Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7be32b8-4938-355f-9a31-760c98272bac.roa
File: a7be32b8-4938-355f-9a31-760c98272bac.roa (raw, json)
Hash identifier: gQBpAZbP3e8FcQaPcPgaAJIJyMyPn5tEo8I+jFx+bvA=
Subject key identifier: 19:A8:7E:67:CE:BF:9C:14:CB:EC:21:F0:F4:3E:B2:8D:85:91:48:A6
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F432858478FABBDC0BADE0C1B1DAFDDC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7be32b8-4938-355f-9a31-760c98272bac.roa
Signing time: Wed 16 Oct 2024 14:26:35 +0000
ROA not before: Wed 16 Oct 2024 14:26:35 +0000
ROA not after: Tue 14 Jan 2025 15:26:35 +0000
asID: 81
IP address blocks: 152.46.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:8f:ab:bd:c0:ba:de:0c:1b:1d:af:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Oct 16 14:26:35 2024 GMT
Not After : Jan 14 15:26:35 2025 GMT
Subject: CN=2fab3f9b-324c-4653-982d-c10572fdbed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:00:00:d2:d7:b7:49:17:89:5e:bd:1e:b2:
bf:72:30:6f:68:41:b8:f1:2a:47:ca:07:f0:f8:17:
b7:bc:aa:86:c2:3e:94:7d:71:14:01:2f:ea:ad:9e:
a8:b1:d7:6f:03:61:1e:7d:f1:3b:1b:4b:68:bb:fd:
25:98:52:50:88:76:85:01:67:e2:d6:77:9f:93:ee:
e0:88:7a:b0:bc:cd:f9:00:e5:ac:15:a8:5d:74:29:
c1:94:0b:0e:39:21:2b:00:1a:ac:2b:09:0e:53:c2:
5b:9c:03:43:4a:a6:61:33:be:c4:ef:97:20:11:51:
3e:64:6e:1e:d8:1b:0b:41:44:61:18:f6:d5:b0:03:
cf:d1:a8:2c:8a:aa:6b:06:19:d4:3a:db:d8:7b:f6:
71:f4:ee:3a:c8:d4:7a:3c:98:fa:79:55:ec:5f:5e:
1a:19:b0:a2:33:8d:f9:76:67:53:ca:6e:bf:2c:d2:
51:98:4a:f2:a7:dc:b9:ac:23:8a:a3:6c:1c:1f:bc:
a6:1b:f5:46:93:53:af:25:85:95:77:c2:f2:d9:2d:
21:57:b9:fa:9f:79:ce:76:21:d0:83:07:91:cf:ee:
7e:0a:59:89:10:44:4c:16:94:81:8e:49:cb:88:47:
8c:cd:d9:d2:3b:6a:3b:00:69:39:73:c2:81:9e:ca:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:7E:67:CE:BF:9C:14:CB:EC:21:F0:F4:3E:B2:8D:85:91:48:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7be32b8-4938-355f-9a31-760c98272bac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
152.46.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:e5:b8:ae:16:60:3d:94:a0:a0:dd:d7:fc:9c:23:6e:1a:f3:
c7:3d:a2:24:d0:e6:a6:85:3f:8c:fd:c2:fa:c0:4e:c4:d4:76:
c8:bb:99:d2:c3:b2:5d:cb:d1:54:4b:79:52:3e:50:ee:b6:ba:
9d:a6:6b:b0:cc:c4:33:28:45:37:2f:26:db:23:a8:fa:b2:aa:
5e:c2:8b:49:6e:45:71:03:81:8f:ac:bd:6a:d4:3a:72:f1:d8:
6d:2f:32:fe:f4:25:08:51:4a:6b:93:d0:70:b1:1a:d3:5c:79:
f6:45:34:32:99:f2:c5:38:ca:bb:81:97:da:fb:2b:54:bd:6f:
89:a1:40:fc:77:d5:a4:e2:5d:33:74:62:6c:dc:b7:c0:a7:43:
8a:d6:43:7b:74:ce:f5:6a:f5:62:a8:2a:f4:69:88:77:51:74:
b6:30:17:54:39:66:67:6a:54:f3:d4:26:15:ef:33:e3:16:0e:
34:e5:92:05:9b:ba:fa:36:a1:74:7a:d7:78:8d:fb:d7:2e:ed:
af:2c:40:19:51:d8:79:ec:46:08:2d:91:19:16:88:87:ed:fb:
45:49:84:9d:7f:6b:08:57:a0:b7:08:57:85:3d:2d:a6:ca:9b:
30:59:37:98:8f:7f:70:1e:2c:9e:88:d6:5d:97:39:94:ec:11:
70:ce:d4:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEePq73Aut4MGx2v3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI0MTAxNjE0MjYzNVoXDTI1MDExNDE1MjYzNVowLzEtMCsGA1UEAxMk
MmZhYjNmOWItMzI0Yy00NjUzLTk4MmQtYzEwNTcyZmRiZWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4AAANLXt0kXiV69HrK/cjBvaEG48SpHygfw
+Be3vKqGwj6UfXEUAS/qrZ6osddvA2EeffE7G0tou/0lmFJQiHaFAWfi1nefk+7g
iHqwvM35AOWsFahddCnBlAsOOSErABqsKwkOU8JbnANDSqZhM77E75cgEVE+ZG4e
2BsLQURhGPbVsAPP0agsiqprBhnUOtvYe/Zx9O46yNR6PJj6eVXsX14aGbCiM435
dmdTym6/LNJRmEryp9y5rCOKo2wcH7ymG/VGk1OvJYWVd8Ly2S0hV7n6n3nOdiHQ
gweRz+5+ClmJEERMFpSBjknLiEeMzdnSO2o7AGk5c8KBnsr6owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmofmfOv5wUy+wh8PQ+so2FkUimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTdiZTMyYjgtNDkzOC0z
NTVmLTlhMzEtNzYwYzk4MjcyYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHluK4WYD2UoKDd1/ycI24a88c9oiTQ5qaFP4z9wvrATsTUdsi7mdLD
sl3L0VRLeVI+UO62up2ma7DMxDMoRTcvJtsjqPqyql7Ci0luRXEDgY+svWrUOnLx
2G0vMv70JQhRSmuT0HCxGtNcefZFNDKZ8sU4yruBl9r7K1S9b4mhQPx31aTiXTN0
Ymzct8CnQ4rWQ3t0zvVq9WKoKvRpiHdRdLYwF1Q5ZmdqVPPUJhXvM+MWDjTlkgWb
uvo2oXR613iN+9cu7a8sQBlR2HnsRggtkRkWiIft+0VJhJ1/awhXoLcIV4U9LabK
mzBZN5iPf3AeLJ6I1l2XOZTsEXDO1Fk=
-----END CERTIFICATE-----
Generated at Fri Nov 8 18:02:44 2024 by rpki-client on console-fra.rpki-client.org