Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa
File: f50de566-08ba-3fb6-a774-fa9efedc0f88.roa (raw, json)
Hash identifier: UZbihBcy4wl+yuM7KeMJfvTvOwN1l/24BBZ7aFp0Jm4=
Subject key identifier: 68:3D:4A:D3:90:A8:00:86:C1:DC:34:1F:80:65:A1:9E:F7:48:45:A9
Certificate issuer: /CN=2e377161-8215-4a85-9659-ebe2f78f6029
Certificate serial: 010D0C9F432858473393568EBA8F5211B0843F00
Authority key identifier: 01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa
Signing time: Fri 13 Sep 2024 14:43:03 +0000
ROA not before: Fri 13 Sep 2024 14:43:03 +0000
ROA not after: Thu 12 Dec 2024 15:43:03 +0000
asID: 26873
IP address blocks: 69.89.160.0/20 maxlen: 20
69.164.224.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 13 Sep 2024 15:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:33:93:56:8e:ba:8f:52:11:b0:84:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e377161-8215-4a85-9659-ebe2f78f6029
Validity
Not Before: Sep 13 14:43:03 2024 GMT
Not After : Dec 12 15:43:03 2024 GMT
Subject: CN=1abfac4e-73aa-4c56-97ca-11120bd89bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:7e:c5:7b:41:33:71:49:a3:f2:2c:af:27:
61:f7:e5:98:37:2d:69:3d:aa:0c:51:2c:17:62:b8:
80:da:fe:3b:79:af:9c:01:7b:7b:73:0e:bc:18:1b:
1e:8e:3e:67:e8:a8:15:f4:19:bb:18:06:ad:06:47:
39:4a:a6:e6:86:20:6b:03:a3:64:93:2f:b7:40:87:
6f:27:4c:ab:23:39:f4:51:3b:a4:a5:81:8f:aa:17:
01:1b:a4:3a:78:5f:cf:97:e5:ee:9e:ec:4a:87:cb:
27:42:94:09:03:e4:c1:1a:d9:72:3d:d0:0a:d7:a6:
77:1f:3a:4b:90:77:25:2f:0f:20:4b:a3:60:c8:35:
17:34:52:b7:65:54:ae:e1:2b:48:9b:fd:86:17:10:
00:87:1a:11:d1:5a:52:22:2e:8b:0a:fc:3c:39:d6:
6e:21:b5:05:4c:c7:87:e5:88:44:69:26:20:65:b6:
22:3a:a7:51:0b:a8:16:78:74:9f:80:22:63:10:d7:
3b:d8:13:be:4d:d8:c6:d6:62:22:32:7b:57:41:97:
3a:35:18:b9:e2:01:46:70:4a:6e:39:fe:fc:68:66:
a6:a7:04:dc:94:4d:ea:ca:21:de:13:de:dc:97:2a:
6c:42:63:32:fa:5e:5f:47:8d:53:c8:bb:e9:6b:83:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:4A:D3:90:A8:00:86:C1:DC:34:1F:80:65:A1:9E:F7:48:45:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/f50de566-08ba-3fb6-a774-fa9efedc0f88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029/2e377161-8215-4a85-9659-ebe2f78f6029.crl
X509v3 Authority Key Identifier:
keyid:01:6E:66:D3:27:17:81:4E:BF:ED:E9:D9:3D:DC:6A:B2:A9:17:F6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e377161-8215-4a85-9659-ebe2f78f6029.cer
sbgp-ipAddrBlock: critical
IPv4:
69.89.160.0/20
69.164.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:0f:e3:5f:5b:5e:dd:19:46:16:db:75:c7:4f:07:08:74:ef:
