Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9c1e1971-1725-398a-a2ae-bd22bb6ac443.roa
File: 9c1e1971-1725-398a-a2ae-bd22bb6ac443.roa (raw, json)
Hash identifier: yQd8uVEbbxHAWXNLck2j/imaJQeQu5140yH+Ss0+Y4c=
Subject key identifier: 89:62:EE:0C:60:0F:B2:91:08:09:AB:87:C5:BD:C5:8A:26:B1:1A:4C
Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial: 010D0C9F432858476428BB22F0D2B5F70AEF6DC0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9c1e1971-1725-398a-a2ae-bd22bb6ac443.roa
Signing time: Tue 01 Oct 2024 00:22:51 +0000
ROA not before: Tue 01 Oct 2024 00:22:51 +0000
ROA not after: Mon 30 Dec 2024 01:22:51 +0000
asID: 834
IP address blocks: 65.87.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:64:28:bb:22:f0:d2:b5:f7:0a:ef:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Validity
Not Before: Oct 1 00:22:51 2024 GMT
Not After : Dec 30 01:22:51 2024 GMT
Subject: CN=83943c2b-0309-4b6a-90ed-cd3976af9de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:81:ed:24:94:e4:4a:79:72:80:22:32:7f:a7:
4c:cb:34:0a:b9:d1:44:40:67:88:6d:74:7b:46:c5:
68:f3:c2:dc:c9:c4:34:ca:f1:b9:ab:fc:1c:d5:e6:
f7:f0:20:b6:17:e9:ce:47:11:98:de:83:df:18:4e:
6c:f4:5d:cc:f5:06:bf:10:6f:82:82:e9:aa:17:45:
bf:86:97:3e:1f:81:64:be:52:42:2e:4e:69:0a:a7:
6f:0c:ee:b0:c2:b6:cb:6e:7a:16:ae:8a:df:e0:b2:
2b:c8:fe:af:d2:66:4f:0f:09:56:d1:ca:c5:ef:45:
80:5b:f6:a2:a4:9d:f6:6b:b7:9c:a5:fc:eb:16:dc:
7b:18:7b:b1:72:78:84:39:30:ac:07:91:91:1a:ea:
0d:69:95:8c:21:70:48:ee:2d:0b:64:1b:d2:56:27:
f5:8a:66:bf:2e:ce:9c:97:96:4e:1a:d5:20:58:ac:
98:d7:36:97:85:ff:93:db:68:bc:96:94:c3:6b:70:
28:41:28:cc:60:99:a8:ac:d6:9b:6c:12:b0:34:aa:
a4:5d:b0:97:0a:01:80:d0:12:d9:45:88:2a:3a:ba:
8a:60:10:8c:05:fe:d3:b7:b9:21:7f:e3:da:9a:57:
14:c5:33:88:c7:c1:e4:60:c9:b1:e8:ba:e8:86:fe:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:EE:0C:60:0F:B2:91:08:09:AB:87:C5:BD:C5:8A:26:B1:1A:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/9c1e1971-1725-398a-a2ae-bd22bb6ac443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
X509v3 Authority Key Identifier:
keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
sbgp-ipAddrBlock: critical
IPv4:
65.87.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:fe:9e:bc:06:d5:ea:d6:34:98:45:02:2d:18:6c:58:34:b4:
20:f2:47:e9:f6:77:ea:91:28:e6:cf:b3:b9:13:95:c3:28:df:
23:b9:71:39:0e:7d:0f:2e:d0:04:08:6d:1d:3b:57:49:59:b5:
c0:dd:c5:56:db:6e:b9:c8:9e:1d:a0:b2:f9:6f:55:a9:cb:fe:
e0:b4:bf:42:2e:a8:01:2f:15:bd:65:6e:30:90:9b:df:cb:9c:
2d:47:df:38:ae:d0:cb:67:84:73:b5:6d:c9:61:d9:63:22:f3:
b0:ad:4b:25:a6:87:ed:ff:89:04:7d:82:df:67:a7:48:e5:2c:
75:d9:c7:53:3c:eb:1e:cf:a1:46:4f:3b:d4:d7:70:ae:c7:1d:
c0:b2:78:84:a5:5f:b6:8e:f9:25:fc:42:89:e6:0a:24:cb:60:
80:bf:5a:e5:84:93:9f:0e:0f:de:a9:76:38:28:3e:cc:a1:52:
79:02:9b:29:b3:2d:11:3c:01:61:e1:17:c9:9f:d2:ac:3a:24:
48:cf:b2:20:17:2f:85:ca:f9:a8:89:41:1e:06:83:d8:f5:57:
3f:f7:5b:80:0a:9e:7a:a5:1b:e9:2d:c0:81:51:10:5f:d7:f6:
23:ac:6a:8b:7f:22:39:15:3a:40:1b:9b:b7:22:af:26:11:99:
26:4d:fc:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdkKLsi8NK19wrvbcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk
NWYzMB4XDTI0MTAwMTAwMjI1MVoXDTI0MTIzMDAxMjI1MVowLzEtMCsGA1UEAxMk
ODM5NDNjMmItMDMwOS00YjZhLTkwZWQtY2QzOTc2YWY5ZGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYHtJJTkSnlygCIyf6dMyzQKudFEQGeIbXR7
RsVo88LcycQ0yvG5q/wc1eb38CC2F+nORxGY3oPfGE5s9F3M9Qa/EG+CgumqF0W/
hpc+H4FkvlJCLk5pCqdvDO6wwrbLbnoWrorf4LIryP6v0mZPDwlW0crF70WAW/ai
pJ32a7ecpfzrFtx7GHuxcniEOTCsB5GRGuoNaZWMIXBI7i0LZBvSVif1ima/Ls6c
l5ZOGtUgWKyY1zaXhf+T22i8lpTDa3AoQSjMYJmorNabbBKwNKqkXbCXCgGA0BLZ
RYgqOrqKYBCMBf7Tt7khf+PamlcUxTOIx8HkYMmx6Lrohv6mTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIli7gxgD7KRCAmrh8W9xYomsRpMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl
Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvOWMxZTE5NzEtMTcyNS0z
OThhLWEyYWUtYmQyMmJiNmFjNDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky
ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk
M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACj+nrwG1erWNJhFAi0YbFg0tCDyR+n2d+qRKObPs7kTlcMo3yO5cTkO
fQ8u0AQIbR07V0lZtcDdxVbbbrnInh2gsvlvVanL/uC0v0IuqAEvFb1lbjCQm9/L
nC1H3ziu0MtnhHO1bclh2WMi87CtSyWmh+3/iQR9gt9np0jlLHXZx1M86x7PoUZP
O9TXcK7HHcCyeISlX7aO+SX8QonmCiTLYIC/WuWEk58OD96pdjgoPsyhUnkCmymz
LRE8AWHhF8mf0qw6JEjPsiAXL4XK+aiJQR4Gg9j1Vz/3W4AKnnqlG+ktwIFREF/X
9iOsaot/IjkVOkAbm7ciryYRmSZN/H4=
-----END CERTIFICATE-----
Generated at Tue Oct 8 18:03:46 2024 by rpki-client on console-ams.rpki-client.org