Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f3fe20de-8f81-3a6e-89e0-18e522c02f6a.roa
File: f3fe20de-8f81-3a6e-89e0-18e522c02f6a.roa (raw, json)
Hash identifier: wtAKQjvd9UlzTM02VZEXGRtPKgNtmLqcIprE6VUfS94=
Subject key identifier: 79:8B:D3:42:47:3A:A2:46:B8:02:5B:4D:9A:D8:B8:79:B8:B5:D4:5A
Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial: 010D0C9F43285847DA8B835311049B6A9D32A400
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f3fe20de-8f81-3a6e-89e0-18e522c02f6a.roa
Signing time: Tue 12 Nov 2024 10:07:16 +0000
ROA not before: Tue 12 Nov 2024 10:07:16 +0000
ROA not after: Mon 10 Feb 2025 10:07:16 +0000
asID: 36007
IP address blocks: 45.61.49.0/24 maxlen: 24
45.61.53.0/24 maxlen: 24
45.61.54.0/24 maxlen: 24
45.61.55.0/24 maxlen: 24
146.71.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 13:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:da:8b:83:53:11:04:9b:6a:9d:32:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Validity
Not Before: Nov 12 10:07:16 2024 GMT
Not After : Feb 10 10:07:16 2025 GMT
Subject: CN=a2585682-02b1-4a0a-b8fe-744ab572e12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:f9:f2:85:39:f9:cf:4c:bc:4c:7c:a9:c2:
c2:29:ea:65:17:a8:17:7c:fb:93:08:f3:1f:bd:88:
ab:78:e4:32:43:5a:40:af:f6:3e:66:59:6f:24:e5:
3d:43:f7:56:0b:c9:f1:f6:e8:1c:52:be:e6:89:29:
cd:fd:6b:52:2c:5f:ea:13:f6:a1:12:17:53:81:77:
4b:6b:da:98:dd:70:9f:01:65:4a:4b:1d:e2:25:76:
12:53:9f:48:6b:ef:04:e7:51:92:59:64:2c:ce:45:
16:a4:1c:5d:1b:df:db:7a:05:b6:c6:9f:2c:5e:10:
83:71:ef:db:98:b0:e3:fc:4e:f2:2e:05:8f:90:a5:
57:e2:8a:de:aa:0d:78:70:df:7c:c5:73:93:3d:ed:
6d:28:ac:d8:95:eb:75:c3:1e:62:5a:21:ee:40:8b:
17:4e:67:19:b5:c1:0e:1c:4d:e2:7e:b7:49:80:81:
4c:52:6d:08:67:66:77:9b:bb:ab:ad:34:ff:18:e3:
46:7f:20:05:7b:fe:a3:71:4a:c0:7a:aa:01:d9:ef:
96:35:6a:ad:e4:0c:0a:1b:a7:56:e9:f7:84:25:ea:
f9:f9:ea:26:ba:14:23:f4:39:57:e4:fb:bf:74:d5:
7d:4b:22:2d:c1:a3:2b:28:3e:04:36:2a:dc:7d:2e:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:D3:42:47:3A:A2:46:B8:02:5B:4D:9A:D8:B8:79:B8:B5:D4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f3fe20de-8f81-3a6e-89e0-18e522c02f6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
X509v3 Authority Key Identifier:
keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
sbgp-ipAddrBlock: critical
IPv4:
45.61.49.0/24
45.61.53.0-45.61.55.255
146.71.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:0d:66:a6:08:d4:f9:8e:57:43:99:5d:a1:19:83:01:23:ad:
85:4b:c2:4d:e8:dc:c2:95:2f:8b:f5:16:ae:97:2f:3a:1b:6e:
fa:5a:a1:a0:be:48:e9:bf:4b:6e:cf:35:eb:f5:36:84:fb:94:
44:1b:df:1c:91:31:46:8a:84:83:dc:e4:4a:59:99:f1:52:ff:
ef:cd:e6:30:d9:45:2f:f0:78:b2:2e:3a:17:ec:1d:cf:85:ee:
b0:0f:24:e7:02:78:e0:6a:65:22:24:e8:d3:5e:84:ec:ae:a1:
4c:16:e5:a6:c8:5f:0b:dc:22:b7:e6:b8:11:e1:92:d6:5f:15:
4c:86:52:26:9f:ab:09:f6:5b:b1:4a:70:f1:d8:c9:6c:d3:cd:
e3:19:63:29:2c:97:0c:f4:c5:b8:de:62:fc:9d:5c:72:8d:39:
a0:c1:ef:02:83:70:8d:30:a3:f7:c6:bb:72:30:a1:37:d8:0b:
3a:64:1e:c4:a2:63:ee:a6:ab:5f:f8:da:39:0b:cc:fa:24:c7:
12:36:a8:22:fc:02:9b:6e:71:0f:93:9f:ea:8a:28:d7:ba:6f:
05:73:e4:e5:93:52:ad:e0:46:8c:bc:11:2b:56:86:57:26:ea:
84:74:2c:16:0a:b7:3f:d0:57:1a:e1:6f:b3:b3:50:a4:40:95:
29:72:3c:28
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEfai4NTEQSbap0ypAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0
ZmZkMB4XDTI0MTExMjEwMDcxNloXDTI1MDIxMDEwMDcxNlowLzEtMCsGA1UEAxMk
YTI1ODU2ODItMDJiMS00YTBhLWI4ZmUtNzQ0YWI1NzJlMTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC358oU5+c9MvEx8qcLCKeplF6gXfPuTCPMf
vYireOQyQ1pAr/Y+ZllvJOU9Q/dWC8nx9ugcUr7miSnN/WtSLF/qE/ahEhdTgXdL
a9qY3XCfAWVKSx3iJXYSU59Ia+8E51GSWWQszkUWpBxdG9/begW2xp8sXhCDce/b
mLDj/E7yLgWPkKVX4oreqg14cN98xXOTPe1tKKzYlet1wx5iWiHuQIsXTmcZtcEO
HE3ifrdJgIFMUm0IZ2Z3m7urrTT/GONGfyAFe/6jcUrAeqoB2e+WNWqt5AwKG6dW
6feEJer5+eomuhQj9DlX5Pu/dNV9SyItwaMrKD4ENircfS6obQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFHmL00JHOqJGuAJbTZrYuHm4tdRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj
OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvZjNmZTIwZGUtOGY4MS0z
YTZlLTg5ZTAtMThlNTIyYzAyZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm
OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1
NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1
NjA3NTRmZmQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALT0xMAwD
BAAtPTUDBAMtPTADBACSR04wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJg1mpgjU+Y5XQ5ldoRmDASOthUvC
TejcwpUvi/UWrpcvOhtu+lqhoL5I6b9Lbs816/U2hPuURBvfHJExRoqEg9zkSlmZ
8VL/783mMNlFL/B4si46F+wdz4XusA8k5wJ44GplIiTo016E7K6hTBblpshfC9wi
t+a4EeGS1l8VTIZSJp+rCfZbsUpw8djJbNPN4xljKSyXDPTFuN5i/J1cco05oMHv
AoNwjTCj98a7cjChN9gLOmQexKJj7qarX/jaOQvM+iTHEjaoIvwCm25xD5Of6ooo
17pvBXPk5ZNSreBGjLwRK1aGVybqhHQsFgq3P9BXGuFvs7NQpECVKXI8KA==
-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:12 2024 by rpki-client on console-ams.rpki-client.org