Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/44a8dc79-325f-33bf-8afd-b393db839cf1.roa
File: 44a8dc79-325f-33bf-8afd-b393db839cf1.roa (raw, json)
Hash identifier: BekqIQDD5zv6TJcuwZQ6nMAdDXV75IkucBlD2UTJ0ow=
Subject key identifier: 94:79:E5:6B:70:D2:E3:C3:07:93:0A:AA:3A:F9:37:B8:18:33:B1:5A
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABB9274D5058733FD3F340
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/44a8dc79-325f-33bf-8afd-b393db839cf1.roa
Signing time: Wed 16 Oct 2024 14:26:33 +0000
ROA not before: Wed 16 Oct 2024 14:26:33 +0000
ROA not after: Tue 14 Jan 2025 15:26:33 +0000
asID: 81
IP address blocks: 192.154.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:b9:27:4d:50:58:73:3f:d3:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:33 2024 GMT
Not After : Jan 14 15:26:33 2025 GMT
Subject: CN=14a6a829-0a62-4991-94c1-010b7570b17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:51:90:f2:a9:a1:0c:64:c5:7c:71:88:ad:35:
7e:07:fb:e3:f8:5e:49:94:2a:a6:4d:68:a2:1d:0d:
99:3e:09:4f:6e:f4:ed:91:be:c9:c9:9a:35:6a:c5:
d5:be:84:cc:b7:52:f9:1b:b3:12:49:54:68:aa:92:
08:20:fe:cf:40:ac:25:13:5f:0a:c3:78:bf:3b:53:
53:00:b3:9b:61:d5:61:a2:8e:5a:65:69:b6:66:20:
d7:01:17:44:ac:8c:eb:b7:80:e8:55:24:f0:0b:72:
2c:36:db:de:72:15:20:4f:c0:3c:71:de:95:90:bc:
d5:0f:2c:35:ca:c3:34:ef:12:a3:ed:41:28:9f:c6:
d4:4d:2b:30:52:c2:be:5d:2f:92:9f:ab:99:ff:78:
d5:02:8d:1c:47:67:f4:5b:e2:bf:a9:ff:4a:ee:b7:
e2:38:39:87:ae:0e:af:09:17:e8:9f:36:de:13:48:
ec:67:a4:dd:77:dd:e0:fe:f8:62:1e:ef:1c:c7:45:
b8:42:73:6e:cc:be:5b:19:03:38:1c:ec:8d:18:dd:
23:6b:67:50:db:38:5c:e0:9b:7e:77:69:fd:68:ad:
48:8b:ea:9d:54:a0:51:5b:9e:14:f5:f2:27:15:e9:
6e:fc:7e:66:8a:a1:98:f4:64:86:ac:24:f3:ba:86:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:79:E5:6B:70:D2:E3:C3:07:93:0A:AA:3A:F9:37:B8:18:33:B1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/44a8dc79-325f-33bf-8afd-b393db839cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:60:08:f4:37:aa:db:2b:c0:9e:61:ef:34:90:d5:fb:b4:e8:
3a:b3:46:b7:11:3f:8d:eb:af:3f:74:a9:91:d5:4c:95:44:e9:
75:fd:ff:31:ac:f6:f9:33:9b:22:1b:90:91:e8:49:e5:3a:57:
f3:69:90:c6:f6:1e:f1:b4:50:82:96:34:3b:74:89:5e:9a:57:
72:e9:57:b8:17:73:ee:39:06:4f:de:31:6e:4a:3e:24:ad:b0:
25:fe:8e:82:0c:33:fb:ff:37:86:f6:96:9a:70:0d:41:d2:bf:
83:93:0c:0d:c0:0d:91:d9:80:6a:86:24:43:9e:f4:6b:47:bb:
82:95:be:a0:57:30:57:ee:65:60:a6:b3:2b:aa:7f:ce:98:df:
a0:57:a1:38:00:57:a9:36:c4:17:14:7f:20:2b:b2:4f:20:54:
90:7c:1f:37:0c:d7:ee:ac:04:c5:2c:06:c8:a2:b2:74:88:66:
b6:db:53:3c:98:80:19:68:bb:62:10:c7:f3:4a:2b:65:f9:ad:
44:3f:83:52:84:6d:39:7c:ab:dd:5a:8e:ea:32:7b:d4:9b:f3:
72:4c:3e:4e:26:84:9a:d7:aa:38:26:c5:1b:d8:07:06:f5:9f:
b7:5c:33:83:6e:8d:70:7b:a6:7e:a5:1a:5d:72:37:a0:88:24:
ca:be:41:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq7knTVBYcz/T80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzM1oXDTI1MDExNDE1MjYzM1owLzEtMCsGA1UEAxMk
MTRhNmE4MjktMGE2Mi00OTkxLTk0YzEtMDEwYjc1NzBiMTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VGQ8qmhDGTFfHGIrTV+B/vj+F5JlCqmTWii
HQ2ZPglPbvTtkb7JyZo1asXVvoTMt1L5G7MSSVRoqpIIIP7PQKwlE18Kw3i/O1NT
ALObYdVhoo5aZWm2ZiDXARdErIzrt4DoVSTwC3IsNtvechUgT8A8cd6VkLzVDyw1
ysM07xKj7UEon8bUTSswUsK+XS+Sn6uZ/3jVAo0cR2f0W+K/qf9K7rfiODmHrg6v
CRfonzbeE0jsZ6Tdd93g/vhiHu8cx0W4QnNuzL5bGQM4HOyNGN0ja2dQ2zhc4Jt+
d2n9aK1Ii+qdVKBRW54U9fInFelu/H5miqGY9GSGrCTzuobrRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJR55Wtw0uPDB5MKqjr5N7gYM7FaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDRhOGRjNzktMzI1Zi0z
M2JmLThhZmQtYjM5M2RiODM5Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZgCPQ3qtsrwJ5h7zSQ1fu06DqzRrcRP43rrz90qZHVTJVE6XX9/zGs
9vkzmyIbkJHoSeU6V/NpkMb2HvG0UIKWNDt0iV6aV3LpV7gXc+45Bk/eMW5KPiSt
sCX+joIMM/v/N4b2lppwDUHSv4OTDA3ADZHZgGqGJEOe9GtHu4KVvqBXMFfuZWCm
syuqf86Y36BXoTgAV6k2xBcUfyArsk8gVJB8HzcM1+6sBMUsBsiisnSIZrbbUzyY
gBlou2IQx/NKK2X5rUQ/g1KEbTl8q91ajuoye9Sb83JMPk4mhJrXqjgmxRvYBwb1
n7dcM4NujXB7pn6lGl1yN6CIJMq+QXo=
-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:43 2024 by rpki-client on console-fra.rpki-client.org