Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/1c525b11-0ff9-37f3-af3f-fcb6ade3e03f.roa
File: 1c525b11-0ff9-37f3-af3f-fcb6ade3e03f.roa (raw, json)
Hash identifier: BFXt0BB+iukrlz142ts4hLIqL7iHMYFViEWh+h4AzNI=
Subject key identifier: FE:7A:67:0C:68:83:AC:6D:47:2C:58:4E:0A:8C:D7:CF:E1:0D:B8:E3
Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
Certificate serial: 010D0C9F43285846E41E8DD0AB881A1C1AF96780
Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/1c525b11-0ff9-37f3-af3f-fcb6ade3e03f.roa
Signing time: Fri 16 Aug 2024 03:38:53 +0000
ROA not before: Fri 16 Aug 2024 03:38:53 +0000
ROA not after: Thu 14 Nov 2024 04:38:53 +0000
asID: 399673
IP address blocks: 216.25.96.0/20 maxlen: 20
216.147.64.0/19 maxlen: 19
2606:5640::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 16 Aug 2024 13:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:e4:1e:8d:d0:ab:88:1a:1c:1a:f9:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
Validity
Not Before: Aug 16 03:38:53 2024 GMT
Not After : Nov 14 04:38:53 2024 GMT
Subject: CN=a68fe009-398e-4107-a4a6-c7ad247d0abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:24:04:c4:83:44:f0:19:88:74:2a:d7:0d:
6a:fc:57:b0:68:b2:25:dc:65:cf:c0:4b:3d:e5:a4:
d3:1c:d0:a0:da:07:89:e8:0b:5a:46:16:c2:bf:77:
38:f2:84:4e:7d:e6:4a:54:50:3d:48:9f:f4:76:b4:
ea:df:5a:6d:5b:00:84:ee:fc:07:b6:86:c2:20:8e:
a8:96:e6:c1:7c:a7:a8:10:02:02:8a:bc:25:a8:8c:
34:cc:84:f9:a4:fe:bf:c0:dc:94:f1:1b:8c:88:89:
1c:14:96:ff:b7:6d:25:bf:91:6f:50:9e:7c:fe:b0:
6e:68:c4:c9:68:bd:5d:57:34:b8:ee:34:a9:a2:63:
8d:c9:9b:f9:43:f7:0e:9e:ac:87:86:83:65:92:ff:
fd:4f:3c:0c:ce:34:ae:07:d6:51:a7:54:00:f3:18:
6c:79:76:e2:4c:34:88:7b:34:51:ef:e7:37:d5:f3:
b1:50:d4:0f:27:57:a5:5b:51:c5:90:21:0a:d4:52:
15:6c:19:f6:1f:24:31:5c:e9:f6:b4:69:10:8d:ec:
87:65:47:6b:b5:85:21:14:b3:84:ea:31:99:4e:6a:
90:97:d5:76:fb:71:d9:5c:6e:12:37:be:c9:43:db:
e0:56:e7:5c:ff:c9:35:9d:80:c7:af:04:a9:39:fd:
fe:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:67:0C:68:83:AC:6D:47:2C:58:4E:0A:8C:D7:CF:E1:0D:B8:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/1c525b11-0ff9-37f3-af3f-fcb6ade3e03f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl
X509v3 Authority Key Identifier:
keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.25.96.0/20
216.147.64.0/19
IPv6:
2606:5640::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b9:7c:b2:6a:65:80:35:40:c2:34:26:37:e4:bc:8c:c1:a8:
dc:d0:19:d6:1a:de:13:06:de:17:53:31:ec:6a:be:ff:cf:62:
69:c4:b3:e2:7b:68:65:27:95:36:13:60:71:c0:88:70:0e:fb:
27:f2:b3:bd:df:93:83:d5:b9:f4:05:01:c1:aa:f0:ef:7f:ee:
66:ef:65:6c:80:a6:7a:21:68:c7:93:82:2c:dc:eb:dd:75:f3:
12:22:fc:61:c5:0c:70:04:34:8d:89:a1:8d:1e:74:a6:12:9f:
b2:19:9a:95:12:bc:b0:54:c8:14:dc:a8:c9:58:03:0c:00:48:
dc:20:db:80:b1:ce:ea:26:e4:98:06:73:2f:d1:5b:f8:44:61:
e2:5e:7e:ce:2b:40:c0:3d:5c:8f:ae:c0:48:55:ca:9d:b9:5a:
e3:80:b2:99:6a:49:89:3c:39:13:05:57:67:64:6a:10:ca:6c:
4f:a9:aa:41:ab:e2:3d:f6:22:55:77:a2:94:86:2a:09:44:6a:
5b:5d:93:24:0a:81:6d:2c:c2:e7:e6:b6:5a:b3:16:3f:60:d2:
6d:5b:d0:f9:c0:3b:48:28:b3:46:b1:d1:ee:2c:bd:f6:b4:ea:
7b:5c:8c:5d:fd:68:ca:17:04:5b:f1:d0:51:e5:47:9c:5b:c6:
1b:e2:b2:43
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEbkHo3Qq4gaHBr5Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl
M2Q0MB4XDTI0MDgxNjAzMzg1M1oXDTI0MTExNDA0Mzg1M1owLzEtMCsGA1UEAxMk
YTY4ZmUwMDktMzk4ZS00MTA3LWE0YTYtYzdhZDI0N2QwYWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixAkBMSDRPAZiHQq1w1q/FewaLIl3GXPwEs9
5aTTHNCg2geJ6AtaRhbCv3c48oROfeZKVFA9SJ/0drTq31ptWwCE7vwHtobCII6o
lubBfKeoEAICirwlqIw0zIT5pP6/wNyU8RuMiIkcFJb/t20lv5FvUJ58/rBuaMTJ
aL1dVzS47jSpomONyZv5Q/cOnqyHhoNlkv/9TzwMzjSuB9ZRp1QA8xhseXbiTDSI
ezRR7+c31fOxUNQPJ1elW1HFkCEK1FIVbBn2HyQxXOn2tGkQjeyHZUdrtYUhFLOE
6jGZTmqQl9V2+3HZXG4SN77JQ9vgVudc/8k1nYDHrwSpOf3+1QIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFP56Zwxog6xtRyxYTgqM18/hDbjjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5
M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvMWM1MjViMTEtMGZmOS0z
N2YzLWFmM2YtZmNiNmFkZTNlMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4
OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1
ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3
ZjZjNWUzZDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE2BlgAwQF
2JNAMA0EAgACMAcDBQAmBlZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAES5fLJqZYA1QMI0JjfkvIzBqNzQ
GdYa3hMG3hdTMexqvv/PYmnEs+J7aGUnlTYTYHHAiHAO+yfys73fk4PVufQFAcGq
8O9/7mbvZWyApnohaMeTgizc69118xIi/GHFDHAENI2JoY0edKYSn7IZmpUSvLBU
yBTcqMlYAwwASNwg24Cxzuom5JgGcy/RW/hEYeJefs4rQMA9XI+uwEhVyp25WuOA
splqSYk8ORMFV2dkahDKbE+pqkGr4j32IlV3opSGKglEaltdkyQKgW0swufmtlqz
Fj9g0m1b0PnAO0gos0ax0e4svfa06ntcjF39aMoXBFvx0FHlR5xbxhviskM=
-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:27 2024 by rpki-client on console-fra.rpki-client.org