Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/20258ae8-33c0-3030-9ac4-788bf05d3fb4.roa
File: 20258ae8-33c0-3030-9ac4-788bf05d3fb4.roa (raw, json)
Hash identifier: WF8eXl2jvHlEcvixXbb+Kfav3qWb4TO3x+hLaUjrYTs=
Subject key identifier: A2:50:EB:85:C5:C2:99:D2:76:80:C1:BA:0E:C2:CF:EB:3B:B6:3B:78
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584667E75C0DB30D928570298DE0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/20258ae8-33c0-3030-9ac4-788bf05d3fb4.roa
Signing time: Tue 02 Jul 2024 15:47:26 +0000
ROA not before: Tue 02 Jul 2024 15:47:26 +0000
ROA not after: Mon 30 Sep 2024 15:47:26 +0000
asID: 14618
IP address blocks: 192.67.136.0/21 maxlen: 24
192.67.144.0/21 maxlen: 24
192.67.152.0/22 maxlen: 24
198.55.32.0/21 maxlen: 24
198.55.40.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 21:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:67:e7:5c:0d:b3:0d:92:85:70:29:8d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jul 2 15:47:26 2024 GMT
Not After : Sep 30 15:47:26 2024 GMT
Subject: CN=753e9fc4-7af2-4e7d-9117-b2baff75c679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:40:e1:a6:29:4f:55:8d:d7:21:d9:42:8a:
2d:26:1b:3b:2b:3d:21:b8:59:97:c3:a2:2c:af:51:
ae:aa:8a:38:d7:14:be:1f:84:1b:8c:1e:69:28:48:
62:a7:81:97:95:97:3c:ac:7e:4f:70:a7:88:88:d9:
74:15:96:cf:95:9a:6a:61:e6:d0:79:09:31:9f:77:
2c:f4:a8:27:ee:4f:54:88:41:b3:3b:31:82:07:dc:
46:d8:fc:8d:4e:64:85:1b:3b:1b:3e:26:bb:f1:d7:
2c:f7:74:aa:b0:4e:2a:50:8d:99:37:da:58:0d:72:
5f:92:e9:e3:16:c9:62:71:f1:cc:40:b3:e8:34:0c:
37:a5:a9:6c:85:92:32:82:e8:3c:cd:d0:66:86:6b:
91:fb:b2:ea:26:5b:6c:9f:5c:bf:a6:42:83:c0:de:
66:bd:7e:94:00:01:f0:d2:36:5e:e3:2d:fc:e0:b5:
21:ae:30:8e:a7:27:e0:be:05:f1:cd:3d:3e:5b:d6:
76:64:12:f6:ca:a9:c5:c8:42:61:6f:fa:88:ab:2b:
71:b5:dd:2a:e0:f2:83:38:9c:77:f3:9d:0f:a9:b6:
55:3a:57:66:17:fc:0a:ec:89:8c:40:08:0c:c7:84:
03:ad:8f:f1:13:0d:1b:b5:ee:4a:c8:78:99:4f:58:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:50:EB:85:C5:C2:99:D2:76:80:C1:BA:0E:C2:CF:EB:3B:B6:3B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/20258ae8-33c0-3030-9ac4-788bf05d3fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.136.0-192.67.155.255
198.55.32.0-198.55.41.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0e:37:94:58:2c:ec:42:41:33:b6:2b:63:b1:20:e4:83:58:
5a:fb:2b:11:70:19:bd:99:77:04:4b:30:6f:be:ae:aa:86:02:
0c:e3:62:cb:6c:97:4e:e5:13:36:11:94:c2:f1:c9:f1:26:fd:
2a:3a:5e:af:32:06:ab:f8:b0:ee:a4:6e:11:9c:4c:83:0f:72:
1a:e0:64:b3:f7:b4:b3:67:4b:c4:6c:17:52:c4:f4:04:f0:b3:
a4:3e:ca:2f:b5:70:76:9c:55:26:33:b2:a6:e2:fd:ba:32:d1:
d5:39:14:a7:e3:23:80:e7:da:2a:a9:c6:6e:ef:5c:61:65:ff:
cb:6f:5b:3b:2d:27:42:79:b8:24:27:a1:e8:58:4e:35:37:3b:
25:3d:7e:00:53:1e:0a:6c:59:58:11:68:49:da:23:39:b5:d0:
3d:84:78:57:c6:f5:11:b7:1a:75:91:36:88:d1:4a:d6:78:89:
a7:6f:c8:15:96:81:ca:f8:23:d4:33:ad:b3:9e:60:0f:85:f6:
f5:a6:ec:ac:71:16:5a:e5:3b:43:ee:6f:de:5a:0e:28:9a:c6:
81:d1:02:2d:1a:ad:ee:08:ab:c0:08:3b:e7:36:f0:ca:e7:5c:
be:d6:52:ad:00:01:91:a1:f9:09:99:b1:53:9c:6b:4c:e0:58:
43:d4:50:d7
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEZn51wNsw2ShXApjeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk
YmZhMB4XDTI0MDcwMjE1NDcyNloXDTI0MDkzMDE1NDcyNlowLzEtMCsGA1UEAxMk
NzUzZTlmYzQtN2FmMi00ZTdkLTkxMTctYjJiYWZmNzVjNjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxVA4aYpT1WN1yHZQootJhs7Kz0huFmXw6Is
r1Guqoo41xS+H4QbjB5pKEhip4GXlZc8rH5PcKeIiNl0FZbPlZpqYebQeQkxn3cs
9Kgn7k9UiEGzOzGCB9xG2PyNTmSFGzsbPia78dcs93SqsE4qUI2ZN9pYDXJfkunj
FslicfHMQLPoNAw3palshZIygug8zdBmhmuR+7LqJltsn1y/pkKDwN5mvX6UAAHw
0jZe4y384LUhrjCOpyfgvgXxzT0+W9Z2ZBL2yqnFyEJhb/qIqytxtd0q4PKDOJx3
850PqbZVOldmF/wK7ImMQAgMx4QDrY/xEw0bte5KyHiZT1gztwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFKJQ64XFwpnSdoDBug7Cz+s7tjt4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj
MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvMjAyNThhZTgtMzNjMC0z
MDMwLTlhYzQtNzg4YmYwNWQzZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2
NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj
ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl
YzA0Y2RiZmEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAPAQ4gD
BALAQ5gwDAMEBcY3IAMEAcY3KDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBODjeUWCzsQkEztitjsSDkg1ha
+ysRcBm9mXcESzBvvq6qhgIM42LLbJdO5RM2EZTC8cnxJv0qOl6vMgar+LDupG4R
nEyDD3Ia4GSz97SzZ0vEbBdSxPQE8LOkPsovtXB2nFUmM7Km4v26MtHVORSn4yOA
59oqqcZu71xhZf/Lb1s7LSdCebgkJ6HoWE41NzslPX4AUx4KbFlYEWhJ2iM5tdA9
hHhXxvURtxp1kTaI0UrWeImnb8gVloHK+CPUM62znmAPhfb1puyscRZa5TtD7m/e
Wg4omsaB0QItGq3uCKvACDvnNvDK51y+1lKtAAGRofkJmbFTnGtM4FhD1FDX
-----END CERTIFICATE-----
Generated at Thu Aug 22 23:44:01 2024 by rpki-client on console-fra.rpki-client.org