Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/f1976e61-26ac-3e78-90e1-f44f025b2914.roa
File: f1976e61-26ac-3e78-90e1-f44f025b2914.roa (raw, json)
Hash identifier: h/5ODBVJc9D4pizbFD1PA7qakZimJAZhyXIupgSWPZk=
Subject key identifier: 08:5C:26:DA:46:E8:BF:AC:EF:77:6E:D1:FE:9E:94:BE:FE:83:0C:EA
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285846970A58723532C6C0A536A2E0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/f1976e61-26ac-3e78-90e1-f44f025b2914.roa
Signing time: Fri 19 Jul 2024 13:00:35 +0000
ROA not before: Fri 19 Jul 2024 13:00:35 +0000
ROA not after: Thu 17 Oct 2024 13:00:35 +0000
asID: 1239
IP address blocks: 216.158.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:97:0a:58:72:35:32:c6:c0:a5:36:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Jul 19 13:00:35 2024 GMT
Not After : Oct 17 13:00:35 2024 GMT
Subject: CN=6aa22efc-e108-4ea5-ada1-b27d69f8f3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:db:00:03:29:b4:28:c2:5f:e2:76:00:6f:
9c:dd:32:10:52:e4:d2:f9:f0:00:10:36:b7:d6:5d:
3c:da:64:f7:1f:44:54:d1:3a:d2:53:12:18:65:74:
77:d4:ca:62:a4:1d:c2:a7:77:b8:62:1f:5e:5b:1d:
1a:f5:e8:1f:89:cd:82:dd:18:d3:8b:9e:62:c3:6d:
01:fc:58:92:3d:fb:0b:af:79:8d:54:2d:5c:81:6d:
92:7b:c4:f0:2f:23:43:6c:f5:91:0f:4e:02:c2:af:
74:5e:4c:6f:56:c1:2b:fd:67:3f:2c:c2:62:03:5c:
70:c6:bf:06:57:bb:fe:cf:6d:e8:be:96:9d:09:e5:
a5:08:76:ec:c6:34:24:fe:99:14:a6:ac:14:9c:86:
19:90:1a:0f:92:a7:83:73:68:b8:24:48:c5:5c:77:
12:10:92:a1:3d:f8:c0:f9:17:8d:56:17:79:6b:37:
ca:d9:07:99:5e:0f:d7:1d:d6:bb:da:82:67:a7:c2:
34:cb:09:54:67:ea:9d:f4:38:de:81:21:25:40:40:
42:2a:ee:52:fe:8e:9c:42:06:ce:78:0e:18:05:48:
0d:2e:01:44:7b:92:f3:47:96:58:da:30:99:dd:8f:
4e:75:9d:b1:a0:00:d4:bd:4b:a3:eb:05:65:63:dc:
4c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5C:26:DA:46:E8:BF:AC:EF:77:6E:D1:FE:9E:94:BE:FE:83:0C:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/f1976e61-26ac-3e78-90e1-f44f025b2914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:e5:1d:62:0e:e0:30:49:8b:4a:42:26:5c:25:61:09:98:d8:
0e:26:d7:e6:0d:e1:72:15:f9:09:87:0d:95:9a:92:de:a0:00:
92:ad:f8:64:14:42:24:9a:9d:00:44:68:eb:44:da:0a:3c:b3:
e8:9f:cc:90:37:1d:30:a0:e6:b3:60:56:d1:34:ea:74:ec:31:
a9:dc:2a:1e:6b:23:81:9e:c4:ea:e0:04:08:1e:ec:54:c8:bc:
bd:61:82:e1:16:1a:34:08:a7:14:f6:eb:74:10:18:79:20:e4:
da:b0:01:4f:36:08:04:84:b5:d3:89:93:f3:7c:0d:b8:e8:28:
18:b6:21:38:ee:d4:c2:21:a6:8e:b0:40:a2:41:f7:86:0c:dd:
3a:76:87:d5:55:c4:ea:39:2d:3a:df:4d:9f:97:97:6b:e2:0d:
dc:02:cd:be:68:5e:18:1f:ea:35:77:79:d2:d0:01:b1:ed:bd:
bc:7a:37:b8:6d:62:ed:e7:ae:fd:73:fd:63:33:d8:10:cb:28:
d4:de:63:f4:45:25:53:cb:35:6e:e6:fa:fe:e5:17:1e:2f:67:
25:21:aa:5c:75:93:71:c1:1f:ed:a8:a6:18:ee:dc:5d:4d:f6:
fb:92:f4:4b:8d:98:7a:2f:55:e6:f1:45:38:61:2d:f8:6b:10:
18:af:15:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaXClhyNTLGwKU2ouAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz
M2E0MB4XDTI0MDcxOTEzMDAzNVoXDTI0MTAxNzEzMDAzNVowLzEtMCsGA1UEAxMk
NmFhMjJlZmMtZTEwOC00ZWE1LWFkYTEtYjI3ZDY5ZjhmM2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6rbAAMptCjCX+J2AG+c3TIQUuTS+fAAEDa3
1l082mT3H0RU0TrSUxIYZXR31MpipB3Cp3e4Yh9eWx0a9egfic2C3RjTi55iw20B
/FiSPfsLr3mNVC1cgW2Se8TwLyNDbPWRD04Cwq90XkxvVsEr/Wc/LMJiA1xwxr8G
V7v+z23ovpadCeWlCHbsxjQk/pkUpqwUnIYZkBoPkqeDc2i4JEjFXHcSEJKhPfjA
+ReNVhd5azfK2QeZXg/XHda72oJnp8I0ywlUZ+qd9DjegSElQEBCKu5S/o6cQgbO
eA4YBUgNLgFEe5LzR5ZY2jCZ3Y9OdZ2xoADUvUuj6wVlY9xMtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhcJtpG6L+s73du0f6elL7+gwzqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2
NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZjE5NzZlNjEtMjZhYy0z
ZTc4LTkwZTEtZjQ0ZjAyNWIyOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1
MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0
MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj
NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J7fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDlHWIO4DBJi0pCJlwlYQmY2A4m1+YN4XIV+QmHDZWakt6gAJKt+GQU
QiSanQBEaOtE2go8s+ifzJA3HTCg5rNgVtE06nTsMancKh5rI4GexOrgBAge7FTI
vL1hguEWGjQIpxT263QQGHkg5NqwAU82CASEtdOJk/N8DbjoKBi2ITju1MIhpo6w
QKJB94YM3Tp2h9VVxOo5LTrfTZ+Xl2viDdwCzb5oXhgf6jV3edLQAbHtvbx6N7ht
Yu3nrv1z/WMz2BDLKNTeY/RFJVPLNW7m+v7lFx4vZyUhqlx1k3HBH+2ophju3F1N
9vuS9EuNmHovVebxRThhLfhrEBivFTQ=
-----END CERTIFICATE-----
Generated at Wed Sep 18 11:04:08 2024 by rpki-client on console-ams.rpki-client.org