Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/799f4ed2-130b-355f-8b15-512a707f53e5.roa
File: 799f4ed2-130b-355f-8b15-512a707f53e5.roa (raw, json)
Hash identifier: inNZYWNHkzt0+dnTDvZp8uYuXz5Mq8iZaVGlhlmamqA=
Subject key identifier: 75:B3:20:D8:16:EA:2D:AB:3D:B6:70:CD:69:62:A2:17:21:89:78:2F
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858454C380DBE2320C5E8306744C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/799f4ed2-130b-355f-8b15-512a707f53e5.roa
Signing time: Sat 23 Mar 2024 01:00:24 +0000
ROA not before: Sat 23 Mar 2024 01:00:24 +0000
ROA not after: Fri 21 Jun 2024 01:00:24 +0000
asID: 62610
IP address blocks: 23.251.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:4c:38:0d:be:23:20:c5:e8:30:67:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 23 01:00:24 2024 GMT
Not After : Jun 21 01:00:24 2024 GMT
Subject: CN=ded0278c-514c-472b-a099-7561544b227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ac:f6:de:d3:e5:97:cc:a3:47:34:eb:7c:19:
88:f5:8e:d2:59:2c:de:f6:70:08:6a:1f:c0:82:0f:
0a:be:02:c3:24:98:68:9b:aa:34:b3:87:d0:b9:72:
20:f2:37:28:1f:1d:32:3f:0a:7a:6a:52:32:e9:7f:
1e:9a:46:d6:93:87:10:c6:d4:8d:57:1b:ba:7f:73:
f9:c7:65:7f:30:a8:df:97:81:34:82:9e:ae:9a:22:
de:fd:88:97:bd:1b:a7:5c:fa:48:76:73:e4:ea:2d:
00:4d:d5:de:a5:7f:54:8a:23:7a:35:06:19:7e:f6:
d5:9e:07:46:c4:96:b8:86:06:ab:ef:ff:b6:ee:d8:
94:79:6b:30:d8:72:f5:2e:f2:4c:cc:25:16:aa:0d:
1f:05:ad:2e:17:cf:4b:3d:f8:d9:90:39:fd:6b:16:
72:de:77:b9:c6:e2:d5:85:58:c9:3e:e1:41:e8:7a:
e8:d0:c8:1c:96:ec:13:61:46:df:c1:ba:22:c5:d8:
bb:a8:f7:e0:a4:65:d8:be:95:2f:1a:de:c4:65:4f:
1b:4a:15:a6:ad:8a:98:84:43:7e:b2:2e:ba:0e:d4:
4c:50:92:26:9c:05:30:af:7e:4b:75:9d:42:8a:27:
09:34:bc:28:4b:3f:eb:e1:46:31:19:e6:20:6b:f1:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B3:20:D8:16:EA:2D:AB:3D:B6:70:CD:69:62:A2:17:21:89:78:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/799f4ed2-130b-355f-8b15-512a707f53e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:e5:84:f7:0b:37:2e:26:b2:80:83:1f:76:ef:20:6f:8b:a3:
22:87:8c:e7:ea:6d:11:b7:4a:8f:11:44:c3:68:2c:7e:fd:dd:
00:ef:fe:f2:3a:2e:3e:9c:22:a2:61:e3:9b:60:ab:b7:77:20:
21:53:15:88:94:70:f4:6e:b5:e4:aa:ba:78:57:6c:d8:53:72:
eb:fa:c3:53:7a:10:33:2c:ca:97:a1:91:bb:e4:03:10:55:37:
da:07:ea:ee:a9:f2:b5:16:2c:ef:d3:96:95:56:35:77:f4:4a:
43:9b:c3:73:cb:0b:e0:8e:35:75:42:d9:40:30:f7:99:58:24:
1d:c1:e0:b1:71:0d:7b:ce:15:31:09:27:11:c2:94:88:f2:02:
49:ba:3c:42:91:0c:1e:22:31:04:10:65:d6:17:97:c2:6d:c0:
d3:05:8a:fe:bf:e4:07:f6:6b:58:c8:3e:12:3b:94:26:0f:06:
f8:c7:4f:d8:bb:58:25:9f:85:4d:67:7b:9d:fc:1a:d4:b7:c1:
c0:0b:f9:57:a2:00:de:91:08:1a:b7:4b:aa:dd:7a:ec:11:67:
e6:9f:44:82:b8:df:12:90:48:79:9a:0b:aa:b5:d8:44:6a:0a:
7b:b7:29:0d:bc:bc:70:be:75:83:20:f9:11:67:cd:e7:79:77:
d1:f9:77:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVMOA2+IyDF6DBnRMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MDMyMzAxMDAyNFoXDTI0MDYyMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZGVkMDI3OGMtNTE0Yy00NzJiLWEwOTktNzU2MTU0NGIyMjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qz23tPll8yjRzTrfBmI9Y7SWSze9nAIah/A
gg8KvgLDJJhom6o0s4fQuXIg8jcoHx0yPwp6alIy6X8emkbWk4cQxtSNVxu6f3P5
x2V/MKjfl4E0gp6umiLe/YiXvRunXPpIdnPk6i0ATdXepX9UiiN6NQYZfvbVngdG
xJa4hgar7/+27tiUeWsw2HL1LvJMzCUWqg0fBa0uF89LPfjZkDn9axZy3ne5xuLV
hVjJPuFB6Hro0MgcluwTYUbfwboixdi7qPfgpGXYvpUvGt7EZU8bShWmrYqYhEN+
si66DtRMUJImnAUwr35LdZ1CiicJNLwoSz/r4UYxGeYga/E6mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHWzINgW6i2rPbZwzWliohchiXgvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNzk5ZjRlZDItMTMwYi0z
NTVmLThiMTUtNTEyYTcwN2Y1M2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/sgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvlhPcLNy4msoCDH3bvIG+LoyKHjOfqbRG3So8RRMNoLH793QDv/vI6
Lj6cIqJh45tgq7d3ICFTFYiUcPRuteSqunhXbNhTcuv6w1N6EDMsypehkbvkAxBV
N9oH6u6p8rUWLO/TlpVWNXf0SkObw3PLC+CONXVC2UAw95lYJB3B4LFxDXvOFTEJ
JxHClIjyAkm6PEKRDB4iMQQQZdYXl8JtwNMFiv6/5Af2a1jIPhI7lCYPBvjHT9i7
WCWfhU1ne538GtS3wcAL+VeiAN6RCBq3S6rdeuwRZ+afRIK43xKQSHmaC6q12ERq
Cnu3KQ28vHC+dYMg+RFnzed5d9H5d+A=
-----END CERTIFICATE-----
Generated at Fri Apr 19 12:30:16 2024 by rpki-client on console-ams.rpki-client.org