Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1fd4ae9-269d-3edc-abe4-5b23dbb78a4c.roa
File: c1fd4ae9-269d-3edc-abe4-5b23dbb78a4c.roa (raw, json)
Hash identifier: XEN+8LIwdwraZVCsfkpXZWrs4/i2ZahRBkZ7t1j+4iA=
Subject key identifier: 86:19:28:FB:77:DD:C7:7D:9D:A5:FD:21:94:14:8D:D7:90:C0:2A:1B
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858422402FD2CF62FAB40F0196820
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1fd4ae9-269d-3edc-abe4-5b23dbb78a4c.roa
Signing time: Wed 07 Jun 2023 13:00:18 +0000
ROA not before: Wed 07 Jun 2023 13:00:18 +0000
ROA not after: Tue 05 Sep 2023 13:00:18 +0000
asID: 9009
IP address blocks: 172.111.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:24:02:fd:2c:f6:2f:ab:40:f0:19:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 7 13:00:18 2023 GMT
Not After : Sep 5 13:00:18 2023 GMT
Subject: CN=dcc44477-8ecc-4474-9e85-37d29777f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:82:7b:9f:02:82:f9:ad:37:7d:e9:51:62:0e:
1f:8f:6f:ff:a4:35:0a:25:28:2e:0d:ed:83:cb:ea:
4f:9a:53:26:44:9b:d9:67:fa:3f:14:57:7b:f4:fb:
c8:a5:5e:30:0c:fc:31:db:89:15:c8:a9:a2:37:d6:
db:f7:82:95:20:30:6d:4e:12:7a:85:1e:bc:95:a7:
46:a5:64:0f:f5:9c:47:24:bf:5a:8d:28:a3:c7:9a:
03:13:01:b9:6e:1c:56:44:0d:40:61:68:b1:42:41:
4e:f3:36:9b:01:96:cc:f7:6a:84:a6:d3:85:52:68:
91:1c:91:dc:20:7c:3a:10:e1:00:42:df:03:5d:d6:
37:29:03:38:54:a2:42:af:90:85:34:c8:59:a4:33:
c0:7e:f9:82:5d:e1:69:d2:6f:43:61:f4:c0:1b:55:
a8:77:c3:ed:17:d9:0c:5a:bc:5d:3c:9b:96:da:49:
86:c7:14:a1:00:dc:90:7c:f0:20:1d:12:6b:37:72:
c8:9b:b0:67:2a:b3:58:6e:3e:65:13:e5:05:b3:a6:
2c:af:13:0d:2d:c6:cb:e6:50:1c:a4:42:c1:31:c6:
09:bb:e4:e3:7f:cb:54:e3:08:7c:b3:7c:ba:12:3c:
3e:7d:6f:28:e5:86:85:8f:c4:c6:7e:3a:d5:59:f3:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:19:28:FB:77:DD:C7:7D:9D:A5:FD:21:94:14:8D:D7:90:C0:2A:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c1fd4ae9-269d-3edc-abe4-5b23dbb78a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:28:dd:2d:0c:c2:94:aa:b9:44:4e:62:93:59:ce:a4:89:22:
e2:dc:94:3a:53:e5:5d:ce:02:e9:97:a8:c4:cf:27:4e:c1:3e:
03:95:ab:d7:f0:41:75:c0:6a:f5:e3:0c:7d:2f:12:aa:62:c3:
22:43:fa:69:ad:cb:65:46:ad:4d:0e:30:f1:67:0c:07:22:7e:
4d:ac:9f:0a:4c:f1:76:ea:c2:6c:2a:ad:f2:5b:3b:80:ef:a6:
1b:74:91:22:77:ff:87:fa:46:b6:d6:a3:2d:a1:5d:8e:05:d9:
42:07:14:bf:ee:50:cc:b8:47:42:ce:4a:f6:85:bd:69:7e:27:
93:5d:f0:55:01:52:b6:e1:47:bb:34:1d:47:26:8e:aa:9d:f4:
57:c9:f6:6d:cb:5d:d5:c1:67:4e:72:05:9a:ec:1e:3e:52:ab:
d5:16:b9:8f:45:c1:26:72:99:1b:f6:8f:86:be:98:82:44:6e:
4f:0b:77:19:4a:79:c8:7d:17:77:b9:23:14:23:44:73:81:ac:
77:1e:a8:76:47:30:ea:db:4d:df:ca:f8:88:6c:44:33:f3:be:
80:af:55:6d:b8:38:cd:70:78:e4:99:87:ae:c7:95:c1:3a:38:
c5:e8:46:94:ec:23:75:e5:4e:c9:c7:0f:76:19:5c:30:15:89:
65:47:26:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIkAv0s9i+rQPAZaCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTIzMDYwNzEzMDAxOFoXDTIzMDkwNTEzMDAxOFowLzEtMCsGA1UEAxMk
ZGNjNDQ0NzctOGVjYy00NDc0LTllODUtMzdkMjk3NzdmODYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oJ7nwKC+a03felRYg4fj2//pDUKJSguDe2D
y+pPmlMmRJvZZ/o/FFd79PvIpV4wDPwx24kVyKmiN9bb94KVIDBtThJ6hR68ladG
pWQP9ZxHJL9ajSijx5oDEwG5bhxWRA1AYWixQkFO8zabAZbM92qEptOFUmiRHJHc
IHw6EOEAQt8DXdY3KQM4VKJCr5CFNMhZpDPAfvmCXeFp0m9DYfTAG1Wod8PtF9kM
WrxdPJuW2kmGxxShANyQfPAgHRJrN3LIm7BnKrNYbj5lE+UFs6YsrxMNLcbL5lAc
pELBMcYJu+Tjf8tU4wh8s3y6Ejw+fW8o5YaFj8TGfjrVWfMznwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYZKPt33cd9naX9IZQUjdeQwCobMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzFmZDRhZTktMjY5ZC0z
ZWRjLWFiZTQtNWIyM2RiYjc4YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0o3S0MwpSquUROYpNZzqSJIuLclDpT5V3OAumXqMTPJ07BPgOVq9fw
QXXAavXjDH0vEqpiwyJD+mmty2VGrU0OMPFnDAcifk2snwpM8XbqwmwqrfJbO4Dv
pht0kSJ3/4f6RrbWoy2hXY4F2UIHFL/uUMy4R0LOSvaFvWl+J5Nd8FUBUrbhR7s0
HUcmjqqd9FfJ9m3LXdXBZ05yBZrsHj5Sq9UWuY9FwSZymRv2j4a+mIJEbk8LdxlK
ech9F3e5IxQjRHOBrHceqHZHMOrbTd/K+IhsRDPzvoCvVW24OM1weOSZh67HlcE6
OMXoRpTsI3XlTsnHD3YZXDAViWVHJsQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:40 2023 by rpki-client on console-fra.rpki-client.org