Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/71f93443-e3c6-3c91-b30a-efb9ee4ebf2e.roa
File: 71f93443-e3c6-3c91-b30a-efb9ee4ebf2e.roa (raw, json)
Hash identifier: UK+scrEcRyKRPAeuGOVK12E1K1/XQYL9s2V5fIFB8Pc=
Subject key identifier: DA:73:78:2D:BB:CD:14:5F:5A:CC:D5:CF:DE:F8:28:A0:35:AF:CE:FF
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858476B3640C3FEF732418160A300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/71f93443-e3c6-3c91-b30a-efb9ee4ebf2e.roa
Signing time: Thu 03 Oct 2024 13:00:41 +0000
ROA not before: Thu 03 Oct 2024 13:00:41 +0000
ROA not after: Wed 01 Jan 2025 14:00:41 +0000
asID: 9009
IP address blocks: 172.111.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 09:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:6b:36:40:c3:fe:f7:32:41:81:60:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 3 13:00:41 2024 GMT
Not After : Jan 1 14:00:41 2025 GMT
Subject: CN=b39da316-2d82-4722-b84b-4f12bd15e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:de:ad:b8:8b:d0:41:c3:21:f0:9f:2e:96:
3d:bd:8c:82:31:33:14:b3:64:f8:27:e3:c3:c1:c0:
01:df:54:86:44:71:29:d2:6f:0b:dc:e9:5e:60:fe:
ca:eb:23:27:12:54:a3:af:90:61:95:3a:8a:58:8e:
17:36:86:11:8c:5e:24:50:14:b3:a4:b0:d5:f0:c9:
5d:1e:b7:33:28:f9:58:19:82:74:e7:8e:e6:21:e0:
53:46:4d:2c:ab:ae:19:fe:49:5a:bf:9a:7f:a5:5d:
2a:c9:bc:9b:6d:04:93:05:e0:58:15:53:27:3f:60:
a5:ce:41:d7:96:99:8e:be:7c:73:d8:10:e2:c9:2e:
46:c5:d6:9d:d2:b1:6a:6f:00:51:6c:10:14:ff:6c:
d3:c7:6e:42:9c:e2:46:74:b3:a7:b5:b8:aa:ed:68:
fa:0d:b5:dc:2f:03:6d:9a:71:f6:61:6c:a3:ca:29:
99:3b:e8:b4:c1:c4:64:3a:bf:bb:5d:8d:b7:62:8c:
92:66:64:e7:6d:32:1c:25:1b:c4:c2:01:4d:9e:d3:
6c:11:a2:eb:38:5c:e6:12:f4:bc:cf:94:3e:df:ea:
32:52:27:d1:75:2f:bf:9e:78:a0:06:82:ed:e6:42:
22:28:29:53:12:3f:19:d6:68:23:7b:ab:b2:f7:6c:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:78:2D:BB:CD:14:5F:5A:CC:D5:CF:DE:F8:28:A0:35:AF:CE:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/71f93443-e3c6-3c91-b30a-efb9ee4ebf2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:35:48:57:b4:69:6b:35:67:41:32:61:a3:d3:28:55:93:b5:
7a:35:06:53:6e:77:ef:0b:e0:1f:26:d7:5d:1f:38:67:82:6d:
42:62:71:bc:92:7e:35:2f:a4:5f:3a:d1:8b:aa:85:ad:3e:8a:
b8:ff:6f:b5:6c:06:e6:15:b8:37:94:13:d5:57:dc:2d:f8:9e:
79:0c:98:67:05:21:06:45:56:01:76:77:fd:eb:aa:f0:cf:ea:
c0:52:e7:5d:c1:df:d6:f0:4a:41:42:8d:dc:6d:35:ef:c3:a3:
ac:87:27:7a:6e:ba:b0:32:f8:32:2e:93:ba:3e:9e:78:90:b3:
6a:e7:95:1c:c8:cc:ee:f8:72:9e:03:34:20:73:04:f6:57:c5:
bd:e0:54:8d:a9:e6:19:fe:13:e0:b3:76:37:8c:b0:79:20:3e:
05:37:76:eb:e3:bb:a9:e2:14:db:a5:ec:36:24:c4:9d:85:d3:
d3:d4:35:c3:6f:04:80:30:a1:e4:f2:5b:27:15:f3:ae:c2:b8:
45:e5:46:94:bb:77:09:f6:44:51:98:b1:cf:e6:04:3e:6a:f3:
f5:e3:30:74:32:91:30:44:0b:a6:3d:50:52:3a:a2:a2:76:d1:
29:86:e6:81:da:8a:68:48:a8:5b:e4:b1:32:23:21:5e:9a:de:
28:2d:c8:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdrNkDD/vcyQYFgowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MTAwMzEzMDA0MVoXDTI1MDEwMTE0MDA0MVowLzEtMCsGA1UEAxMk
YjM5ZGEzMTYtMmQ4Mi00NzIyLWI4NGItNGYxMmJkMTVlMzM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfHerbiL0EHDIfCfLpY9vYyCMTMUs2T4J+PD
wcAB31SGRHEp0m8L3OleYP7K6yMnElSjr5BhlTqKWI4XNoYRjF4kUBSzpLDV8Mld
HrczKPlYGYJ0547mIeBTRk0sq64Z/klav5p/pV0qybybbQSTBeBYFVMnP2ClzkHX
lpmOvnxz2BDiyS5Gxdad0rFqbwBRbBAU/2zTx25CnOJGdLOntbiq7Wj6DbXcLwNt
mnH2YWyjyimZO+i0wcRkOr+7XY23YoySZmTnbTIcJRvEwgFNntNsEaLrOFzmEvS8
z5Q+3+oyUifRdS+/nnigBoLt5kIiKClTEj8Z1mgje6uy92xtkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNpzeC27zRRfWszVz974KKA1r87/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzFmOTM0NDMtZTNjNi0z
YzkxLWIzMGEtZWZiOWVlNGViZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQ1SFe0aWs1Z0EyYaPTKFWTtXo1BlNud+8L4B8m110fOGeCbUJicbyS
fjUvpF860Yuqha0+irj/b7VsBuYVuDeUE9VX3C34nnkMmGcFIQZFVgF2d/3rqvDP
6sBS513B39bwSkFCjdxtNe/Do6yHJ3puurAy+DIuk7o+nniQs2rnlRzIzO74cp4D
NCBzBPZXxb3gVI2p5hn+E+CzdjeMsHkgPgU3duvju6niFNul7DYkxJ2F09PUNcNv
BIAwoeTyWycV867CuEXlRpS7dwn2RFGYsc/mBD5q8/XjMHQykTBEC6Y9UFI6oqJ2
0SmG5oHaimhIqFvksTIjIV6a3igtyFQ=
-----END CERTIFICATE-----
Generated at Fri Nov 8 13:24:13 2024 by rpki-client on console-ams.rpki-client.org