Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a867b67b-dd45-3d76-9d98-77367a8dc484.roa
File: a867b67b-dd45-3d76-9d98-77367a8dc484.roa (raw, json)
Hash identifier: 7HOOBVqaI2+k8mralSVD9Ltx8reZ07XD1gSlciyDabU=
Subject key identifier: F7:21:6F:2F:77:F1:03:54:63:9F:D8:D6:2E:18:D2:93:9D:EE:EE:53
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584327A71D967C0A4D1633EB4B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a867b67b-dd45-3d76-9d98-77367a8dc484.roa
Signing time: Fri 08 Sep 2023 13:05:27 +0000
ROA not before: Fri 08 Sep 2023 13:05:27 +0000
ROA not after: Thu 07 Dec 2023 14:05:27 +0000
asID: 3223
IP address blocks: 104.250.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:27:a7:1d:96:7c:0a:4d:16:33:eb:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 8 13:05:27 2023 GMT
Not After : Dec 7 14:05:27 2023 GMT
Subject: CN=83355da9-d99d-4376-874a-882823017de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:a3:ce:4c:18:ca:ed:a3:1a:c0:a8:74:60:
4a:da:51:0a:52:15:55:73:c9:33:9d:44:76:a7:8d:
d1:d2:74:2a:77:51:94:64:29:df:cd:dc:ad:37:ce:
57:35:30:6c:02:f6:dd:59:ab:90:56:a1:56:c0:7c:
d7:ac:19:f1:c1:e4:a0:6c:6c:71:7d:cc:06:83:be:
f4:0f:8c:7d:78:e7:31:ec:b1:b6:3f:fe:46:c5:e6:
5b:3b:55:58:7f:c4:ab:82:cf:2d:a5:90:39:93:4b:
7e:66:1d:9c:05:72:d1:44:b9:ae:53:d5:d4:6b:3d:
d7:5f:23:b5:89:19:d1:94:fe:5b:a0:1f:fb:3e:4a:
a0:81:fc:1b:9a:7c:44:72:43:8b:c0:cf:f7:36:69:
f2:e2:5a:a1:3e:d5:45:93:1a:28:c7:9e:fe:06:99:
c3:e4:50:cf:23:a2:7a:2e:93:9a:6b:b9:18:6f:42:
7a:1c:12:26:dd:72:f0:bb:2f:4f:42:96:f3:d0:28:
0e:cb:07:3c:03:52:f6:db:24:e7:37:e0:df:b2:41:
bd:56:f6:b7:ef:70:3c:2d:77:6b:1e:76:35:02:1f:
3e:7f:35:8e:f5:50:e6:e9:2b:0f:1f:a9:89:ca:b5:
2e:f6:de:65:06:71:0f:84:e7:d6:70:d1:36:28:75:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:6F:2F:77:F1:03:54:63:9F:D8:D6:2E:18:D2:93:9D:EE:EE:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a867b67b-dd45-3d76-9d98-77367a8dc484.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.185.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:9d:86:69:d0:3f:6d:9e:6b:fe:a7:74:c8:af:d6:64:b6:bd:
65:06:30:5f:1a:14:3e:0b:60:51:00:5f:54:a5:6d:aa:56:ae:
be:22:4b:46:0f:33:53:ad:13:c1:a6:3c:20:66:e6:23:49:0e:
bd:a9:16:26:9b:08:cf:e3:17:48:f7:81:62:03:6c:19:6d:c4:
25:2a:b5:28:a1:a5:00:3d:b4:13:da:7e:57:05:1d:15:bc:f6:
f2:a8:db:ac:c4:d1:20:99:90:8c:b1:96:9f:8f:4c:d9:70:ba:
47:d6:be:d2:76:c9:2f:66:48:0d:fb:e9:70:5e:7c:73:69:3c:
51:f2:06:fd:af:5b:13:42:76:cb:87:4e:25:61:67:99:e1:4d:
8a:92:46:64:31:ec:85:46:02:c8:b5:07:a4:bf:85:90:17:36:
62:6e:96:fb:5c:64:6d:3c:0b:5e:2e:00:b6:3f:a6:3a:c1:a7:
6e:02:33:8f:b9:18:52:b2:eb:67:c9:d6:8b:9e:6c:54:55:21:
bb:27:5f:f0:09:4b:97:33:72:3a:90:a5:26:f9:49:5e:f1:7c:
92:f6:92:cd:6c:90:53:84:b9:e8:ad:4c:9c:8b:5f:1f:b7:e5:
2f:c0:39:d0:59:34:3f:c9:09:a3:b0:15:f6:e1:aa:27:29:f4:
46:c6:51:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMnpx2WfApNFjPrSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDkwODEzMDUyN1oXDTIzMTIwNzE0MDUyN1owLzEtMCsGA1UEAxMk
ODMzNTVkYTktZDk5ZC00Mzc2LTg3NGEtODgyODIzMDE3ZGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFajzkwYyu2jGsCodGBK2lEKUhVVc8kznUR2
p43R0nQqd1GUZCnfzdytN85XNTBsAvbdWauQVqFWwHzXrBnxweSgbGxxfcwGg770
D4x9eOcx7LG2P/5GxeZbO1VYf8Srgs8tpZA5k0t+Zh2cBXLRRLmuU9XUaz3XXyO1
iRnRlP5boB/7PkqggfwbmnxEckOLwM/3Nmny4lqhPtVFkxoox57+BpnD5FDPI6J6
LpOaa7kYb0J6HBIm3XLwuy9PQpbz0CgOywc8A1L22yTnN+DfskG9Vva373A8LXdr
HnY1Ah8+fzWO9VDm6SsPH6mJyrUu9t5lBnEPhOfWcNE2KHUOawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPchby938QNUY5/Y1i4Y0pOd7u5TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTg2N2I2N2ItZGQ0NS0z
ZDc2LTlkOTgtNzczNjdhOGRjNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSdhmnQP22ea/6ndMiv1mS2vWUGMF8aFD4LYFEAX1SlbapWrr4iS0YP
M1OtE8GmPCBm5iNJDr2pFiabCM/jF0j3gWIDbBltxCUqtSihpQA9tBPaflcFHRW8
9vKo26zE0SCZkIyxlp+PTNlwukfWvtJ2yS9mSA376XBefHNpPFHyBv2vWxNCdsuH
TiVhZ5nhTYqSRmQx7IVGAsi1B6S/hZAXNmJulvtcZG08C14uALY/pjrBp24CM4+5
GFKy62fJ1ouebFRVIbsnX/AJS5czcjqQpSb5SV7xfJL2ks1skFOEueitTJyLXx+3
5S/AOdBZND/JCaOwFfbhqicp9EbGUWQ=
-----END CERTIFICATE-----
Generated at Fri Sep 15 08:06:20 2023 by rpki-client on console-fra.rpki-client.org