9a:21:26:da:df:81:b4:b9:fb:5d:80:22:a8:8c:5e:70:00:7d:
ac:00:e8:65:be:84:70:60:35:cc:f5:5b:cc:d8:2e:85:d8:dc:
7d:72:9f:51:6b:23:f5:bd:43:58:15:5a:03:03:35:e7:3d:50:
7d:11:fc:e5:be:83:62:d9:f8:2a:4c:d7:78:38:98:db:f5:b6:
37:08:1f:03:b4:df:ca:7c:ff:30:de:49:83:e3:af:d3:4b:ff:
4a:f1:f3:b5:56:77:64:2b:e6:02:02:f7:1e:dc:6b:91:58:53:
93:12:29:95:78:69:ae:37:90:35:f4:7e:98:7a:f2:4b:7b:82:
ba:e2:f1:85:2d:b6:d0:96:59:de:a1:ad:e8:ab:67:90:b1:18:
87:ba:60:6f:9e:2b:c6:3b:bd:95:dd:95:1d:7e:e1:6e:08:32:
72:4e:64:5a:e1:1b:2e:42:c6:47:19:0d:5b:16:59:57:fc:f4:
88:5d:62:51:d7:8f:5e:f2:57:71:d1:2b:82:a0:82:f4:fc:80:
05:87:ab:b0:0f:55:c8:4b:c8:86:0a:6c:7a:69:df:b7:c3:a4:
b1:c7:ee:c3:8d:3a:9b:95:1e:c9:06:da:c0:bb:aa:06:98:91:
cd:9c:90:07
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEczk1aOuo9SEbCEPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmUzNzcxNjEtODIxNS00YTg1LTk2NTktZWJlMmY3OGY2
MDI5MB4XDTI0MDkxMzE0NDMwM1oXDTI0MTIxMjE1NDMwM1owLzEtMCsGA1UEAxMk
MWFiZmFjNGUtNzNhYS00YzU2LTk3Y2EtMTExMjBiZDg5YmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocx+xXtBM3FJo/Isrydh9+WYNy1pPaoMUSwX
YriA2v47ea+cAXt7cw68GBsejj5n6KgV9Bm7GAatBkc5SqbmhiBrA6Nkky+3QIdv
J0yrIzn0UTukpYGPqhcBG6Q6eF/Pl+XunuxKh8snQpQJA+TBGtlyPdAK16Z3HzpL
kHclLw8gS6NgyDUXNFK3ZVSu4StIm/2GFxAAhxoR0VpSIi6LCvw8OdZuIbUFTMeH
5YhEaSYgZbYiOqdRC6gWeHSfgCJjENc72BO+TdjG1mIiMntXQZc6NRi54gFGcEpu
Of78aGampwTclE3qyiHeE97clypsQmMy+l5fR41TyLvpa4N5YQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGg9StOQqACGwdw0H4BloZ73SEWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTM3
NzE2MS04MjE1LTRhODUtOTY1OS1lYmUyZjc4ZjYwMjkvZjUwZGU1NjYtMDhiYS0z
ZmI2LWE3NzQtZmE5ZWZlZGMwZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmUzNzcxNjEtODIxNS00YTg1LTk2
NTktZWJlMmY3OGY2MDI5LzJlMzc3MTYxLTgyMTUtNGE4NS05NjU5LWViZTJmNzhm
NjAyOS5jcmwwHwYDVR0jBBgwFoAUAW5m0ycXgU6/7enZPdxqsqkX9kowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTM3NzE2MS04MjE1LTRhODUtOTY1OS1lYmUy
Zjc4ZjYwMjkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQERVmgAwQE
RaTgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABwP419bXt0ZRhbbdcdPBwh075ohJtrfgbS5+12AIqiMXnAA
fawA6GW+hHBgNcz1W8zYLoXY3H1yn1FrI/W9Q1gVWgMDNec9UH0R/OW+g2LZ+CpM
13g4mNv1tjcIHwO038p8/zDeSYPjr9NL/0rx87VWd2Qr5gIC9x7ca5FYU5MSKZV4
aa43kDX0fph68kt7grri8YUtttCWWd6hreirZ5CxGIe6YG+eK8Y7vZXdlR1+4W4I
MnJOZFrhGy5CxkcZDVsWWVf89IhdYlHXj17yV3HRK4KggvT8gAWHq7APVchLyIYK
bHpp37fDpLHH7sONOpuVHskG2sC7qgaYkc2ckAc=
-----END CERTIFICATE-----
Generated at Fri Sep 13 17:40:58 2024 by rpki-client on console-fra.rpki-client.org