Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf4037b2-6588-355a-8a21-0120100826a5.roa
File: bf4037b2-6588-355a-8a21-0120100826a5.roa (raw, json)
Hash identifier: WO1QxaNHdalj2Fba4zZzw4IVCzlaDKPkHHoBzCtDfFc=
Subject key identifier: 95:6C:08:E7:9D:05:DB:78:9A:B8:83:F4:4F:AF:0E:F3:E9:DE:61:37
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858471A7782ED49F99DFF0D34FF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf4037b2-6588-355a-8a21-0120100826a5.roa
Signing time: Wed 04 Sep 2024 14:51:46 +0000
ROA not before: Wed 04 Sep 2024 14:51:46 +0000
ROA not after: Tue 03 Dec 2024 15:51:46 +0000
asID: 212238
IP address blocks: 172.94.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1a:77:82:ed:49:f9:9d:ff:0d:34:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 4 14:51:46 2024 GMT
Not After : Dec 3 15:51:46 2024 GMT
Subject: CN=7c0d9565-20bc-4cec-8a8e-f769e2c2e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:d7:d3:5e:5d:ce:04:f3:f7:d9:ed:d2:ea:
2c:20:57:ea:df:4b:10:3f:e8:fc:07:06:60:15:17:
3c:9b:03:4a:0e:f1:38:40:95:93:90:84:6e:5a:7b:
d9:08:0d:9e:90:71:e6:3d:31:b7:14:c8:8c:bb:4e:
5d:8d:1f:e9:7d:d7:cb:b6:61:40:50:8b:f6:9a:2c:
8a:36:28:d6:06:d7:95:e6:3d:28:15:15:41:ec:99:
4d:84:e0:7b:99:54:5e:99:8a:e7:48:90:79:bd:a3:
93:80:1b:f4:1a:a2:db:c8:37:da:b3:4c:0f:bb:22:
48:34:7b:c7:c6:a2:3e:53:ff:81:44:44:e8:53:fd:
3f:22:e6:04:84:29:05:2c:11:df:f7:17:80:8c:4b:
bc:22:e5:6d:88:dc:1d:6f:c6:86:fb:84:98:19:35:
43:46:3c:e9:e1:7e:c2:c6:c2:61:60:43:f1:a5:56:
38:15:50:56:06:80:1f:2a:48:4d:21:6a:cc:8e:02:
05:d0:45:8a:fa:f6:60:b7:77:f7:88:2e:27:6a:e8:
c8:87:49:27:aa:65:12:37:0c:0b:73:5f:c5:27:06:
09:9a:5c:3e:69:43:9e:08:38:08:6e:7b:ce:3b:b7:
3f:bf:38:af:2f:86:d6:0c:b1:f6:cd:4f:ae:e5:cf:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:08:E7:9D:05:DB:78:9A:B8:83:F4:4F:AF:0E:F3:E9:DE:61:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf4037b2-6588-355a-8a21-0120100826a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:64:c7:5c:73:f7:d6:2d:ee:11:b7:ed:5e:db:42:ad:77:fb:
2c:c8:8c:46:e6:cc:f0:70:75:8f:0a:20:c6:02:74:bd:d8:f7:
33:5d:14:4b:79:dc:22:ca:50:41:7c:9f:9a:66:2f:93:b6:08:
30:96:ca:e4:9a:45:38:d1:65:bb:db:23:bc:46:c3:85:20:60:
a8:df:a2:1b:b4:68:ad:ba:24:78:ab:cb:96:a4:61:3e:23:23:
98:5a:c9:e4:d6:3f:72:f7:2f:6a:84:6e:37:22:ab:eb:d3:07:
91:c0:18:65:8c:c0:4a:a4:0c:1e:9c:7a:4a:f5:bb:bc:be:76:
93:d6:e8:b9:ea:e9:d0:50:65:72:4a:b8:77:bc:d2:ae:8a:07:
69:7b:25:4e:1b:68:ab:17:cc:1e:5b:ad:f2:64:bb:52:94:a6:
0e:60:0f:4a:11:db:a6:58:a2:f4:94:7f:3f:46:33:6b:67:1f:
90:df:a4:cf:6d:c9:1f:aa:3b:e1:5c:d2:3a:1d:9a:d8:bc:83:
fe:9d:c8:a5:68:31:2b:fd:df:77:d1:6c:bb:db:a0:94:e9:97:
51:75:29:ef:40:67:de:fd:00:d8:92:c0:40:b6:dd:f6:05:53:
aa:2e:a1:ec:16:6c:4a:e3:bb:51:a7:b5:b9:0a:64:23:e1:cb:
c4:84:bf:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcad4LtSfmd/w00/wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDkwNDE0NTE0NloXDTI0MTIwMzE1NTE0NlowLzEtMCsGA1UEAxMk
N2MwZDk1NjUtMjBiYy00Y2VjLThhOGUtZjc2OWUyYzJlMWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwDX015dzgTz99nt0uosIFfq30sQP+j8BwZg
FRc8mwNKDvE4QJWTkIRuWnvZCA2ekHHmPTG3FMiMu05djR/pfdfLtmFAUIv2miyK
NijWBteV5j0oFRVB7JlNhOB7mVRemYrnSJB5vaOTgBv0GqLbyDfas0wPuyJINHvH
xqI+U/+BREToU/0/IuYEhCkFLBHf9xeAjEu8IuVtiNwdb8aG+4SYGTVDRjzp4X7C
xsJhYEPxpVY4FVBWBoAfKkhNIWrMjgIF0EWK+vZgt3f3iC4naujIh0knqmUSNwwL
c1/FJwYJmlw+aUOeCDgIbnvOO7c/vzivL4bWDLH2zU+u5c99iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVsCOedBdt4mriD9E+vDvPp3mE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY0MDM3YjItNjU4OC0z
NTVhLThhMjEtMDEyMDEwMDgyNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF5zMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1kx1xz99Yt7hG37V7bQq13+yzIjEbmzPBwdY8KIMYCdL3Y9zNdFEt5
3CLKUEF8n5pmL5O2CDCWyuSaRTjRZbvbI7xGw4UgYKjfohu0aK26JHiry5akYT4j
I5hayeTWP3L3L2qEbjciq+vTB5HAGGWMwEqkDB6cekr1u7y+dpPW6Lnq6dBQZXJK
uHe80q6KB2l7JU4baKsXzB5brfJku1KUpg5gD0oR26ZYovSUfz9GM2tnH5DfpM9t
yR+qO+Fc0jodmti8g/6dyKVoMSv933fRbLvboJTpl1F1Ke9AZ979ANiSwEC23fYF
U6ouoewWbErju1GntbkKZCPhy8SEv2M=
-----END CERTIFICATE-----
Generated at Thu Sep 5 07:58:47 2024 by rpki-client on console-fra.rpki-client.org