Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/3cf87c9e-e17a-3b76-880c-8a041ed21814.roa
File: 3cf87c9e-e17a-3b76-880c-8a041ed21814.roa (raw, json)
Hash identifier: ax2xvLO/GpWtL5f5JcQIfh2HTJGN0pSSM1aBCRaRICs=
Subject key identifier: 68:A9:12:22:FC:DC:85:CC:41:9E:7D:5B:35:C8:F0:1B:5F:10:2D:4D
Certificate issuer: /CN=3d82b0b3-c91b-494a-9015-fd97f7b12ea2
Certificate serial: 010D0C9F43285846BB9DC1492C7E42B05586F500
Authority key identifier: 27:6E:20:98:0E:57:AD:71:04:AC:15:6C:AB:87:14:3B:99:41:32:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/3cf87c9e-e17a-3b76-880c-8a041ed21814.roa
Signing time: Thu 01 Aug 2024 15:27:02 +0000
ROA not before: Thu 01 Aug 2024 15:27:02 +0000
ROA not after: Wed 30 Oct 2024 15:27:02 +0000
asID: 30433
IP address blocks: 23.185.88.0/24 maxlen: 24
2602:f869::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 21 Sep 2024 00:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:bb:9d:c1:49:2c:7e:42:b0:55:86:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d82b0b3-c91b-494a-9015-fd97f7b12ea2
Validity
Not Before: Aug 1 15:27:02 2024 GMT
Not After : Oct 30 15:27:02 2024 GMT
Subject: CN=4c9033ae-50fa-41eb-bb6d-2e268e5ffee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:8d:e0:0d:ba:99:31:0f:8d:f7:a3:4b:9a:
8b:9a:eb:cd:0a:6f:db:9c:6b:0b:55:3c:da:88:9b:
74:fa:75:94:83:7e:85:6b:cb:22:b4:58:8b:46:3f:
8c:02:9e:56:49:ec:44:8c:df:d7:9e:4e:e9:2f:c8:
12:89:d1:d4:85:77:3e:f9:41:3e:73:c9:eb:c4:ae:
ec:b0:1a:74:73:d1:4e:49:2b:e1:75:b3:6e:45:f2:
70:c1:76:cf:f7:6e:a9:ed:c7:6d:5b:3a:02:e2:d5:
d8:33:92:08:c0:da:d0:72:49:e1:11:40:25:18:12:
34:b2:41:18:43:52:c8:f4:05:e9:8b:f4:7c:12:66:
6d:99:9b:93:ad:4a:74:87:09:cc:2a:fe:f1:a2:f8:
a6:66:68:3c:f4:a3:ad:a6:37:5b:54:31:d4:ed:ef:
ea:8f:97:5b:e3:ef:13:10:c3:fb:d0:50:29:78:a9:
31:51:10:29:18:42:09:10:c2:af:72:6b:37:f8:55:
00:98:d9:45:fb:79:f0:01:bd:11:19:8d:55:a2:81:
36:f7:6d:63:52:7a:4d:20:f0:c2:2b:bf:53:9b:52:
36:c2:89:c7:fd:9d:70:cb:21:89:24:82:ed:6d:27:
8d:98:66:3d:02:46:6e:f5:02:cd:85:0d:f9:36:cb:
29:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:12:22:FC:DC:85:CC:41:9E:7D:5B:35:C8:F0:1B:5F:10:2D:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/3cf87c9e-e17a-3b76-880c-8a041ed21814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.crl
X509v3 Authority Key Identifier:
keyid:27:6E:20:98:0E:57:AD:71:04:AC:15:6C:AB:87:14:3B:99:41:32:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.88.0/24
IPv6:
2602:f869::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:72:ee:03:9d:01:1b:75:06:3e:78:93:25:03:13:fc:e8:0b:
