Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce6a7997-2d86-3c9a-bee8-d670fc53e665.roa
File: ce6a7997-2d86-3c9a-bee8-d670fc53e665.roa (raw, json)
Hash identifier: YuECCkzIXUhyAIK82p2p6ECvyl52EwTM9wBYGoa01xQ=
Subject key identifier: 4C:64:4E:3A:83:27:13:B4:9E:4B:AF:D0:E7:9E:4D:5A:59:C7:1F:D4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858461109636A6476D55D07A5AFC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce6a7997-2d86-3c9a-bee8-d670fc53e665.roa
Signing time: Sat 01 Jun 2024 13:00:35 +0000
ROA not before: Sat 01 Jun 2024 13:00:35 +0000
ROA not after: Fri 30 Aug 2024 13:00:35 +0000
asID: 3223
IP address blocks: 172.111.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 07:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:11:09:63:6a:64:76:d5:5d:07:a5:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jun 1 13:00:35 2024 GMT
Not After : Aug 30 13:00:35 2024 GMT
Subject: CN=59cf48f6-6a7b-4df8-a46c-d2aa9f52f717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:60:49:6d:e5:6b:52:49:f3:b9:95:1c:cf:
06:fc:bd:b5:fd:48:35:bb:ff:61:cf:8f:5a:48:1d:
05:a9:42:2c:78:4b:f2:46:11:6e:1a:57:00:6e:d9:
0d:2f:d2:59:c6:9e:80:52:3a:1d:07:5f:2c:97:4f:
11:c1:bc:b1:d8:e9:39:8d:39:f8:15:d7:8f:ad:5f:
93:06:07:82:90:dd:b3:b5:84:c7:a2:09:87:4e:78:
68:65:ce:70:a4:25:e8:88:a0:d2:1b:b6:bf:f8:04:
12:33:ac:23:2c:ad:fe:1d:90:e6:72:3a:73:ec:cc:
6b:71:78:42:71:49:5c:f9:c8:13:61:19:43:f0:44:
2d:41:80:3a:fc:67:6a:0d:f4:c8:cb:96:12:fb:0e:
f5:88:73:02:77:f4:1f:03:1e:f8:06:c9:af:2c:3d:
de:58:0c:c5:36:99:a6:5e:99:ab:67:bf:c0:ab:7d:
65:2b:91:84:d9:c0:12:90:ef:70:8a:ca:03:1f:9a:
00:bc:ba:ba:89:16:54:a8:e9:43:8f:fa:7e:14:cd:
62:d6:15:6a:f6:6e:e3:43:72:14:4e:00:e4:ce:1c:
86:43:5f:e7:1a:9a:6d:24:56:f0:fd:d0:b3:bd:78:
76:46:bd:ec:48:14:b0:39:c6:12:1a:2a:a6:7a:59:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:4E:3A:83:27:13:B4:9E:4B:AF:D0:E7:9E:4D:5A:59:C7:1F:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ce6a7997-2d86-3c9a-bee8-d670fc53e665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c2:3d:c3:2d:92:c8:c3:39:2c:06:2c:82:77:9f:8a:de:e1:
d1:c5:18:b0:b8:7b:89:76:e1:26:57:a4:e3:db:0a:d4:cb:18:
2d:3e:20:b1:61:1c:10:c9:7d:f7:92:85:ad:65:73:ca:2f:26:
75:b6:f9:3f:19:59:0b:96:6c:2c:03:e2:38:d6:4b:6f:6b:d3:
3a:fe:0c:98:41:d2:b7:bf:d9:2b:72:df:78:e9:be:e1:07:dd:
5a:29:d4:65:bd:69:c7:4b:25:65:93:73:d9:dc:0a:74:db:f4:
b1:72:ce:2b:b7:a5:cd:42:94:28:c7:57:fd:de:aa:86:73:2a:
32:86:5f:35:39:ea:ed:91:93:b8:6b:1d:c8:35:18:77:d1:03:
dc:ef:dc:19:24:47:90:b7:a6:32:ca:c6:03:31:86:bb:ea:20:
05:f2:56:9b:bd:62:ba:5e:c9:b2:28:4c:a0:8d:21:25:10:a0:
9f:ae:8e:2d:1b:05:7a:6f:e2:f4:47:48:0e:66:40:1f:ce:26:
15:89:03:66:06:68:95:44:b8:f5:94:68:8a:5a:63:06:e6:16:
4c:66:ee:f4:7f:83:04:3e:8e:a7:13:96:5a:1b:cf:57:00:0e:
f4:e4:84:25:a7:8c:ce:05:cc:aa:3f:38:2f:d9:59:4a:eb:68:
cb:71:e9:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYRCWNqZHbVXQelr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI0MDYwMTEzMDAzNVoXDTI0MDgzMDEzMDAzNVowLzEtMCsGA1UEAxMk
NTljZjQ4ZjYtNmE3Yi00ZGY4LWE0NmMtZDJhYTlmNTJmNzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUhgSW3la1JJ87mVHM8G/L21/Ug1u/9hz49a
SB0FqUIseEvyRhFuGlcAbtkNL9JZxp6AUjodB18sl08Rwbyx2Ok5jTn4FdePrV+T
BgeCkN2ztYTHogmHTnhoZc5wpCXoiKDSG7a/+AQSM6wjLK3+HZDmcjpz7MxrcXhC
cUlc+cgTYRlD8EQtQYA6/GdqDfTIy5YS+w71iHMCd/QfAx74BsmvLD3eWAzFNpmm
XpmrZ7/Aq31lK5GE2cASkO9wisoDH5oAvLq6iRZUqOlDj/p+FM1i1hVq9m7jQ3IU
TgDkzhyGQ1/nGpptJFbw/dCzvXh2Rr3sSBSwOcYSGiqmellylwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExkTjqDJxO0nkuv0OeeTVpZxx/UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2U2YTc5OTctMmQ4Ni0z
YzlhLWJlZTgtZDY3MGZjNTNlNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG+TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTCPcMtksjDOSwGLIJ3n4re4dHFGLC4e4l24SZXpOPbCtTLGC0+ILFh
HBDJffeSha1lc8ovJnW2+T8ZWQuWbCwD4jjWS29r0zr+DJhB0re/2Sty33jpvuEH
3Vop1GW9acdLJWWTc9ncCnTb9LFyziu3pc1ClCjHV/3eqoZzKjKGXzU56u2Rk7hr
Hcg1GHfRA9zv3BkkR5C3pjLKxgMxhrvqIAXyVpu9YrpeybIoTKCNISUQoJ+uji0b
BXpv4vRHSA5mQB/OJhWJA2YGaJVEuPWUaIpaYwbmFkxm7vR/gwQ+jqcTllobz1cA
DvTkhCWnjM4FzKo/OC/ZWUrraMtx6dw=
-----END CERTIFICATE-----
Generated at Mon Jul 15 09:57:39 2024 by rpki-client on console-fra.rpki-client.org