Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e69f23f9-fa2d-30f5-b75a-ed92af1ef8aa.roa
File: e69f23f9-fa2d-30f5-b75a-ed92af1ef8aa.roa (raw, json)
Hash identifier: 7xA4A6AbzkVXGoS1kATJrBEZlTwRuC19Di3uVvo91Z4=
Subject key identifier: DF:E3:30:BE:35:66:BA:48:8D:BC:2E:B8:26:5A:FF:F2:78:66:33:D9
Certificate issuer: /CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Certificate serial: 010D0C9F4328584250ADE759B234A583BAA88400
Authority key identifier: 41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e69f23f9-fa2d-30f5-b75a-ed92af1ef8aa.roa
Signing time: Fri 23 Jun 2023 13:00:19 +0000
ROA not before: Fri 23 Jun 2023 13:00:19 +0000
ROA not after: Thu 21 Sep 2023 13:00:19 +0000
asID: 394177
IP address blocks: 64.20.216.0/22 maxlen: 22
170.39.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:50:ad:e7:59:b2:34:a5:83:ba:a8:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a
Validity
Not Before: Jun 23 13:00:19 2023 GMT
Not After : Sep 21 13:00:19 2023 GMT
Subject: CN=2670f2a8-0023-4d04-9c1c-a23ffa463d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:b1:6f:20:fb:d6:28:4f:80:8e:a2:7d:e2:
69:4f:23:15:a6:53:4b:97:0d:37:6a:90:d7:af:d4:
dd:5a:b0:74:a6:66:2a:74:de:16:90:6f:94:f5:5d:
fe:cb:f4:ae:ff:fb:11:83:07:14:1a:82:64:54:b2:
16:22:8f:f5:f3:96:bf:23:36:03:17:dc:33:97:d8:
ba:43:f9:e6:9c:43:a7:af:73:2d:29:d4:78:41:f4:
0e:9b:b3:d2:de:df:21:f0:a0:fb:24:e0:f9:05:45:
a9:33:48:6a:2d:23:02:61:25:29:78:3a:8f:83:ee:
cd:ab:98:48:92:50:73:32:d5:d0:ac:9f:71:65:7c:
f8:bc:1b:47:df:d1:c9:2b:e0:71:b3:23:5f:0b:8a:
d5:ac:c1:9f:e0:ba:5e:b8:08:47:0b:0b:04:46:5e:
f0:3f:9c:49:8f:c4:e4:a2:1a:4b:d8:58:ad:36:d3:
34:da:e9:27:a5:11:12:0f:28:1d:41:a3:2d:34:1c:
77:1c:52:8e:31:0f:ea:36:18:2d:29:22:c1:45:62:
d8:25:7a:1b:c4:21:b9:39:dc:72:76:b2:90:1e:e7:
d9:79:14:c3:c4:ca:a6:5e:ff:35:1a:d6:a1:4a:b6:
c5:07:18:59:57:08:6c:ec:ed:40:5e:71:19:88:3a:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E3:30:BE:35:66:BA:48:8D:BC:2E:B8:26:5A:FF:F2:78:66:33:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/e69f23f9-fa2d-30f5-b75a-ed92af1ef8aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.crl
X509v3 Authority Key Identifier:
keyid:41:7C:7B:A8:34:ED:81:03:82:86:EE:D9:97:FA:70:1C:5B:6F:27:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1dbbbca0-01f5-4c72-958f-9e5ee2c99e2a.cer
sbgp-ipAddrBlock: critical
IPv4:
64.20.216.0/22
170.39.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:bb:77:ac:c2:35:6c:6a:63:2a:24:44:be:d7:c2:35:3e:74:
23:77:ee:7c:42:1f:e7:1b:85:6c:49:5f:31:d3:a0:e7:75:50:
