Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cdbf841-4896-3a6b-8387-dca09a97b7a8.roa
File: 8cdbf841-4896-3a6b-8387-dca09a97b7a8.roa (raw, json)
Hash identifier: rgpEDLkON72m8o9+Zse7NMuaGW9WIs3YaGYtcDac4Ds=
Subject key identifier: 1D:3F:E6:65:02:C8:A2:78:3D:75:75:4D:C3:59:43:3A:F0:C9:A5:75
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858470743B03AECEB8465F6A74880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cdbf841-4896-3a6b-8387-dca09a97b7a8.roa
Signing time: Wed 28 Aug 2024 17:46:59 +0000
ROA not before: Wed 28 Aug 2024 17:46:59 +0000
ROA not after: Tue 26 Nov 2024 18:46:59 +0000
asID: 0
IP address blocks: 8.39.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 28 Aug 2024 23:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:07:43:b0:3a:ec:eb:84:65:f6:a7:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Aug 28 17:46:59 2024 GMT
Not After : Nov 26 18:46:59 2024 GMT
Subject: CN=a7f07d0b-b19e-4b95-b8c4-29911842990d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:fe:e5:81:b2:d9:21:6a:66:80:c2:14:15:
d1:4f:20:63:47:1f:a2:38:98:b0:55:bb:bd:75:6d:
6c:ad:14:49:b6:be:61:d7:bb:d9:4c:a0:ef:25:85:
87:0f:06:94:d8:75:fb:f0:06:45:b5:34:ed:d9:ee:
22:96:38:b0:ca:ec:b7:42:8b:f4:86:8b:e6:f7:99:
e4:70:cb:29:61:71:9e:b2:a3:82:77:f8:6e:a7:32:
2a:58:10:c9:2b:81:e4:74:f6:5e:e7:cc:9a:61:5e:
0f:ef:fe:6f:ed:53:d6:22:26:29:85:b5:74:a6:52:
5f:72:b0:0d:44:f6:76:77:ab:8c:d7:45:52:df:64:
b9:86:08:04:7e:7b:61:2b:6e:31:e5:e0:8c:9e:12:
57:3d:2a:6c:fb:e3:93:1e:d2:06:b0:ea:59:8d:82:
24:32:fe:29:c9:e8:68:ae:2e:e9:d0:cf:de:2c:e3:
41:9b:93:31:0c:9e:55:d8:3b:6d:8b:0d:60:ab:64:
38:1a:58:01:9a:87:78:51:eb:3c:f0:11:f1:18:25:
86:79:0a:86:62:9c:71:e7:01:7a:02:23:1c:67:f3:
12:2d:27:c2:e6:81:8b:ae:69:c9:da:89:37:d0:ad:
91:bd:ed:fb:3c:8b:32:f5:4d:21:34:cb:a2:24:00:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:E6:65:02:C8:A2:78:3D:75:75:4D:C3:59:43:3A:F0:C9:A5:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8cdbf841-4896-3a6b-8387-dca09a97b7a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.39.70.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:5f:05:6d:e0:9e:48:1d:18:e5:eb:21:38:48:c9:8c:b5:46:
66:2e:87:b9:c4:08:77:1f:9e:a9:73:9f:1f:df:7b:a6:a0:d4:
cc:d9:fe:50:49:a0:06:2b:ea:03:be:cd:43:61:fd:8a:e7:29:
68:34:11:2e:7f:b5:72:5b:26:0d:09:2d:b3:39:2d:7f:41:5a:
1e:de:41:47:64:0e:10:94:b1:20:1f:bf:10:17:83:d1:91:f2:
78:85:ed:6b:c7:06:b0:3c:76:8c:44:33:06:e3:23:61:10:91:
21:c5:3f:58:34:80:3b:bf:7f:2c:84:9e:f3:fc:ce:4d:ad:b3:
d8:e0:d1:aa:6f:eb:10:ad:0b:ea:cb:c4:ab:28:35:ee:01:4c:
ec:fe:45:b1:48:b1:7e:0e:c0:80:09:63:00:f9:91:f8:b1:1e:
46:d0:56:b0:3c:28:1d:65:83:71:94:14:aa:8e:ef:8b:be:f9:
e3:4b:1f:83:fe:c1:d0:01:86:f7:c3:f6:28:fc:9b:fd:ac:8d:
0c:d3:fa:6a:29:d2:76:f7:a6:43:4b:60:ab:c7:01:b8:51:2c:
68:d3:9a:5c:03:a8:e2:8e:6d:c3:eb:da:67:5d:c8:58:a6:96:
65:9d:d8:74:45:0f:58:39:3c:77:1d:5c:2b:4d:b4:81:20:20:
6e:cf:73:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcHQ7A67OuEZfanSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI0MDgyODE3NDY1OVoXDTI0MTEyNjE4NDY1OVowLzEtMCsGA1UEAxMk
YTdmMDdkMGItYjE5ZS00Yjk1LWI4YzQtMjk5MTE4NDI5OTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghP+5YGy2SFqZoDCFBXRTyBjRx+iOJiwVbu9
dW1srRRJtr5h17vZTKDvJYWHDwaU2HX78AZFtTTt2e4iljiwyuy3Qov0hovm95nk
cMspYXGesqOCd/hupzIqWBDJK4HkdPZe58yaYV4P7/5v7VPWIiYphbV0plJfcrAN
RPZ2d6uM10VS32S5hggEfnthK24x5eCMnhJXPSps++OTHtIGsOpZjYIkMv4pyeho
ri7p0M/eLONBm5MxDJ5V2Dttiw1gq2Q4GlgBmod4Ues88BHxGCWGeQqGYpxx5wF6
AiMcZ/MSLSfC5oGLrmnJ2ok30K2Rve37PIsy9U0hNMuiJAD9KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB0/5mUCyKJ4PXV1TcNZQzrwyaV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGNkYmY4NDEtNDg5Ni0z
YTZiLTgzODctZGNhMDlhOTdiN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBCCdGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVfBW3gnkgdGOXrIThIyYy1RmYuh7nECHcfnqlznx/fe6ag1MzZ/lBJ
oAYr6gO+zUNh/YrnKWg0ES5/tXJbJg0JLbM5LX9BWh7eQUdkDhCUsSAfvxAXg9GR
8niF7WvHBrA8doxEMwbjI2EQkSHFP1g0gDu/fyyEnvP8zk2ts9jg0apv6xCtC+rL
xKsoNe4BTOz+RbFIsX4OwIAJYwD5kfixHkbQVrA8KB1lg3GUFKqO74u++eNLH4P+
wdABhvfD9ij8m/2sjQzT+mop0nb3pkNLYKvHAbhRLGjTmlwDqOKObcPr2mddyFim
lmWd2HRFD1g5PHcdXCtNtIEgIG7Pc0k=
-----END CERTIFICATE-----
Generated at Thu Aug 29 01:57:07 2024 by rpki-client on console-ams.rpki-client.org