Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/3ef4e7cc-7f91-395b-aa49-c5cf5d350c79.roa
File: 3ef4e7cc-7f91-395b-aa49-c5cf5d350c79.roa (raw, json)
Hash identifier: 8H2Vt3MRVmuHNgRODB1Sl1ttiI92G2cc2PulK/sz85U=
Subject key identifier: D4:CF:8B:BC:D0:DD:70:9E:A4:2D:74:9F:C4:D0:C7:8F:25:67:93:70
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F4328583E9146368E207D4EED906FF600
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/3ef4e7cc-7f91-395b-aa49-c5cf5d350c79.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Wed 02 Aug 2028 04:00:00 +0000
asID: 396982
IP address blocks: 159.112.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:91:46:36:8e:20:7d:4e:ed:90:6f:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 2 04:00:00 2028 GMT
Subject: CN=962fa9e9-b70a-40e4-8eae-4bc9a1fa421d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:b2:05:69:d2:19:45:82:75:93:1e:af:0d:
cf:ba:d3:1f:77:ec:00:65:93:e9:34:37:c8:50:94:
9f:7f:0f:63:90:d1:e2:fd:70:50:9e:2a:db:40:28:
71:f5:3f:d4:b3:69:27:c7:07:01:8f:fe:31:19:e6:
fa:8f:23:a0:fa:37:ac:ee:15:81:24:ee:62:4c:32:
4e:49:02:1b:33:f4:03:de:87:2c:2e:2a:10:74:ce:
6a:3d:a7:90:39:e6:8d:c5:e7:77:03:8b:d7:44:77:
33:02:21:5e:07:1a:3c:0d:87:85:bc:55:8b:0a:e2:
f5:12:07:7b:7a:68:7e:7d:21:85:83:b8:87:6a:bb:
d8:4d:ee:ff:32:c4:9c:55:c1:08:3a:12:5a:14:a4:
96:3d:5f:5b:b8:92:6e:80:9c:7b:bb:3a:c3:2e:1a:
17:5f:a9:0c:85:23:f5:2d:27:52:e3:a6:09:fd:5e:
cb:c1:9c:2b:ef:ba:a0:33:34:bf:f9:fd:2f:ab:90:
be:6f:6c:cb:2b:de:98:2e:8f:0b:f8:ac:4c:72:14:
1a:53:bd:b7:02:0c:e3:3c:2b:f1:f8:bd:e9:4b:ad:
9c:0d:fa:b2:15:56:71:c2:2a:c4:fd:fe:ef:a1:4d:
84:0b:77:c5:b9:fe:29:48:a9:4a:2f:47:60:47:5a:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:8B:BC:D0:DD:70:9E:A4:2D:74:9F:C4:D0:C7:8F:25:67:93:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/3ef4e7cc-7f91-395b-aa49-c5cf5d350c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
159.112.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:54:86:da:b1:34:d3:d6:43:52:8c:8a:44:a8:5d:64:03:59:
3c:bc:c2:f7:26:7a:30:4e:b1:b7:a8:86:9e:62:74:25:57:d3:
30:79:c9:34:f2:81:4f:d4:cb:91:31:fe:ab:ba:a5:4f:7c:4e:
be:3d:2f:8d:a8:3a:c7:a8:6d:3d:ca:0d:2f:a0:c1:f7:00:01:
d0:f6:b0:65:cb:ab:4c:04:fc:fc:32:f8:84:2e:20:0d:30:32:
e6:05:0f:00:92:3b:0c:8d:73:46:65:c7:4e:5f:5f:0b:9f:5a:
67:01:d0:31:6b:01:0c:c8:88:fb:f3:b6:c4:7f:5b:8d:ca:4c:
96:96:42:22:c0:4a:6c:fc:e7:41:f5:66:28:40:be:6d:e8:45:
d4:2f:01:e0:eb:03:46:a8:84:4d:0c:73:58:2f:cf:fa:7f:74:
de:13:7f:c4:9a:6d:f2:80:bb:0d:78:42:6e:a8:c9:d8:2b:50:
18:5e:b2:8b:b5:78:43:62:52:e0:e2:b6:23:0c:03:de:42:52:
2c:b6:ba:e9:2d:6b:58:d3:2a:4f:81:34:89:24:73:78:a4:5c:
95:70:54:0e:f2:88:13:45:00:e5:86:c9:33:46:30:48:8e:a3:
5a:2f:2f:24:31:46:30:ed:ba:6f:e1:5c:3a:b6:3f:10:7b:6c:
d0:2b:54:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6RRjaOIH1O7ZBv9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3
OTI4MB4XDTIyMDcxMzEyMDAwMFoXDTI4MDgwMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTYyZmE5ZTktYjcwYS00MGU0LThlYWUtNGJjOWExZmE0MjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3+yBWnSGUWCdZMerw3PutMfd+wAZZPpNDfI
UJSffw9jkNHi/XBQnirbQChx9T/Us2knxwcBj/4xGeb6jyOg+jes7hWBJO5iTDJO
SQIbM/QD3ocsLioQdM5qPaeQOeaNxed3A4vXRHczAiFeBxo8DYeFvFWLCuL1Egd7
emh+fSGFg7iHarvYTe7/MsScVcEIOhJaFKSWPV9buJJugJx7uzrDLhoXX6kMhSP1
LSdS46YJ/V7LwZwr77qgMzS/+f0vq5C+b2zLK96YLo8L+KxMchQaU723AgzjPCvx
+L3pS62cDfqyFVZxwirE/f7voU2EC3fFuf4pSKlKL0dgR1rmFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNTPi7zQ3XCepC10n8TQx48lZ5NwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi
MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvM2VmNGU3Y2MtN2Y5MS0z
OTViLWFhNDktYzVjZjVkMzUwYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1
MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy
NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2
ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn3D8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1UhtqxNNPWQ1KMikSoXWQDWTy8wvcmejBOsbeohp5idCVX0zB5yTTy
gU/Uy5Ex/qu6pU98Tr49L42oOseobT3KDS+gwfcAAdD2sGXLq0wE/Pwy+IQuIA0w
MuYFDwCSOwyNc0Zlx05fXwufWmcB0DFrAQzIiPvztsR/W43KTJaWQiLASmz850H1
ZihAvm3oRdQvAeDrA0aohE0Mc1gvz/p/dN4Tf8SabfKAuw14Qm6oydgrUBhesou1
eENiUuDitiMMA95CUiy2uukta1jTKk+BNIkkc3ikXJVwVA7yiBNFAOWGyTNGMEiO
o1ovLyQxRjDtum/hXDq2PxB7bNArVEo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:10 2023 by rpki-client on console-fra.rpki-client.org