Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa
File: deafc427-5a9d-3398-8cb1-90e4db65d46f.roa (raw, json)
Hash identifier: 21m1pfGZe+X6gNMzjjQnJ/V7Ccp0Jgc2eA51pq7alOA=
Subject key identifier: 06:F4:89:B7:EB:0B:D2:D4:5D:49:FC:A2:39:35:FA:31:D6:2A:2E:6D
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285846B2F515B7E7EA6DF67489E510
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 54203
IP address blocks: 64.145.90.0/23 maxlen: 23
173.245.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 15:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:15:b7:e7:ea:6d:f6:74:89:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=ab13f483-34db-42ee-9126-abe9d0d4c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:c3:d1:d0:17:f1:b6:2e:b1:92:97:cd:57:
23:8e:67:28:47:46:88:92:93:3b:97:b9:17:aa:e2:
25:8f:e0:77:87:da:5b:8b:9a:a6:3f:4d:cc:ab:60:
0e:0d:97:12:64:d2:c5:39:31:a5:73:75:ab:0f:9f:
27:ec:8c:26:16:e8:57:44:b4:fb:b0:ba:7a:e8:63:
fe:c8:5e:ef:0f:18:dc:09:c8:83:df:08:3a:20:be:
1e:b6:18:ca:74:9b:60:a3:95:54:a2:92:8e:8c:a9:
58:5d:b9:22:d2:62:7c:7a:90:92:31:cc:63:fe:c8:
e5:cd:d3:91:e4:22:f6:0b:4d:e9:39:7c:c4:c6:18:
75:fa:5a:ef:9f:b9:b2:af:30:43:ce:64:b4:0c:49:
78:44:0d:61:e2:11:e9:03:88:34:87:26:5d:9a:ba:
ba:75:45:1d:81:06:7e:7f:91:fa:60:c6:58:c7:01:
e6:8a:79:70:4f:d4:07:41:12:97:73:97:64:88:85:
e0:14:c1:d2:c6:f9:f6:b0:3f:7e:ea:ec:ff:cc:2b:
24:2a:37:8f:fc:7b:09:03:0d:17:60:ba:69:f4:ac:
6b:a0:d1:d0:f4:d5:29:b9:09:38:21:28:5b:7f:d0:
1f:e4:19:9e:47:15:f8:7a:c4:63:3a:83:4b:07:b1:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:89:B7:EB:0B:D2:D4:5D:49:FC:A2:39:35:FA:31:D6:2A:2E:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/deafc427-5a9d-3398-8cb1-90e4db65d46f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
64.145.90.0/23
173.245.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:b6:66:fe:25:d7:ef:75:41:23:1f:ce:cc:b1:0e:3c:13:02:
bb:22:95:1e:81:ca:33:b6:ea:b5:a7:0f:38:50:9f:e6:19:a7:
0b:b7:68:44:70:de:49:bb:cb:13:c6:bb:6c:83:94:9c:a0:4c:
ae:61:7e:67:4e:f6:d4:95:2a:e3:7a:a9:a2:34:a0:5e:dc:5d:
60:6b:a7:15:cb:11:ca:17:8b:a0:ea:67:cd:e5:ac:df:46:5c:
3e:b5:89:06:ab:8e:dd:f6:36:62:b8:ec:85:1b:1f:3c:83:87:
da:f6:3b:9c:1f:05:37:05:cc:05:2d:f8:25:7b:0f:8b:e7:3b:
48:c6:8f:e6:11:42:52:f6:84:bc:09:7a:63:4e:e5:74:36:fc:
71:e7:87:ff:03:3c:8a:92:db:bf:c9:3b:7b:94:25:9d:7c:be:
30:af:47:cc:16:d9:cb:d3:11:a0:20:48:a2:07:fe:ab:82:f7:
f6:12:82:2d:6e:f0:c9:9a:41:8c:d1:15:49:41:2c:52:46:e4:
2f:f1:71:17:a6:ba:e0:5d:9c:4f:d4:79:ec:dd:8b:7d:a6:40:
1d:6b:00:b9:56:3d:58:b8:53:8a:c2:53:b3:50:e2:93:b2:6a:
e6:f5:bf:88:c2:3e:03:5e:9c:95:1c:2b:1e:0f:21:b1:f3:2b:
59:bb:8e:d3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEay9RW35+pt9nSJ5RAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTI0MDcyOTEzMDAzOFoXDTI0MTAyNzEzMDAzOFowLzEtMCsGA1UEAxMk
YWIxM2Y0ODMtMzRkYi00MmVlLTkxMjYtYWJlOWQwZDRjMDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEnD0dAX8bYusZKXzVcjjmcoR0aIkpM7l7kX
quIlj+B3h9pbi5qmP03Mq2AODZcSZNLFOTGlc3WrD58n7IwmFuhXRLT7sLp66GP+
yF7vDxjcCciD3wg6IL4ethjKdJtgo5VUopKOjKlYXbki0mJ8epCSMcxj/sjlzdOR
5CL2C03pOXzExhh1+lrvn7myrzBDzmS0DEl4RA1h4hHpA4g0hyZdmrq6dUUdgQZ+
f5H6YMZYxwHminlwT9QHQRKXc5dkiIXgFMHSxvn2sD9+6uz/zCskKjeP/HsJAw0X
YLpp9KxroNHQ9NUpuQk4IShbf9Af5BmeRxX4esRjOoNLB7F53wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAb0ibfrC9LUXUn8ojk1+jHWKi5tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvZGVhZmM0MjctNWE5ZC0z
Mzk4LThjYjEtOTBlNGRiNjVkNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQJFaAwQA
rfXZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADa2Zv4l1+91QSMfzsyxDjwTArsilR6ByjO26rWnDzhQn+YZ
pwu3aERw3km7yxPGu2yDlJygTK5hfmdO9tSVKuN6qaI0oF7cXWBrpxXLEcoXi6Dq
Z83lrN9GXD61iQarjt32NmK47IUbHzyDh9r2O5wfBTcFzAUt+CV7D4vnO0jGj+YR
QlL2hLwJemNO5XQ2/HHnh/8DPIqS27/JO3uUJZ18vjCvR8wW2cvTEaAgSKIH/quC
9/YSgi1u8MmaQYzRFUlBLFJG5C/xcRemuuBdnE/Ueezdi32mQB1rALlWPVi4U4rC
U7NQ4pOyaub1v4jCPgNenJUcKx4PIbHzK1m7jtM=
-----END CERTIFICATE-----
Generated at Wed Aug 28 19:49:08 2024 by rpki-client on console-ams.rpki-client.org