Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/64bb1aca-71d2-33af-830e-b79aff1dcde6.roa
File: 64bb1aca-71d2-33af-830e-b79aff1dcde6.roa (raw, json)
Hash identifier: mLZZwWynTX0dfTSnaDVKP9COBfZcyVIMMyVhwQ0+gD4=
Subject key identifier: 61:9D:20:5E:F5:15:A5:D7:26:81:91:EF:F2:3A:0F:9E:3C:E9:FF:F8
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858465F347C58364741AEE4CF3960
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/64bb1aca-71d2-33af-830e-b79aff1dcde6.roa
Signing time: Sat 29 Jun 2024 13:00:33 +0000
ROA not before: Sat 29 Jun 2024 13:00:33 +0000
ROA not after: Fri 27 Sep 2024 13:00:33 +0000
asID: 211936
IP address blocks: 45.58.246.0/24 maxlen: 24
45.58.247.0/24 maxlen: 24
45.58.248.0/24 maxlen: 24
45.58.249.0/24 maxlen: 24
69.91.132.0/24 maxlen: 24
69.91.134.0/24 maxlen: 24
69.91.135.0/24 maxlen: 24
69.91.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 15:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5f:34:7c:58:36:47:41:ae:e4:cf:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Jun 29 13:00:33 2024 GMT
Not After : Sep 27 13:00:33 2024 GMT
Subject: CN=b77b13f1-c7e9-4851-9853-81763d8069e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:9c:9c:11:d1:9a:8b:6d:30:54:ab:af:e4:
bd:e9:16:7b:b3:ac:83:c9:01:45:51:e2:41:05:09:
1a:f4:ab:7a:10:a2:7e:ea:0b:31:21:38:db:cd:67:
b9:4e:39:7a:62:15:ac:21:11:b2:03:dd:d3:3b:89:
9d:4c:f4:29:c6:a1:02:e7:4b:8f:40:25:f4:e1:d7:
96:69:b3:93:26:9f:d8:6a:ae:17:9d:8c:af:30:5c:
bf:31:78:80:33:08:86:95:b6:b6:66:28:dc:57:7c:
57:41:83:56:d7:e5:84:d2:32:0a:01:1b:9c:fd:82:
4a:76:6d:6a:7b:9c:ec:01:cd:bd:4f:7f:85:d0:70:
46:a1:c4:fc:d0:05:57:38:fd:4d:7f:ac:42:17:b5:
11:41:00:c5:1c:b3:e4:f4:55:ec:b9:40:05:1d:be:
83:06:46:7c:9e:0f:4b:64:0e:dd:49:29:c9:1f:8f:
50:ca:09:c6:49:dd:ac:4b:37:8e:87:8f:15:e4:23:
96:81:df:b3:60:c4:87:54:1b:9a:86:79:49:80:6e:
b7:af:54:45:cd:dc:d8:ab:43:ec:1b:d5:20:0e:ed:
f4:28:31:e7:84:8e:0e:24:44:b3:60:b9:75:1f:b3:
fb:15:0e:9a:3d:d0:69:7c:6f:f6:3e:4f:f5:f9:9c:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:20:5E:F5:15:A5:D7:26:81:91:EF:F2:3A:0F:9E:3C:E9:FF:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/64bb1aca-71d2-33af-830e-b79aff1dcde6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.58.246.0-45.58.249.255
69.91.132.0/24
69.91.134.0-69.91.136.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:31:29:05:7f:9e:10:bd:95:96:eb:12:85:1f:8f:b4:a1:d5:
58:46:ff:4c:98:34:83:46:08:07:4a:e6:80:f6:da:f4:c8:f9:
47:b0:6a:d7:32:be:ba:66:8b:5b:b0:3a:6a:2f:9a:e5:4c:05:
85:7d:41:52:01:b4:06:48:ca:20:71:56:f9:a8:5e:64:2a:cc:
dc:df:1f:5f:f0:6b:41:7f:54:17:81:03:cb:c5:a2:91:b2:79:
d2:b4:fc:bd:0e:28:d4:16:4b:5f:fa:c4:ad:d6:40:e9:05:9a:
14:72:9d:47:63:60:4c:f5:b4:43:1d:be:8c:3a:83:7c:6b:33:
df:98:85:e1:75:e1:21:29:5f:b1:bf:5e:c4:b6:06:8b:fb:af:
da:02:b1:7c:34:ff:6c:50:60:cd:c0:51:2c:35:0f:7a:11:ba:
f1:af:75:2d:9c:1c:67:d4:65:c9:00:36:36:79:b0:41:db:93:
26:5a:90:29:a6:32:2e:8a:aa:34:99:9b:e7:f8:f3:97:ae:fd:
6d:f3:53:e4:aa:61:11:94:33:16:c9:d7:33:1c:71:3b:e3:bf:
88:93:86:87:d5:04:ec:ed:c1:f3:b9:ba:1c:36:17:1d:22:ff:
dc:91:9e:bf:5e:7d:57:43:d0:68:08:56:9f:38:0c:f2:b4:06:
5d:a7:19:c3
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEZfNHxYNkdBruTPOWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDYyOTEzMDAzM1oXDTI0MDkyNzEzMDAzM1owLzEtMCsGA1UEAxMk
Yjc3YjEzZjEtYzdlOS00ODUxLTk4NTMtODE3NjNkODA2OWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuqcnBHRmottMFSrr+S96RZ7s6yDyQFFUeJB
BQka9Kt6EKJ+6gsxITjbzWe5Tjl6YhWsIRGyA93TO4mdTPQpxqEC50uPQCX04deW
abOTJp/Yaq4XnYyvMFy/MXiAMwiGlba2ZijcV3xXQYNW1+WE0jIKARuc/YJKdm1q
e5zsAc29T3+F0HBGocT80AVXOP1Nf6xCF7URQQDFHLPk9FXsuUAFHb6DBkZ8ng9L
ZA7dSSnJH49QygnGSd2sSzeOh48V5COWgd+zYMSHVBuahnlJgG63r1RFzdzYq0Ps
G9UgDu30KDHnhI4OJESzYLl1H7P7FQ6aPdBpfG/2Pk/1+ZyqVQIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFGGdIF71FaXXJoGR7/I6D5486f/4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNjRiYjFhY2EtNzFkMi0z
M2FmLTgzMGUtYjc5YWZmMWRjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAEtOvYD
BAEtOvgDBABFW4QwDAMEAUVbhgMEAEVbiDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFMSkFf54QvZWW6xKF
H4+0odVYRv9MmDSDRggHSuaA9tr0yPlHsGrXMr66ZotbsDpqL5rlTAWFfUFSAbQG
SMogcVb5qF5kKszc3x9f8GtBf1QXgQPLxaKRsnnStPy9DijUFktf+sSt1kDpBZoU
cp1HY2BM9bRDHb6MOoN8azPfmIXhdeEhKV+xv17EtgaL+6/aArF8NP9sUGDNwFEs
NQ96Ebrxr3UtnBxn1GXJADY2ebBB25MmWpAppjIuiqo0mZvn+POXrv1t81PkqmER
lDMWydczHHE747+Ik4aH1QTs7cHzubocNhcdIv/ckZ6/Xn1XQ9BoCFafOAzytAZd
pxnD
-----END CERTIFICATE-----
Generated at Wed Jul 24 18:15:03 2024 by rpki-client on console-fra.rpki-client.org