Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/813f4d40-179c-354b-b39e-05f926044edd.roa
File: 813f4d40-179c-354b-b39e-05f926044edd.roa (raw, json)
Hash identifier: S+YWdDc6FCHDdV8I1tGaqRPsClvel8TDuiGHBZ/bCK8=
Subject key identifier: 06:45:2B:09:B1:56:1F:9D:D9:1A:58:F0:92:0F:BF:B6:FC:A2:C3:3E
Certificate issuer: /CN=5d7856f3-fc7a-471b-9168-0c51be45b670
Certificate serial: 010D0C9F43285846DFA0102AADB402DF0CE6BE00
Authority key identifier: AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/813f4d40-179c-354b-b39e-05f926044edd.roa
Signing time: Wed 14 Aug 2024 13:00:38 +0000
ROA not before: Wed 14 Aug 2024 13:00:38 +0000
ROA not after: Tue 12 Nov 2024 14:00:38 +0000
asID: 40268
IP address blocks: 23.171.232.0/24 maxlen: 24
2602:f97d::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 17 Oct 2024 21:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:df:a0:10:2a:ad:b4:02:df:0c:e6:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7856f3-fc7a-471b-9168-0c51be45b670
Validity
Not Before: Aug 14 13:00:38 2024 GMT
Not After : Nov 12 14:00:38 2024 GMT
Subject: CN=e6d3f88b-0a4f-4c45-8809-a0bd76ad4568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:02:14:31:71:d9:3a:1b:cd:55:89:2c:35:
cc:1d:20:18:b9:34:0d:00:34:f0:91:6c:23:82:11:
a0:a7:fc:f1:4e:22:a5:79:44:fa:7b:3c:75:c0:43:
5f:c0:f6:51:e3:fd:c0:2e:5d:ce:4c:c5:1a:32:cc:
1a:33:0c:64:77:1b:90:0f:61:d3:94:6e:2d:65:e9:
39:6a:26:d9:77:7b:35:f2:3b:6f:d7:9b:d7:92:a2:
77:42:eb:41:1f:02:fb:94:13:7f:f9:5d:48:e5:59:
78:2a:db:0d:01:b8:b8:88:a1:49:c1:6d:bf:65:6b:
f8:8a:47:ed:83:02:1e:43:85:6f:a8:1a:d8:78:fc:
e8:86:67:7e:7c:a4:cb:cc:14:34:92:48:a7:07:a8:
72:77:81:bf:39:b3:79:36:e4:20:60:a7:54:9b:4d:
4e:e6:72:bc:bf:eb:e4:e2:32:5a:85:e4:bb:0f:ac:
c7:20:91:4b:59:8a:19:23:c3:5b:8c:f3:fb:f8:15:
aa:9a:39:98:f4:34:59:e2:6f:b3:d6:cf:de:b1:9e:
85:e0:36:cf:2d:9a:30:8f:47:d4:62:13:ab:ca:03:
b7:68:2c:38:ca:c4:11:3d:bf:c8:99:e6:46:59:a4:
50:10:7e:29:6c:01:32:06:90:e9:f9:25:3b:2a:77:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:45:2B:09:B1:56:1F:9D:D9:1A:58:F0:92:0F:BF:B6:FC:A2:C3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/813f4d40-179c-354b-b39e-05f926044edd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.crl
X509v3 Authority Key Identifier:
keyid:AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.232.0/24
IPv6:
2602:f97d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:50:3c:22:b8:17:e6:9d:bb:e4:39:c6:5c:bb:73:33:6b:9f:
43:31:8f:fc:b4:45:34:a2:60:a5:48:9e:6b:3c:28:a7:58:02:
