Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa
File: 638780be-190d-368a-a450-38cc8cb5db37.roa (raw, json)
Hash identifier: BFTOLkqDur04ptXCENY3tNATkS48pDeI1USQzCaJLNQ=
Subject key identifier: 60:2C:99:F4:70:48:FE:8D:F0:76:8F:AE:5A:A7:19:B7:5C:DD:50:83
Certificate issuer: /CN=b02168db-a914-4497-b4f3-7926b36419c5
Certificate serial: 010D0C9F43285842E549E343566E5F2A69A841F0
Authority key identifier: 14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa
Signing time: Tue 15 Aug 2023 18:34:15 +0000
ROA not before: Tue 15 Aug 2023 18:34:15 +0000
ROA not after: Mon 13 Nov 2023 19:34:15 +0000
asID: 7896
IP address blocks: 64.39.240.0/20 maxlen: 24
216.128.208.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:e5:49:e3:43:56:6e:5f:2a:69:a8:41:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02168db-a914-4497-b4f3-7926b36419c5
Validity
Not Before: Aug 15 18:34:15 2023 GMT
Not After : Nov 13 19:34:15 2023 GMT
Subject: CN=2bf840f9-663d-4134-b65e-7de5afc88d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:8a:10:77:2b:80:a2:bf:a8:99:cf:9b:e3:
6f:07:83:b6:c0:63:6a:4c:9f:9a:18:fe:37:a0:70:
41:81:6b:0d:9f:b1:c4:f5:3e:26:8f:2c:8c:d7:e2:
e6:7e:c8:a4:4f:52:21:12:1e:f9:03:c0:39:fd:9b:
20:01:cb:79:65:07:29:8b:64:df:81:7d:15:62:aa:
9a:f7:f8:c7:f7:de:70:fc:c3:7a:f8:05:07:1e:21:
fe:1a:16:0d:37:5c:28:cc:11:fb:1b:f1:5e:70:1d:
d5:4e:8a:73:ab:34:64:25:a3:a0:4a:a5:f8:cd:21:
49:b1:29:23:d7:ff:d2:7a:4b:78:cb:2f:e6:c5:a4:
ad:4f:a4:0e:4c:64:ee:84:1c:1b:5b:f8:6b:18:6e:
01:9f:0a:e3:c6:1e:23:a8:58:01:0b:d7:e4:b4:72:
63:7d:0c:b4:c9:ab:40:92:1d:ac:11:45:2d:5d:78:
0b:5d:13:33:b3:d3:fc:78:41:50:ef:1b:6b:5d:1b:
f7:46:e2:95:3b:1a:dd:d2:55:fc:cc:9d:28:43:8c:
28:d0:94:f1:a8:35:13:4c:94:d4:36:3e:e1:a1:6e:
01:45:83:30:b1:7c:56:73:8e:9d:fa:54:1d:9f:d1:
9d:5a:8e:2f:6b:e4:c0:0a:6d:77:4e:ba:88:89:a3:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:99:F4:70:48:FE:8D:F0:76:8F:AE:5A:A7:19:B7:5C:DD:50:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/638780be-190d-368a-a450-38cc8cb5db37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5/b02168db-a914-4497-b4f3-7926b36419c5.crl
X509v3 Authority Key Identifier:
keyid:14:66:D7:0F:A2:22:05:D4:AF:19:00:28:F5:6B:20:56:53:98:87:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b02168db-a914-4497-b4f3-7926b36419c5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.39.240.0/20
216.128.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:7d:08:e4:d0:20:a2:9c:04:36:df:38:cc:c8:8a:1e:b4:78:
cb:3c:81:15:bf:55:88:92:24:c0:e5:77:0c:42:3d:20:60:e6:
