Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/af21b18a-041a-3e99-85a1-6ab9a6e77a7f.roa
File: af21b18a-041a-3e99-85a1-6ab9a6e77a7f.roa (raw, json)
Hash identifier: Ms86mipIEqDbJfPVjJd7Ux3TDvmFUpoNL+m9cJ8/Zso=
Subject key identifier: 10:0D:6D:89:5C:51:70:0A:29:9E:5C:90:2B:26:27:F7:85:BD:F8:DB
Certificate issuer: /CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Certificate serial: 010D0C9F432858468C3AF4B3D136DE1ACFD8BA00
Authority key identifier: C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/af21b18a-041a-3e99-85a1-6ab9a6e77a7f.roa
Signing time: Mon 15 Jul 2024 16:04:58 +0000
ROA not before: Mon 15 Jul 2024 16:04:58 +0000
ROA not after: Sun 13 Oct 2024 16:04:58 +0000
asID: 399970
IP address blocks: 149.112.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 19 Jul 2024 00:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:8c:3a:f4:b3:d1:36:de:1a:cf:d8:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ea3e88-1c8a-47de-bdd4-27317c283592
Validity
Not Before: Jul 15 16:04:58 2024 GMT
Not After : Oct 13 16:04:58 2024 GMT
Subject: CN=8c6e4ce0-f3ab-405f-95ed-c71194769d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:d1:a7:59:64:8f:29:74:28:48:54:3d:04:
a1:5d:98:ba:67:f7:f6:4b:1a:0e:5b:53:b3:16:54:
af:04:02:6f:c5:29:12:73:6c:36:49:d0:5f:df:cb:
75:89:b9:9a:86:f5:d5:9b:b2:f7:88:7c:bd:51:a7:
8b:28:88:f7:34:9b:00:c0:60:b8:03:39:be:ed:56:
fe:61:53:3c:8b:2c:2c:e1:e0:2f:6e:2b:85:f2:d9:
34:cd:34:bd:32:83:d9:2c:ef:68:41:cc:91:07:63:
87:10:22:c3:72:0d:2c:02:4d:3f:85:80:ae:f2:e6:
46:ee:fb:5f:10:34:d3:a2:4c:bf:f5:c6:38:cb:58:
30:23:3f:b0:ef:2e:6b:7e:45:19:7a:a0:4a:ad:84:
88:5b:f9:b8:2f:28:12:92:d2:dc:68:3f:7e:b8:af:
bc:95:a7:af:a9:ea:72:f9:3f:5f:f3:61:09:0a:0a:
90:67:b1:57:ce:ee:dc:ed:66:e7:c9:b5:11:11:35:
d4:cc:26:80:86:df:2b:0c:22:1e:51:16:1f:3b:0d:
ae:21:8f:1d:22:d7:a1:15:e2:05:a8:6b:cc:6f:1a:
63:0f:3e:2e:15:42:9d:64:8e:d6:b2:db:99:9c:68:
11:f1:eb:1f:b4:ba:a6:7a:00:7b:65:17:bb:54:4d:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:6D:89:5C:51:70:0A:29:9E:5C:90:2B:26:27:F7:85:BD:F8:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/af21b18a-041a-3e99-85a1-6ab9a6e77a7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592/56ea3e88-1c8a-47de-bdd4-27317c283592.crl
X509v3 Authority Key Identifier:
keyid:C7:3E:95:4B:BE:65:CF:48:80:E1:F1:C9:7D:2D:4C:4C:B5:DE:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/56ea3e88-1c8a-47de-bdd4-27317c283592.cer
sbgp-ipAddrBlock: critical
IPv4:
149.112.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:7b:d7:00:ae:11:27:c8:32:98:b2:39:ac:7b:47:0a:36:b9:
