Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d572a9ee-4e30-3641-bfe6-c5ded87680d9.roa
File: d572a9ee-4e30-3641-bfe6-c5ded87680d9.roa (raw, json)
Hash identifier: dpkXrc0nKJ1nGzZbQ28twWdngOi5Qqj1d8iJnQyn75I=
Subject key identifier: 08:36:9F:CC:66:96:58:A3:32:85:7D:94:DE:03:1E:89:33:65:6D:70
Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial: 010D0C9F4328584683E5288E2994B00A250FF4A0
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d572a9ee-4e30-3641-bfe6-c5ded87680d9.roa
Signing time: Fri 12 Jul 2024 16:25:38 +0000
ROA not before: Fri 12 Jul 2024 16:25:38 +0000
ROA not after: Thu 10 Oct 2024 16:25:38 +0000
asID: 26934
IP address blocks: 207.160.151.0/24 maxlen: 24
207.160.152.0/24 maxlen: 24
209.106.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jul 2024 14:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:83:e5:28:8e:29:94:b0:0a:25:0f:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Validity
Not Before: Jul 12 16:25:38 2024 GMT
Not After : Oct 10 16:25:38 2024 GMT
Subject: CN=4926a6b0-8965-41de-9dd3-5a4c9fece533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:10:ef:84:7a:4d:ba:71:e9:cb:81:bc:54:
91:f7:e1:4f:19:36:19:32:8e:6a:60:81:80:41:df:
16:80:14:9a:7d:e0:ea:f4:47:cf:e1:be:5d:44:26:
2f:25:61:51:9f:a6:48:11:9f:6d:e8:40:7f:c4:16:
34:b5:b0:99:1f:18:6f:62:86:23:9a:c2:80:38:7b:
ef:51:3c:37:66:a6:32:3c:01:bf:64:58:9a:23:4e:
cb:59:00:f3:48:7f:a3:47:59:d2:fe:75:91:cc:72:
29:b4:35:72:40:eb:1c:4d:5f:f1:15:4f:cd:89:3e:
43:af:9f:b8:37:33:2a:62:87:40:56:b4:bc:0e:18:
51:a4:6f:02:65:2b:cd:96:9e:9a:9e:46:ed:42:c8:
e0:4f:75:f7:75:dc:60:fa:bb:43:6f:8c:e3:e0:e5:
5e:6e:83:b6:76:d9:1a:31:2c:ff:02:79:dc:cf:25:
c2:86:30:67:53:a1:ba:72:99:04:bc:b1:79:d2:94:
57:81:5a:0b:80:f7:27:d1:01:bd:f7:31:05:74:43:
36:3f:33:35:e9:14:48:9a:25:1e:bd:01:02:2c:3a:
b9:15:34:9b:02:9b:44:d2:20:17:0b:ad:18:24:da:
cf:23:6f:1c:ae:52:20:81:f8:95:f2:5c:2b:f6:4a:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:36:9F:CC:66:96:58:A3:32:85:7D:94:DE:03:1E:89:33:65:6D:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d572a9ee-4e30-3641-bfe6-c5ded87680d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
X509v3 Authority Key Identifier:
keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
sbgp-ipAddrBlock: critical
IPv4:
207.160.151.0-207.160.152.255
209.106.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:86:f9:61:30:7a:2d:84:66:14:97:f3:fe:cf:cc:4a:4f:7a:
e5:65:4b:95:af:1a:5b:33:f3:44:b2:b1:17:f9:fa:cc:bf:e5:
d0:a2:8c:4c:30:6c:3e:33:1b:39:5d:dd:55:17:2a:3c:6a:7d:
0c:dd:9a:1c:5e:5c:86:d8:ff:ca:10:c0:a2:09:49:fd:ad:05:
75:e9:d4:55:6a:0b:dd:e0:29:c7:67:59:56:c1:d7:84:82:7b:
a3:23:a6:8e:2e:63:48:a2:fa:3a:3d:a8:2d:82:00:05:08:50:
b4:4d:af:11:e7:a9:cf:16:a0:d5:e5:bf:d3:12:c7:11:f7:37:
60:50:4c:88:77:3f:69:b4:10:2f:33:95:b4:59:9a:ee:f1:3b:
6c:96:8c:f0:ac:e3:89:81:71:ab:b0:35:1c:f0:18:41:48:b6:
a9:a6:a9:33:6a:22:cd:52:98:af:dd:7b:ed:cd:b5:42:fc:4a:
96:9b:93:e4:6c:6a:e6:c9:21:76:7c:ea:97:05:46:c7:32:fc:
0f:1c:0c:68:15:6a:c0:b5:ce:79:9c:45:a8:2b:2c:d7:52:4e:
ad:63:27:b2:20:01:36:3f:e9:6f:85:fa:c9:32:39:ac:07:47:
e9:72:50:47:de:17:a5:d8:19:6d:5c:f4:e8:ac:02:4f:ab:de:
7b:d2:07:0a
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEaD5SiOKZSwCiUP9KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3
YTlmMB4XDTI0MDcxMjE2MjUzOFoXDTI0MTAxMDE2MjUzOFowLzEtMCsGA1UEAxMk
NDkyNmE2YjAtODk2NS00MWRlLTlkZDMtNWE0YzlmZWNlNTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg30Q74R6Tbpx6cuBvFSR9+FPGTYZMo5qYIGA
Qd8WgBSafeDq9EfP4b5dRCYvJWFRn6ZIEZ9t6EB/xBY0tbCZHxhvYoYjmsKAOHvv
UTw3ZqYyPAG/ZFiaI07LWQDzSH+jR1nS/nWRzHIptDVyQOscTV/xFU/NiT5Dr5+4
NzMqYodAVrS8DhhRpG8CZSvNlp6ankbtQsjgT3X3ddxg+rtDb4zj4OVeboO2dtka
MSz/AnnczyXChjBnU6G6cpkEvLF50pRXgVoLgPcn0QG99zEFdEM2PzM16RRImiUe
vQECLDq5FTSbAptE0iAXC60YJNrPI28crlIggfiV8lwr9koc2wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFAg2n8xmllijMoV9lN4DHokzZW1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw
NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvZDU3MmE5ZWUtNGUzMC0z
NjQxLWJmZTYtYzVkZWQ4NzY4MGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm
M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5
N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx
NjFjOTdhOWYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADPoJcD
BADPoJgDBALRauQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAAYb5YTB6LYRmFJfz/s/MSk965WVLla8aWzPz
RLKxF/n6zL/l0KKMTDBsPjMbOV3dVRcqPGp9DN2aHF5chtj/yhDAoglJ/a0FdenU
VWoL3eApx2dZVsHXhIJ7oyOmji5jSKL6Oj2oLYIABQhQtE2vEeepzxag1eW/0xLH
Efc3YFBMiHc/abQQLzOVtFma7vE7bJaM8KzjiYFxq7A1HPAYQUi2qaapM2oizVKY
r9177c21QvxKlpuT5Gxq5skhdnzqlwVGxzL8DxwMaBVqwLXOeZxFqCss11JOrWMn
siABNj/pb4X6yTI5rAdH6XJQR94XpdgZbVz06KwCT6vee9IHCg==
-----END CERTIFICATE-----
Generated at Sat Jul 13 16:22:19 2024 by rpki-client on console-fra.rpki-client.org