04:8c:af:c0:03:64:cf:27:80:a6:c7:87:d2:b6:0f:d2:9d:9a:
74:a4:0f:50:4c:87:1f:6c:5e:5e:60:ed:c4:1b:ee:e4:81:ef:
ed:c4:ac:f4:12:db:64:28:b5:5f:ed:2f:1e:be:a7:f3:57:d1:
95:de:56:85:75:28:aa:e7:3c:eb:ff:d3:1b:39:75:32:2d:4a:
09:cb:a5:3c:ae:89:c3:6e:09:0d:e5:5c:4e:6e:28:e6:bc:29:
33:b4:da:22:06:20:99:f9:fb:54:68:76:3e:b2:06:cc:52:80:
15:02:97:a6:2b:0d:0c:be:08:40:10:f4:42:a1:aa:73:cb:90:
c1:bf:2e:d5:b3:a3:be:67:ce:2b:f6:50:af:52:f4:87:18:8f:
6e:8c:b5:7e:45:5c:f2:7c:12:33:d2:6a:d8:c1:a3:38:5b:89:
43:cc:1b:ef:0f:7a:df:d8:20:ad:04:e8:28:a2:d3:43:f9:e0:
7c:d9:13:72:ac:69:eb:73:bf:ad:c7:63:41:6a:16:91:be:2e:
94:db:56:0c:5f:08:e1:12:3f:78:45:cf:f5:7c:3e:ce:09:e6:
d8:a9:95:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEJQredZsjSlg7qohAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRiYmJjYTAtMDFmNS00YzcyLTk1OGYtOWU1ZWUyYzk5
ZTJhMB4XDTIzMDYyMzEzMDAxOVoXDTIzMDkyMTEzMDAxOVowLzEtMCsGA1UEAxMk
MjY3MGYyYTgtMDAyMy00ZDA0LTljMWMtYTIzZmZhNDYzZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGOxbyD71ihPgI6ifeJpTyMVplNLlw03apDX
r9TdWrB0pmYqdN4WkG+U9V3+y/Su//sRgwcUGoJkVLIWIo/185a/IzYDF9wzl9i6
Q/nmnEOnr3MtKdR4QfQOm7PS3t8h8KD7JOD5BUWpM0hqLSMCYSUpeDqPg+7Nq5hI
klBzMtXQrJ9xZXz4vBtH39HJK+BxsyNfC4rVrMGf4LpeuAhHCwsERl7wP5xJj8Tk
ohpL2FitNtM02uknpRESDygdQaMtNBx3HFKOMQ/qNhgtKSLBRWLYJXobxCG5Odxy
drKQHufZeRTDxMqmXv81GtahSrbFBxhZVwhs7O1AXnEZiDoljQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN/jML41ZrpIjbwuuCZa//J4ZjPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJi
YmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVlZTJjOTllMmEvZTY5ZjIzZjktZmEyZC0z
MGY1LWI3NWEtZWQ5MmFmMWVmOGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWRiYmJjYTAtMDFmNS00YzcyLTk1
OGYtOWU1ZWUyYzk5ZTJhLzFkYmJiY2EwLTAxZjUtNGM3Mi05NThmLTllNWVlMmM5
OWUyYS5jcmwwHwYDVR0jBBgwFoAUQXx7qDTtgQOChu7Zl/pwHFtvJwAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZGJiYmNhMC0wMWY1LTRjNzItOTU4Zi05ZTVl
ZTJjOTllMmEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCQBTYAwQC
qiewMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADi7d6zCNWxqYyokRL7XwjU+dCN37nxCH+cbhWxJXzHToOd1
UASMr8ADZM8ngKbHh9K2D9KdmnSkD1BMhx9sXl5g7cQb7uSB7+3ErPQS22QotV/t
Lx6+p/NX0ZXeVoV1KKrnPOv/0xs5dTItSgnLpTyuicNuCQ3lXE5uKOa8KTO02iIG
IJn5+1Rodj6yBsxSgBUCl6YrDQy+CEAQ9EKhqnPLkMG/LtWzo75nziv2UK9S9IcY
j26MtX5FXPJ8EjPSatjBozhbiUPMG+8Pet/YIK0E6Cii00P54HzZE3Ksaetzv63H
Y0FqFpG+LpTbVgxfCOESP3hFz/V8Ps4J5tiplQM=
-----END CERTIFICATE-----
Generated at Sat Aug 12 04:47:14 2023 by rpki-client on console-fra.rpki-client.org