e2:69:6e:4d:b5:70:8f:0a:e3:f1:08:7e:44:1a:29:e8:e7:7c:
51:b7:2b:34:6e:c3:30:86:a5:4d:3c:1d:e3:ca:1e:eb:3b:71:
f6:8e:63:9d:8a:94:9f:d8:bf:72:0e:34:e5:3e:6b:4f:93:0f:
f2:92:40:b5:75:77:e9:3e:38:92:cc:12:51:fe:0f:20:52:86:
63:fb:fa:35:b1:a6:47:d2:e8:df:2e:0d:a5:9a:8d:ad:2d:c4:
0e:7c:76:c4:62:f4:1c:89:bb:c5:77:e7:88:be:f7:46:43:87:
7a:2a:2b:16:b4:e9:97:98:e3:1a:e7:da:f6:57:73:57:5e:35:
8d:2f:c0:9b:88:7c:3a:8b:6e:b5:ff:4f:14:cb:00:d1:80:80:
20:74:b5:b2:3b:d4:dd:67:aa:3c:d9:ce:04:93:ab:3e:03:3c:
9a:80:b8:a8:ae:5d:f2:3f:9c:5d:9f:72:30:14:25:95:63:95:
5e:76:18:48:b7:2f:df:44:ce:ac:54:06:87:b9:6e:06:20:bd:
72:a5:d1:9e:e2:9c:4c:9e:4f:b5:1d:91:52:fd:f0:31:8b:96:
d9:b0:49:e3:67:16:03:d6:b7:47:f7:e0:00:c8:b5:8d:6e:b3:
7d:fb:be:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaMOvSz0TbeGs/YugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZlYTNlODgtMWM4YS00N2RlLWJkZDQtMjczMTdjMjgz
NTkyMB4XDTI0MDcxNTE2MDQ1OFoXDTI0MTAxMzE2MDQ1OFowLzEtMCsGA1UEAxMk
OGM2ZTRjZTAtZjNhYi00MDVmLTk1ZWQtYzcxMTk0NzY5ZDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybfRp1lkjyl0KEhUPQShXZi6Z/f2SxoOW1Oz
FlSvBAJvxSkSc2w2SdBf38t1ibmahvXVm7L3iHy9UaeLKIj3NJsAwGC4Azm+7Vb+
YVM8iyws4eAvbiuF8tk0zTS9MoPZLO9oQcyRB2OHECLDcg0sAk0/hYCu8uZG7vtf
EDTToky/9cY4y1gwIz+w7y5rfkUZeqBKrYSIW/m4LygSktLcaD9+uK+8laevqepy
+T9f82EJCgqQZ7FXzu7c7WbnybURETXUzCaAht8rDCIeURYfOw2uIY8dItehFeIF
qGvMbxpjDz4uFUKdZI7WstuZnGgR8esftLqmegB7ZRe7VE3R6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBANbYlcUXAKKZ5ckCsmJ/eFvfjbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NmVh
M2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMxN2MyODM1OTIvYWYyMWIxOGEtMDQxYS0z
ZTk5LTg1YTEtNmFiOWE2ZTc3YTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTZlYTNlODgtMWM4YS00N2RlLWJk
ZDQtMjczMTdjMjgzNTkyLzU2ZWEzZTg4LTFjOGEtNDdkZS1iZGQ0LTI3MzE3YzI4
MzU5Mi5jcmwwHwYDVR0jBBgwFoAUxz6VS75lz0iA4fHJfS1MTLXeq/kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NmVhM2U4OC0xYzhhLTQ3ZGUtYmRkNC0yNzMx
N2MyODM1OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKZ71wCuESfIMpiyOax7Rwo2ueJpbk21cI8K4/EIfkQaKejnfFG3KzRu
wzCGpU08HePKHus7cfaOY52KlJ/Yv3IONOU+a0+TD/KSQLV1d+k+OJLMElH+DyBS
hmP7+jWxpkfS6N8uDaWaja0txA58dsRi9ByJu8V354i+90ZDh3oqKxa06ZeY4xrn
2vZXc1deNY0vwJuIfDqLbrX/TxTLANGAgCB0tbI71N1nqjzZzgSTqz4DPJqAuKiu
XfI/nF2fcjAUJZVjlV52GEi3L99EzqxUBoe5bgYgvXKl0Z7inEyeT7UdkVL98DGL
ltmwSeNnFgPWt0f34ADItY1us337vqw=
-----END CERTIFICATE-----
Generated at Fri Jul 19 04:51:21 2024 by rpki-client on console-fra.rpki-client.org