9e:da:08:a5:9b:ec:8f:4d:5a:24:d1:66:30:2a:7b:e2:86:66:
25:df:17:3a:fb:ab:67:20:9a:66:d4:be:1a:ea:4b:5c:11:86:
f3:99:93:43:1a:d8:4d:13:33:e7:9e:d4:70:9d:fe:8a:86:ee:
f5:9a:63:82:72:f6:ce:05:6e:7e:88:45:5f:34:26:7c:c6:75:
e1:07:ea:b8:97:8f:79:39:5d:4d:07:31:c9:d5:20:8f:48:ff:
46:a4:be:a4:28:72:60:e7:f1:2a:35:e1:b6:2b:a7:06:14:56:
5e:80:f1:0c:e3:1c:91:23:c9:3f:02:1e:8e:6b:6e:26:82:51:
53:d9:4b:77:b0:a2:2e:39:fb:a1:bf:2f:0b:92:a8:d2:e4:12:
6a:4d:4b:ba:da:9c:d3:98:db:9e:7a:8e:92:bc:47:f0:ec:8c:
26:46:8e:90:b8:a2:1f:2f:df:71:ea:21:3a:88:b2:31:ba:98:
50:56:85:35:08:89:01:dc:e8:49:5d:18:0e:31:b3:de:e2:29:
12:42:dc:a4:f9:6d:d4:a9:9c:c4:4e:45:5a:71:fa:94:26:b4:
3d:97:1a:85
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWELlSeNDVm5fKmmoQfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjAyMTY4ZGItYTkxNC00NDk3LWI0ZjMtNzkyNmIzNjQx
OWM1MB4XDTIzMDgxNTE4MzQxNVoXDTIzMTExMzE5MzQxNVowLzEtMCsGA1UEAxMk
MmJmODQwZjktNjYzZC00MTM0LWI2NWUtN2RlNWFmYzg4ZDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEOKEHcrgKK/qJnPm+NvB4O2wGNqTJ+aGP43
oHBBgWsNn7HE9T4mjyyM1+LmfsikT1IhEh75A8A5/ZsgAct5ZQcpi2TfgX0VYqqa
9/jH995w/MN6+AUHHiH+GhYNN1wozBH7G/FecB3VTopzqzRkJaOgSqX4zSFJsSkj
1//Sekt4yy/mxaStT6QOTGTuhBwbW/hrGG4Bnwrjxh4jqFgBC9fktHJjfQy0yatA
kh2sEUUtXXgLXRMzs9P8eEFQ7xtrXRv3RuKVOxrd0lX8zJ0oQ4wo0JTxqDUTTJTU
Nj7hoW4BRYMwsXxWc46d+lQdn9GdWo4va+TACm13TrqIiaOqiQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGAsmfRwSP6N8HaPrlqnGbdc3VCDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMDIx
NjhkYi1hOTE0LTQ0OTctYjRmMy03OTI2YjM2NDE5YzUvNjM4NzgwYmUtMTkwZC0z
NjhhLWE0NTAtMzhjYzhjYjVkYjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjAyMTY4ZGItYTkxNC00NDk3LWI0
ZjMtNzkyNmIzNjQxOWM1L2IwMjE2OGRiLWE5MTQtNDQ5Ny1iNGYzLTc5MjZiMzY0
MTljNS5jcmwwHwYDVR0jBBgwFoAUFGbXD6IiBdSvGQAo9WsgVlOYh8AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMDIxNjhkYi1hOTE0LTQ0OTctYjRmMy03OTI2
YjM2NDE5YzUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQCfwAwQE
2IDQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAC59COTQIKKcBDbfOMzIih60eMs8gRW/VYiSJMDldwxCPSBg
5p7aCKWb7I9NWiTRZjAqe+KGZiXfFzr7q2cgmmbUvhrqS1wRhvOZk0Ma2E0TM+ee
1HCd/oqG7vWaY4Jy9s4Fbn6IRV80JnzGdeEH6riXj3k5XU0HMcnVII9I/0akvqQo
cmDn8So14bYrpwYUVl6A8QzjHJEjyT8CHo5rbiaCUVPZS3ewoi45+6G/LwuSqNLk
EmpNS7ranNOY2556jpK8R/DsjCZGjpC4oh8v33HqITqIsjG6mFBWhTUIiQHc6Eld
GA4xs97iKRJC3KT5bdSpnMRORVpx+pQmtD2XGoU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 17:28:21 2023 by rpki-client on console-fra.rpki-client.org