVfacujZycCwTZsVUBv9zV+bFnisOkwsgWVJpeOE
PgSCP+BL0HaqlAREmWUYkzHsvrJT+cCn8SJIAuOUNvghSn5V+YjpGirU2tA7ryE6
b/J8t2XtYgEJvsPxp73CwGCXckHo2f1P8bNNMUkOC/qMLiRuqXsLJSACA51wtkXI
kXBrSzJBUhZo1fqGhDdjfcvg7DzvZDm0ww7sjPd0IBunrpyU8gAXu4HKgmt5Ro2b
5oZzXPK3UBdCtCzN9+FWOkTfpG17O3XwiPmE8qRltw8BPvUYXjhQuygVsFQJpmO9
pBvLmLXawN2y6V7j1K70kX1nJeCrAhI=
-----END CERTIFICATE-----
Generated at Thu May 9 13:45:29 2024 by rpki-client on console-fra.rpki-client.org