3a:88:f6:a1:0c:7a:45:66:88:cc:45:a4:dd:19:12:f9:c2:ec:
10:75:c8:ce:1c:59:c7:f8:ac:7c:99:c0:86:e5:df:f4:b9:53:
27:ab:4f:cc:b5:5b:d7:d0:1d:f7:4a:31:91:22:4f:31:37:49:
80:15:be:0f:0f:af:21:86:5d:8e:46:7e:1f:05:30:70:e8:0d:
5d:cb:8f:95:ff:8a:7b:ae:56:2f:72:40:01:c5:a0:4b:6c:cf:
16:11:80:06:0e:dc:4b:5c:6b:3c:3c:a7:09:2c:9f:80:8e:bb:
72:20:0a:68:a1:c5:24:ef:eb:a7:c6:f8:79:fd:1e:2a:06:8c:
a1:b4:fd:16:50:82:40:5c:fc:80:8c:18:86:4f:e0:a4:d0:10:
d4:42:33:31:6a:44:9a:53:b5:28:0c:93:77:f3:f9:c3:4e:f1:
85:2c:1b:93:57:17:a3:d8:f9:0e:81:89:e5:7d:f0:a4:4a:21:
e7:4a:0a:b7:54:b8:e8:ee:62:b8:02:5f:cc:5e:68:59:05:ae:
0e:5a:55:04:12:d6:5d:e3:de:58:87:fb:58:77:a4:8f:20:5f:
5b:06:31:bc
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEbfoBAqrbQC3wzmvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ3ODU2ZjMtZmM3YS00NzFiLTkxNjgtMGM1MWJlNDVi
NjcwMB4XDTI0MDgxNDEzMDAzOFoXDTI0MTExMjE0MDAzOFowLzEtMCsGA1UEAxMk
ZTZkM2Y4OGItMGE0Zi00YzQ1LTg4MDktYTBiZDc2YWQ0NTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggwCFDFx2TobzVWJLDXMHSAYuTQNADTwkWwj
ghGgp/zxTiKleUT6ezx1wENfwPZR4/3ALl3OTMUaMswaMwxkdxuQD2HTlG4tZek5
aibZd3s18jtv15vXkqJ3QutBHwL7lBN/+V1I5Vl4KtsNAbi4iKFJwW2/ZWv4ikft
gwIeQ4VvqBrYePzohmd+fKTLzBQ0kkinB6hyd4G/ObN5NuQgYKdUm01O5nK8v+vk
4jJaheS7D6zHIJFLWYoZI8NbjPP7+BWqmjmY9DRZ4m+z1s/esZ6F4DbPLZowj0fU
YhOrygO3aCw4ysQRPb/ImeZGWaRQEH4pbAEyBpDp+SU7KndXJwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFAZFKwmxVh+d2RpY8JIPv7b8osM+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDc4
NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUxYmU0NWI2NzAvODEzZjRkNDAtMTc5Yy0z
NTRiLWIzOWUtMDVmOTI2MDQ0ZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ODU2ZjMtZmM3YS00NzFiLTkx
NjgtMGM1MWJlNDViNjcwLzVkNzg1NmYzLWZjN2EtNDcxYi05MTY4LTBjNTFiZTQ1
YjY3MC5jcmwwHwYDVR0jBBgwFoAUrTZnnyCo8g3iAQk1xzNzdq0jgAgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZDc4NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUx
YmU0NWI2NzAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6voMA4E
AgACMAgDBgQmAvl9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJUDwiuBfmnbvkOcZcu3Mza59DMY/8tEU0
omClSJ5rPCinWAI6iPahDHpFZojMRaTdGRL5wuwQdcjOHFnH+Kx8mcCG5d/0uVMn
q0/MtVvX0B33SjGRIk8xN0mAFb4PD68hhl2ORn4fBTBw6A1dy4+V/4p7rlYvckAB
xaBLbM8WEYAGDtxLXGs8PKcJLJ+AjrtyIApoocUk7+unxvh5/R4qBoyhtP0WUIJA
XPyAjBiGT+Ck0BDUQjMxakSaU7UoDJN38/nDTvGFLBuTVxej2PkOgYnlffCkSiHn
Sgq3VLjo7mK4Al/MXmhZBa4OWlUEEtZd495Yh/tYd6SPIF9bBjG8
-----END CERTIFICATE-----
Generated at Thu Oct 17 23:19:43 2024 by rpki-client on console-fra.rpki-client.org