Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/d6f9b6c8-3b6e-3795-b06e-90341cd578a2.roa
File: d6f9b6c8-3b6e-3795-b06e-90341cd578a2.roa (raw, json)
Hash identifier: gkDZwdOHkvEViN0C9BBRyiVnO/seM2+UdNlERmras8M=
Subject key identifier: 94:9B:A1:F5:50:03:C8:4B:B1:8F:F5:C7:8D:EF:E6:8A:87:E4:EE:D1
Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial: 010D0C9F432858466BC48AAB3F2829B3F5448A00
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/d6f9b6c8-3b6e-3795-b06e-90341cd578a2.roa
Signing time: Thu 04 Jul 2024 01:00:26 +0000
ROA not before: Thu 04 Jul 2024 01:00:26 +0000
ROA not after: Wed 02 Oct 2024 01:00:26 +0000
asID: 3257
IP address blocks: 104.250.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 10 Jul 2024 10:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:6b:c4:8a:ab:3f:28:29:b3:f5:44:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Validity
Not Before: Jul 4 01:00:26 2024 GMT
Not After : Oct 2 01:00:26 2024 GMT
Subject: CN=4e49e57a-643e-478e-9026-c6effeb05a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:1f:68:eb:1c:7f:53:72:28:1d:d4:65:a2:
0a:58:20:df:0a:84:43:35:a6:a9:bd:46:08:9c:16:
08:47:7f:fa:df:e1:5c:69:df:39:1a:96:99:6e:3d:
a6:2f:cd:c7:6e:46:4e:a7:2a:9e:c8:fd:b6:85:48:
1f:55:87:20:55:57:76:e5:9a:5d:65:ca:0d:ee:2f:
cf:28:34:bb:cd:1f:8f:89:8e:22:e9:b3:30:2d:98:
20:9d:85:32:7a:c5:e3:53:84:0b:fc:eb:82:9d:7b:
b3:1b:8f:73:a3:a7:f1:84:62:74:e1:00:f8:2b:51:
77:aa:70:91:cb:4f:93:a3:82:d7:1f:07:26:c7:81:
cf:8a:76:8b:4e:f9:db:a4:1f:08:51:83:9a:fd:32:
a2:1e:8b:c9:60:a9:13:b1:a0:97:73:8d:03:46:f6:
4f:18:e8:e2:11:ef:52:56:cf:23:30:9f:92:94:53:
f1:1d:c6:8d:8a:c8:0f:77:db:9d:96:ee:ff:9a:df:
58:24:63:02:59:37:8a:66:78:27:5b:c8:37:c3:f9:
f2:62:6a:2a:c7:07:cb:27:0d:89:ab:b8:f8:77:e6:
e3:b9:65:20:df:b6:5f:a7:f0:8a:7c:31:92:cd:a7:
af:05:c6:90:90:a3:77:04:80:77:e4:f0:9a:df:0f:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:A1:F5:50:03:C8:4B:B1:8F:F5:C7:8D:EF:E6:8A:87:E4:EE:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/d6f9b6c8-3b6e-3795-b06e-90341cd578a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
X509v3 Authority Key Identifier:
keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
sbgp-ipAddrBlock: critical
IPv4:
104.250.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:82:a5:3c:2b:5c:3a:57:dc:8f:a2:74:22:83:55:9d:22:a5:
11:fc:48:53:80:cd:7a:2b:9a:6d:4a:1f:19:a9:d4:71:7d:af:
b2:06:b6:11:4c:d8:c8:a3:4b:44:e0:21:8e:b6:09:07:ee:49:
4e:30:bb:56:b3:e0:69:62:11:57:6c:3b:36:96:1b:9b:d3:29:
44:c3:f3:49:33:a4:87:d9:d9:36:5f:12:11:18:58:2b:1d:23:
a5:64:14:d3:55:50:97:7a:6d:0e:b4:9c:53:cb:10:d4:13:14:
db:cf:46:20:e2:ce:07:28:c2:f3:fa:b1:29:13:c1:26:7f:1c:
4e:06:bc:96:5b:02:2c:a2:d8:5d:54:6b:e4:62:d4:d9:fe:ea:
1f:3d:fd:17:5b:b0:32:8e:c4:fc:76:47:13:b9:44:e3:42:5f:
d6:45:f6:c4:9a:e9:2e:93:06:71:08:f5:3d:f2:21:06:0b:92:
5e:63:fc:15:41:42:14:76:db:29:04:10:85:3a:84:cb:04:08:
a3:39:cb:3d:af:c8:50:00:83:2a:60:9f:cd:c6:e5:71:9e:ba:
b9:41:13:f0:f2:70:a6:4b:5f:83:50:1c:d0:a2:c8:a1:62:82:
1c:14:bf:98:5c:f8:15:86:f2:28:ae:70:5d:eb:bc:ca:f9:01:
c2:3b:4d:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZrxIqrPygps/VEigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJlNDI3ZWEtYTZiMC00YzA5LTgzMzAtNmNiZDVmNTgx
NmE4MB4XDTI0MDcwNDAxMDAyNloXDTI0MTAwMjAxMDAyNlowLzEtMCsGA1UEAxMk
NGU0OWU1N2EtNjQzZS00NzhlLTkwMjYtYzZlZmZlYjA1YTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNYfaOscf1NyKB3UZaIKWCDfCoRDNaapvUYI
nBYIR3/63+Fcad85GpaZbj2mL83HbkZOpyqeyP22hUgfVYcgVVd25ZpdZcoN7i/P
KDS7zR+PiY4i6bMwLZggnYUyesXjU4QL/OuCnXuzG49zo6fxhGJ04QD4K1F3qnCR
y0+To4LXHwcmx4HPinaLTvnbpB8IUYOa/TKiHovJYKkTsaCXc40DRvZPGOjiEe9S
Vs8jMJ+SlFPxHcaNisgPd9udlu7/mt9YJGMCWTeKZngnW8g3w/nyYmoqxwfLJw2J
q7j4d+bjuWUg37Zfp/CKfDGSzaevBcaQkKN3BIB35PCa3w8RAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSbofVQA8hLsY/1x43v5oqH5O7RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0
MjdlYS1hNmIwLTRjMDktODMzMC02Y2JkNWY1ODE2YTgvZDZmOWI2YzgtM2I2ZS0z
Nzk1LWIwNmUtOTAzNDFjZDU3OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDJlNDI3ZWEtYTZiMC00YzA5LTgz
MzAtNmNiZDVmNTgxNmE4LzAyZTQyN2VhLWE2YjAtNGMwOS04MzMwLTZjYmQ1ZjU4
MTZhOC5jcmwwHwYDVR0jBBgwFoAUdkVKr1RdGBmiR0Mcxjwo6YHXe3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMmU0MjdlYS1hNmIwLTRjMDktODMzMC02Y2Jk
NWY1ODE2YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPr8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKOCpTwrXDpX3I+idCKDVZ0ipRH8SFOAzXormm1KHxmp1HF9r7IGthFM
2MijS0TgIY62CQfuSU4wu1az4GliEVdsOzaWG5vTKUTD80kzpIfZ2TZfEhEYWCsd
I6VkFNNVUJd6bQ60nFPLENQTFNvPRiDizgcowvP6sSkTwSZ/HE4GvJZbAiyi2F1U
a+Ri1Nn+6h89/RdbsDKOxPx2RxO5RONCX9ZF9sSa6S6TBnEI9T3yIQYLkl5j/BVB
QhR22ykEEIU6hMsECKM5yz2vyFAAgypgn83G5XGeurlBE/DycKZLX4NQHNCiyKFi
ghwUv5hc+BWG8iiucF3rvMr5AcI7TYA=
-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:03 2024 by rpki-client on console-ams.rpki-client.org