Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/e5a21154-e3e8-35c8-816a-d713860fe75f.roa
File: e5a21154-e3e8-35c8-816a-d713860fe75f.roa (raw, json)
Hash identifier: icaVrrw8zBR6ZG536hYP0ZLdxhb2l2I18pWi2uB2svA=
Subject key identifier: 89:34:07:3F:7F:0A:18:9E:8D:7A:E1:68:4C:3C:80:85:A8:8B:20:BB
Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
Certificate serial: 010D0C9F4328583EA1E55121E6C86829DEBC2C80
Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/e5a21154-e3e8-35c8-816a-d713860fe75f.roa
Signing time: Thu 14 Jul 2022 20:54:40 +0000
ROA not before: Thu 14 Jul 2022 20:54:40 +0000
ROA not after: Wed 16 Oct 2024 04:00:00 +0000
asID: 32867
IP address blocks: 64.5.64.0/20 maxlen: 20
64.186.16.0/21 maxlen: 21
66.172.192.0/18 maxlen: 18
74.221.32.0/20 maxlen: 20
199.116.180.0/22 maxlen: 22
199.247.64.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:a1:e5:51:21:e6:c8:68:29:de:bc:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849
Validity
Not Before: Jul 14 20:54:40 2022 GMT
Not After : Oct 16 04:00:00 2024 GMT
Subject: CN=7bb0bbe4-357e-44ca-aaa8-fbaa18011257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:89:32:77:24:38:f2:b2:29:27:25:69:0e:
e4:98:de:a1:dd:bd:20:67:03:00:63:76:f3:9e:d1:
3f:ed:a0:5a:95:ef:66:a1:f2:41:4b:33:a7:52:9f:
b6:21:22:7f:1c:2b:60:79:4b:66:b0:05:46:f1:d3:
46:de:10:43:01:89:ba:e6:fc:c0:be:e8:39:f3:db:
b0:7b:e4:ef:c3:c2:92:cb:e6:44:b0:57:e8:6c:5b:
b5:fe:f6:c3:6d:3a:2b:f9:19:5b:ff:a5:cd:9e:53:
55:d6:3c:e2:d3:a8:28:1f:75:8a:33:c7:c7:f0:e5:
82:46:be:5f:3d:fc:ed:2e:3e:3d:9c:73:75:ea:04:
0f:62:3a:da:46:30:a8:7b:99:20:ed:d9:42:02:44:
53:84:81:36:a0:7f:7d:19:a1:06:8e:9e:3f:d5:45:
9d:b4:4a:4b:42:c3:99:fb:19:e8:0a:bd:af:23:0c:
37:f6:81:cf:04:46:47:40:cc:4e:ad:0a:eb:76:60:
30:b3:59:7d:1f:e7:8c:d4:ff:e9:8f:bb:c2:17:2b:
10:a9:22:ea:7f:59:07:2e:c8:f8:47:2b:c4:38:2f:
9d:dc:d5:73:4e:86:20:6f:46:bf:7b:a4:b0:f1:2b:
1f:1c:e4:b7:89:2b:b6:98:41:f4:72:03:2b:3d:b9:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:34:07:3F:7F:0A:18:9E:8D:7A:E1:68:4C:3C:80:85:A8:8B:20:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/e5a21154-e3e8-35c8-816a-d713860fe75f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl
X509v3 Authority Key Identifier:
keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer
sbgp-ipAddrBlock: critical
IPv4:
64.5.64.0/20
64.186.16.0/21
66.172.192.0/18
74.221.32.0/20
199.116.180.0/22
199.247.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4b:d4:b8:4b:d9:03:04:b4:26:46:57:cd:23:9d:31:84:8a:
68:89:31:1f:e6:10:6d:11:16:40:be:44:c0:89:37:52:d8:cf:
09:03:55:1e:9b:28:3d:b4:21:48:de:c3:41:2d:1e:ea:a8:23:
ff:8d:5d:50:71:93:2b:33:9f:56:00:99:6c:31:3a:5a:9a:92:
0e:38:57:b8:9d:05:a0:85:95:50:1e:07:6c:25:23:cb:64:df:
70:64:ec:b8:b2:f1:71:93:7b:7c:ee:32:99:7d:1d:66:54:53:
53:b0:4e:03:19:a3:74:5c:79:62:28:8f:cc:c5:94:73:8e:2f:
74:f3:c6:8c:9b:0e:42:21:60:7a:08:2d:8b:8f:67:f3:e2:33:
15:3c:1d:e2:75:d1:0e:24:51:58:06:74:df:24:7d:16:32:ce:
07:a4:1e:c0:ca:83:98:aa:67:aa:1c:76:ad:0a:f5:20:61:a8:
4d:77:5b:ff:7e:20:a8:c5:40:77:1f:9c:9f:fd:78:46:34:0e:
bb:3b:ef:e6:b0:18:9e:0d:73:98:92:14:e4:b0:4d:e4:06:e9:
68:35:aa:08:42:84:a7:03:86:8a:57:30:62:0b:13:76:97:23:
b8:91:26:bc:ca:44:93:51:74:24:48:15:91:b9:53:49:fb:00:
31:0d:16:10
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWD6h5VEh5shoKd68LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy
ODQ5MB4XDTIyMDcxNDIwNTQ0MFoXDTI0MTAxNjA0MDAwMFowLzEtMCsGA1UEAxMk
N2JiMGJiZTQtMzU3ZS00NGNhLWFhYTgtZmJhYTE4MDExMjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0KJMnckOPKyKSclaQ7kmN6h3b0gZwMAY3bz
ntE/7aBale9mofJBSzOnUp+2ISJ/HCtgeUtmsAVG8dNG3hBDAYm65vzAvug589uw
e+Tvw8KSy+ZEsFfobFu1/vbDbTor+Rlb/6XNnlNV1jzi06goH3WKM8fH8OWCRr5f
PfztLj49nHN16gQPYjraRjCoe5kg7dlCAkRThIE2oH99GaEGjp4/1UWdtEpLQsOZ
+xnoCr2vIww39oHPBEZHQMxOrQrrdmAws1l9H+eM1P/pj7vCFysQqSLqf1kHLsj4
RyvEOC+d3NVzToYgb0a/e6Sw8SsfHOS3iSu2mEH0cgMrPbnicwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFIk0Bz9/ChiejXrhaEw8gIWoiyC7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj
MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvZTVhMjExNTQtZTNlOC0z
NWM4LTgxNmEtZDcxMzg2MGZlNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4
YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1
Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl
ZjE3NTI4NDkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEQAVAAwQD
QLoQAwQGQqzAAwQESt0gAwQCx3S0AwQEx/dAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAABL1LhL2QMEtCZG
V80jnTGEimiJMR/mEG0RFkC+RMCJN1LYzwkDVR6bKD20IUjew0EtHuqoI/+NXVBx
kyszn1YAmWwxOlqakg44V7idBaCFlVAeB2wlI8tk33Bk7Liy8XGTe3zuMpl9HWZU
U1OwTgMZo3RceWIoj8zFlHOOL3TzxoybDkIhYHoILYuPZ/PiMxU8HeJ10Q4kUVgG
dN8kfRYyzgekHsDKg5iqZ6ocdq0K9SBhqE13W/9+IKjFQHcfnJ/9eEY0Drs77+aw
GJ4Nc5iSFOSwTeQG6Wg1qghChKcDhopXMGILE3aXI7iRJrzKRJNRdCRIFZG5U0n7
ADENFhA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:22 2023 by rpki-client on console-fra.rpki-client.org