Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/0052f852-a3d5-34a5-a105-e3154cf60860.roa
File: 0052f852-a3d5-34a5-a105-e3154cf60860.roa (raw, json)
Hash identifier: 5z3e3BI1GMsRjuaWKQfB9q8BmiH2KUJos23rmBl6nco=
Subject key identifier: 2F:C2:1B:AA:52:00:75:EA:9B:ED:9B:A3:11:FB:A6:D6:2F:D4:33:C0
Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial: 010D0C9F4328583F7473EE0A93B4D256E70ADD00
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/0052f852-a3d5-34a5-a105-e3154cf60860.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Wed 21 Aug 2024 04:00:00 +0000
asID: 63394
IP address blocks: 23.184.112.0/24 maxlen: 24
104.237.112.0/20 maxlen: 20
157.52.48.0/20 maxlen: 20
172.86.0.0/20 maxlen: 20
172.86.16.0/21 maxlen: 21
172.86.32.0/19 maxlen: 19
2605:e4c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 31 Oct 2022 19:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:73:ee:0a:93:b4:d2:56:e7:0a:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Aug 21 04:00:00 2024 GMT
Subject: CN=bc296e24-dda5-4f6b-8757-f80fe69698f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:21:b2:02:10:3e:04:f4:2c:8e:3d:25:68:
4f:0f:96:8c:8f:0c:33:bb:88:88:c4:67:f8:4e:b6:
00:49:67:10:b9:3b:97:6f:84:db:6a:c1:d3:fe:cb:
d1:69:f1:b6:11:60:3a:3d:06:4c:32:b3:2f:7d:f0:
a0:1b:10:28:bb:97:96:5f:91:3e:f2:74:27:e3:6e:
f5:4c:51:0a:38:f0:f1:c1:12:31:3a:68:d1:30:bc:
10:7c:98:d6:f7:5f:d1:c8:43:de:8d:1d:a5:5f:50:
b6:00:24:52:a7:5e:c9:4c:64:df:5f:d5:30:20:b6:
3d:d8:4d:ba:33:eb:d8:75:04:39:a0:45:10:4e:3c:
fa:56:90:a8:73:c5:07:fe:08:df:b3:2e:b4:59:c6:
43:6e:b6:82:d5:d7:4f:9c:57:90:65:df:40:34:97:
46:6d:c6:42:c2:1b:62:03:53:4a:90:48:9a:25:49:
a9:19:5b:4e:ad:3b:ac:3b:f0:22:38:47:a1:65:f9:
3e:95:67:26:4d:1b:40:b0:dc:5e:71:76:06:d7:d6:
5f:3e:6e:0b:8e:6b:ac:8d:9b:6f:54:dd:b6:a4:74:
dd:76:b4:61:e9:43:60:ee:c3:ab:ef:c2:cc:56:0d:
58:85:47:47:92:b7:63:06:7c:cc:9f:73:03:52:7c:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:1B:AA:52:00:75:EA:9B:ED:9B:A3:11:FB:A6:D6:2F:D4:33:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/0052f852-a3d5-34a5-a105-e3154cf60860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
X509v3 Authority Key Identifier:
keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
sbgp-ipAddrBlock: critical
IPv4:
23.184.112.0/24
104.237.112.0/20
157.52.48.0/20
172.86.0.0-172.86.23.255
172.86.32.0/19
IPv6:
2605:e4c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6a:77:a0:ef:df:49:c6:c0:2d:10:e2:79:d1:a0:28:87:1e:
50:3d:36:3a:89:94:bf:a0:87:f3:5b:0a:17:f5:c4:70:70:94:
b6:89:6b:78:f2:cc:0d:42:bc:87:0e:a0:4f:d3:20:2e:fc:60:
be:7f:a5:54:95:e6:fb:6c:a8:d3:d8:73:63:0e:0a:f7:8a:14:
9f:53:29:77:39:cb:f1:22:ad:f1:3f:3e:1c:7c:21:a3:3a:ad:
94:92:2d:91:40:c8:11:56:02:34:e0:60:9d:6a:47:98:eb:46:
ca:9f:3e:f2:df:44:49:31:45:42:ff:e9:06:15:21:f1:10:ce:
dd:95:7a:b2:1e:dd:c8:e4:a5:70:bd:f2:3c:82:2e:54:54:74:
44:5e:f3:51:24:87:c8:a1:18:3d:2a:74:37:6b:e9:9a:cc:f3:
35:33:46:b0:6b:29:68:8b:de:13:b8:ce:32:ef:e4:86:85:bd:
b2:87:b5:cf:b7:47:d5:1d:32:5f:db:ae:54:e5:43:f9:19:b8:
d6:07:3b:8d:24:79:01:5b:3c:28:14:b5:86:8f:e1:92:0a:db:
02:fc:ea:3c:5f:06:12:ce:6f:d9:ea:6c:a0:0d:43:87:6b:31:
ce:ef:49:94:cb:95:53:eb:c0:35:f4:92:f2:f1:0c:6e:d1:8d:
b7:be:24:b9
-----BEGIN CERTIFICATE-----
MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWD90c+4Kk7TSVucK3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm
OTU2MB4XDTIyMTAwMzEyMDAwMFoXDTI0MDgyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmMyOTZlMjQtZGRhNS00ZjZiLTg3NTctZjgwZmU2OTY5OGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs14hsgIQPgT0LI49JWhPD5aMjwwzu4iIxGf4
TrYASWcQuTuXb4TbasHT/svRafG2EWA6PQZMMrMvffCgGxAou5eWX5E+8nQn4271
TFEKOPDxwRIxOmjRMLwQfJjW91/RyEPejR2lX1C2ACRSp17JTGTfX9UwILY92E26
M+vYdQQ5oEUQTjz6VpCoc8UH/gjfsy60WcZDbraC1ddPnFeQZd9ANJdGbcZCwhti
A1NKkEiaJUmpGVtOrTusO/AiOEehZfk+lWcmTRtAsNxecXYG19ZfPm4LjmusjZtv
VN22pHTddrRh6UNg7sOr78LMVg1YhUdHkrdjBnzMn3MDUnzxJwIDAQABo4IDgzCC
A38wHQYDVR0OBBYEFC/CG6pSAHXqm+2boxH7ptYv1DPAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh
MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvMDA1MmY4NTItYTNkNS0z
NGE1LWExMDUtZTMxNTRjZjYwODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj
ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli
Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz
ZjI5YmY5NTYuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwQAF7hwAwQE
aO1wAwQEnTQwMAsDAwGsVgMEA6xWEAMEBaxWIDANBAIAAjAHAwUAJgXkwDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA
A4IBAQBSaneg799JxsAtEOJ50aAohx5QPTY6iZS/oIfzWwoX9cRwcJS2iWt48swN
QryHDqBP0yAu/GC+f6VUleb7bKjT2HNjDgr3ihSfUyl3OcvxIq3xPz4cfCGjOq2U
ki2RQMgRVgI04GCdakeY60bKnz7y30RJMUVC/+kGFSHxEM7dlXqyHt3I5KVwvfI8
gi5UVHREXvNRJIfIoRg9KnQ3a+mazPM1M0awayloi94TuM4y7+SGhb2yh7XPt0fV
HTJf265U5UP5GbjWBzuNJHkBWzwoFLWGj+GSCtsC/Oo8XwYSzm/Z6mygDUOHazHO
70mUy5VT68A19JLy8Qxu0Y23viS5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:12 2024 by rpki-client on console-fra.rpki-client.org