Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c420c7b8-efd4-3ff7-a1da-db9b164e5132.roa
File: c420c7b8-efd4-3ff7-a1da-db9b164e5132.roa (raw, json)
Hash identifier: I0RQTIiH/CLuZaxI82DMtpqw2pRX8oMXf768fql4daM=
Subject key identifier: 60:50:A8:F5:DA:05:E8:5B:B5:95:A3:FA:2D:81:28:EC:8E:5E:51:4E
Certificate issuer: /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial: 010D0C9F432858442733FBE330F59CBEAE760000
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c420c7b8-efd4-3ff7-a1da-db9b164e5132.roa
Signing time: Sat 09 Dec 2023 02:00:17 +0000
ROA not before: Sat 09 Dec 2023 02:00:17 +0000
ROA not after: Fri 08 Mar 2024 02:00:17 +0000
asID: 396982
IP address blocks: 23.161.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:27:33:fb:e3:30:f5:9c:be:ae:76:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Validity
Not Before: Dec 9 02:00:17 2023 GMT
Not After : Mar 8 02:00:17 2024 GMT
Subject: CN=200eb3f5-8de1-449e-ac87-c0daf5666598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:32:15:80:48:2c:56:df:be:b1:b1:7f:f0:
1a:a1:c7:3a:48:dc:dd:3d:dc:08:11:4e:8d:23:1d:
97:41:1c:1e:e5:68:9b:13:08:8d:c4:be:1c:8f:ef:
9f:12:61:67:bf:34:ae:40:10:d3:ca:ea:93:69:0c:
1f:7d:ed:b8:94:f1:65:81:cb:54:fb:0d:45:c4:8c:
65:27:52:cc:35:56:15:b2:7f:02:59:78:b0:d3:e7:
02:8c:1f:eb:23:e2:31:87:bf:11:44:39:27:ee:6b:
2c:18:dc:df:d6:18:81:8e:ba:4c:6f:3b:27:eb:b4:
6f:9c:3e:f0:a8:b6:46:2c:85:9c:42:4f:49:dc:0f:
ca:8e:4f:23:e3:09:1e:79:bb:66:99:b2:f1:cb:53:
e8:b1:63:aa:60:0d:0a:26:10:75:b0:33:14:55:c6:
8a:ba:5c:e6:ca:41:bd:25:12:e6:ba:b0:04:33:9c:
b4:d9:16:9e:36:3c:42:44:52:aa:b0:0e:ad:fe:64:
7b:45:d6:b9:3e:64:e2:69:40:44:f5:43:62:f7:fc:
ce:24:3b:92:6a:9e:7e:a7:2b:08:61:40:ea:19:3a:
2d:5e:d8:f2:24:da:51:5b:a0:20:a6:dd:15:7c:c4:
29:d8:be:66:62:9e:24:b3:fc:4e:29:98:99:0b:57:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:50:A8:F5:DA:05:E8:5B:B5:95:A3:FA:2D:81:28:EC:8E:5E:51:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/c420c7b8-efd4-3ff7-a1da-db9b164e5132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl
X509v3 Authority Key Identifier:
keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:f9:d3:0c:cd:42:b9:81:aa:6d:58:85:a6:cc:8b:c5:28:ff:
e2:90:ec:9e:a6:bf:a4:c3:cc:40:7b:ea:b0:42:ad:ea:67:ea:
25:06:f4:a4:10:f8:5a:81:78:48:a0:87:d1:8f:24:db:7a:95:
95:80:3f:9a:b5:61:9e:9c:bc:e7:3e:e9:ff:81:ff:5d:2c:7c:
a3:cf:b3:a9:5d:95:1c:4f:8f:8f:b8:3d:42:b9:5c:c9:78:33:
c0:23:70:e7:00:bc:74:e2:da:2f:06:51:49:48:32:00:29:f7:
f8:85:3b:ac:dd:9e:a6:49:93:ef:c0:42:13:d6:61:2b:8b:c1:
e6:da:09:f2:57:c4:53:c9:25:d1:82:09:73:81:0e:65:32:37:
2a:20:5e:09:a8:6d:60:d5:14:28:01:d4:9d:5d:7f:85:36:f7:
2c:99:58:2b:a7:09:ca:60:77:5a:3c:12:d4:bc:03:3c:df:f6:
79:c4:d4:27:d5:bb:0c:d9:41:f0:2c:22:53:2c:0f:17:20:f3:
4e:13:27:01:c6:7f:44:28:1f:8f:2e:f3:c6:2c:e0:c6:96:a9:
ec:eb:a0:4a:77:b2:5f:9b:04:89:b3:99:f5:84:38:e4:2d:aa:
d3:ed:1b:ac:a5:ed:cc:62:a6:6f:fb:b8:7a:d7:11:a0:bd:87:
55:89:d1:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQnM/vjMPWcvq52AAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQyMGJhYjEtMTFlZi00ZjQyLWE3MTgtYzBiNzI3ZGZj
MmY4MB4XDTIzMTIwOTAyMDAxN1oXDTI0MDMwODAyMDAxN1owLzEtMCsGA1UEAxMk
MjAwZWIzZjUtOGRlMS00NDllLWFjODctYzBkYWY1NjY2NTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpMyFYBILFbfvrGxf/Aaocc6SNzdPdwIEU6N
Ix2XQRwe5WibEwiNxL4cj++fEmFnvzSuQBDTyuqTaQwffe24lPFlgctU+w1FxIxl
J1LMNVYVsn8CWXiw0+cCjB/rI+Ixh78RRDkn7mssGNzf1hiBjrpMbzsn67RvnD7w
qLZGLIWcQk9J3A/Kjk8j4wkeebtmmbLxy1PosWOqYA0KJhB1sDMUVcaKulzmykG9
JRLmurAEM5y02RaeNjxCRFKqsA6t/mR7Rda5PmTiaUBE9UNi9/zOJDuSap5+pysI
YUDqGTotXtjyJNpRW6Agpt0VfMQp2L5mYp4ks/xOKZiZC1cruwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGBQqPXaBehbtZWj+i2BKOyOXlFOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIw
YmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3MjdkZmMyZjgvYzQyMGM3YjgtZWZkNC0z
ZmY3LWExZGEtZGI5YjE2NGU1MTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQyMGJhYjEtMTFlZi00ZjQyLWE3
MTgtYzBiNzI3ZGZjMmY4L2FkMjBiYWIxLTExZWYtNGY0Mi1hNzE4LWMwYjcyN2Rm
YzJmOC5jcmwwHwYDVR0jBBgwFoAUt/Jr1nLOfEAA2aZun6Gx8MAiAHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3
MjdkZmMyZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6FoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJP50wzNQrmBqm1YhabMi8Uo/+KQ7J6mv6TDzEB76rBCrepn6iUG9KQQ
+FqBeEigh9GPJNt6lZWAP5q1YZ6cvOc+6f+B/10sfKPPs6ldlRxPj4+4PUK5XMl4
M8AjcOcAvHTi2i8GUUlIMgAp9/iFO6zdnqZJk+/AQhPWYSuLwebaCfJXxFPJJdGC
CXOBDmUyNyogXgmobWDVFCgB1J1df4U29yyZWCunCcpgd1o8EtS8Azzf9nnE1CfV
uwzZQfAsIlMsDxcg804TJwHGf0QoH48u88Ys4MaWqezroEp3sl+bBImzmfWEOOQt
qtPtG6yl7cxipm/7uHrXEaC9h1WJ0Ss=
-----END CERTIFICATE-----
Generated at Mon Dec 18 19:01:42 2023 by rpki-client on console-ams.rpki-client.org