7f:1b:42:8b:fa:48:42:a4:0c:a0:15:ed:6b:ce:d9:f9:1d:9a:
61:4d:be:be:97:1f:a1:7f:2e:75:d3:65:3f:a7:84:b8:17:13:
06:85:b2:6e:03:f8:21:5b:f3:96:84:10:42:b5:83:0c:56:74:
e4:50:ff:18:69:13:80:83:06:78:a6:59:c7:87:5b:6d:c0:99:
1d:63:6a:54:e7:02:00:1b:83:3b:b9:09:f9:99:d6:66:5b:8f:
e2:d7:4d:bb:34:5c:71:64:ca:98:44:f9:ef:6d:06:54:f1:7e:
77:a0:13:97:7c:69:0b:75:b9:98:a0:ee:51:c0:76:60:f1:3e:
1e:e1:85:3b:70:9a:69:36:d4:ec:76:f4:85:1a:ce:98:5b:de:
c1:3f:12:02:7b:d2:91:fd:73:e8:8a:63:6c:69:13:67:62:36:
5f:87:b3:fc:97:76:2d:59:2a:0e:49:18:85:12:1e:a9:eb:e1:
29:7e:89:e9:a9:6f:16:fb:81:f2:a7:d8:cb:94:1c:97:77:c0:
8b:5e:aa:55:16:d1:e1:17:de:e2:6e:2c:f8:38:4d:60:b7:71:
e5:0a:77:f0:8c:8a:94:1e:6b:77:7f:63:3e:f2:69:5d:dc:71:
3d:18:af:4c
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEa7ncFJLH5CsFWG9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q4MmIwYjMtYzkxYi00OTRhLTkwMTUtZmQ5N2Y3YjEy
ZWEyMB4XDTI0MDgwMTE1MjcwMloXDTI0MTAzMDE1MjcwMlowLzEtMCsGA1UEAxMk
NGM5MDMzYWUtNTBmYS00MWViLWJiNmQtMmUyNjhlNWZmZWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG2N4A26mTEPjfejS5qLmuvNCm/bnGsLVTza
iJt0+nWUg36Fa8sitFiLRj+MAp5WSexEjN/Xnk7pL8gSidHUhXc++UE+c8nrxK7s
sBp0c9FOSSvhdbNuRfJwwXbP926p7cdtWzoC4tXYM5IIwNrQcknhEUAlGBI0skEY
Q1LI9AXpi/R8EmZtmZuTrUp0hwnMKv7xovimZmg89KOtpjdbVDHU7e/qj5db4+8T
EMP70FApeKkxURApGEIJEMKvcms3+FUAmNlF+3nwAb0RGY1VooE2921jUnpNIPDC
K79Tm1I2wonH/Z1wyyGJJILtbSeNmGY9AkZu9QLNhQ35NsspewIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFGipEiL83IXMQZ59WzXI8BtfEC1NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZDgy
YjBiMy1jOTFiLTQ5NGEtOTAxNS1mZDk3ZjdiMTJlYTIvM2NmODdjOWUtZTE3YS0z
Yjc2LTg4MGMtOGEwNDFlZDIxODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Q4MmIwYjMtYzkxYi00OTRhLTkw
MTUtZmQ5N2Y3YjEyZWEyLzNkODJiMGIzLWM5MWItNDk0YS05MDE1LWZkOTdmN2Ix
MmVhMi5jcmwwHwYDVR0jBBgwFoAUJ24gmA5XrXEErBVsq4cUO5lBMg4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZDgyYjBiMy1jOTFiLTQ5NGEtOTAxNS1mZDk3
ZjdiMTJlYTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7lYMA4E
AgACMAgDBgQmAvhpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbcu4DnQEbdQY+eJMlAxP86At/G0KL+khC
pAygFe1rztn5HZphTb6+lx+hfy5102U/p4S4FxMGhbJuA/ghW/OWhBBCtYMMVnTk
UP8YaROAgwZ4plnHh1ttwJkdY2pU5wIAG4M7uQn5mdZmW4/i1027NFxxZMqYRPnv
bQZU8X53oBOXfGkLdbmYoO5RwHZg8T4e4YU7cJppNtTsdvSFGs6YW97BPxICe9KR
/XPoimNsaRNnYjZfh7P8l3YtWSoOSRiFEh6p6+EpfonpqW8W+4Hyp9jLlByXd8CL
XqpVFtHhF97ibiz4OE1gt3HlCnfwjIqUHmt3f2M+8mld3HE9GK9M
-----END CERTIFICATE-----
Generated at Sat Sep 21 03:11:50 2024 by rpki-client on console-fra.rpki-client.org