Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/c5eea976-e4a3-3723-93b8-358293278a2c.roa
File: c5eea976-e4a3-3723-93b8-358293278a2c.roa (raw, json)
Hash identifier: zFnAilzdmUQm68j1w/GIoZIOebtWu02dWu/DPOqyvy4=
Subject key identifier: 04:0A:54:B3:B9:9A:B3:C0:02:8A:E2:5B:A6:8D:C2:9D:98:04:F1:56
Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial: 010D0C9F4328584309981D335B94D4313069B310
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/c5eea976-e4a3-3723-93b8-358293278a2c.roa
Signing time: Mon 28 Aug 2023 18:40:58 +0000
ROA not before: Mon 28 Aug 2023 18:40:58 +0000
ROA not after: Sun 26 Nov 2023 19:40:58 +0000
asID: 35913
IP address blocks: 170.205.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:98:1d:33:5b:94:d4:31:30:69:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Validity
Not Before: Aug 28 18:40:58 2023 GMT
Not After : Nov 26 19:40:58 2023 GMT
Subject: CN=570c625b-a6be-4e55-87b4-076fb2592515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:ae:12:53:34:c1:c6:97:76:4d:21:5f:09:
43:43:ca:1d:4d:e7:39:32:d2:e0:57:c4:3f:8e:02:
2a:e9:1f:14:35:c1:60:25:e7:1b:ea:4c:7e:75:f7:
2f:20:c5:b9:de:b9:35:94:ef:08:af:72:56:37:1f:
b8:e8:6b:a0:e8:b8:5c:1b:0c:ce:37:f1:73:a4:d8:
d8:a3:9b:7d:58:73:9a:35:4f:66:27:f2:43:9f:4a:
7b:07:53:71:f1:46:c1:03:59:86:81:da:ff:c7:b1:
55:60:1e:31:18:7b:01:cc:23:31:c7:65:95:18:0c:
04:42:49:d8:45:6e:33:b5:89:30:bf:9c:23:7e:dc:
2e:11:ac:63:12:44:1b:69:b2:9a:84:0d:e1:5c:6d:
d4:ad:8d:76:55:69:db:29:43:48:be:1f:cc:d6:0c:
80:04:ff:8a:f5:57:9d:bc:26:cf:5a:69:59:08:51:
c6:67:11:b0:9b:6d:66:c9:83:69:9d:9b:5a:24:11:
6c:05:01:06:1c:c3:4c:b1:ee:61:70:b2:b8:2e:68:
2a:b3:0c:8a:6b:bd:14:92:8f:ae:b2:d9:3e:41:6e:
5b:c9:1a:ae:58:cf:10:14:2b:ca:ee:26:98:24:2a:
09:da:7c:64:6f:24:cb:85:bf:77:40:34:76:cf:9e:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:54:B3:B9:9A:B3:C0:02:8A:E2:5B:A6:8D:C2:9D:98:04:F1:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/c5eea976-e4a3-3723-93b8-358293278a2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
X509v3 Authority Key Identifier:
keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:79:fd:6e:26:6b:b1:03:f4:f9:21:ff:2d:c7:c1:d6:9c:b3:
c4:1c:69:b1:0f:64:8d:08:ff:eb:8d:82:93:17:a9:46:3a:9b:
29:03:58:b3:c1:dd:2e:c2:d5:13:f2:28:92:1a:ca:91:8a:3f:
c6:55:ab:1a:0a:73:60:63:d7:c2:98:7d:7d:c9:48:fd:60:48:
c1:f2:39:b1:c9:03:1a:99:d2:cf:2e:76:4c:5f:88:e2:60:c4:
52:e3:76:9e:ed:c1:44:a2:35:8b:cc:c9:c9:64:2e:e7:d3:79:
b3:ca:bb:92:6f:2e:95:3d:ff:b4:ac:e4:98:75:13:b2:86:a2:
9a:87:20:1e:1c:cc:45:35:6e:65:95:dd:7e:e5:94:57:e1:bc:
05:be:7d:23:51:00:53:fb:bb:47:12:69:e7:20:59:25:c7:b9:
39:55:3e:ed:97:6d:f7:b2:bc:34:59:6f:42:ad:16:f8:ce:36:
20:ac:65:5f:58:12:86:0d:a4:b0:83:fd:d9:38:b4:7e:cf:93:
9b:28:2e:75:45:ac:c4:13:99:fc:7d:cc:e6:94:46:56:ce:d2:
6e:f9:a5:49:86:bd:7d:82:91:98:7b:95:10:da:a4:9a:29:fa:
0e:12:b4:ad:23:2d:61:b6:d5:53:c6:4a:37:e9:60:98:ba:d1:
60:d9:cd:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJmB0zW5TUMTBpsxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3
ZWM0MB4XDTIzMDgyODE4NDA1OFoXDTIzMTEyNjE5NDA1OFowLzEtMCsGA1UEAxMk
NTcwYzYyNWItYTZiZS00ZTU1LTg3YjQtMDc2ZmIyNTkyNTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVSuElM0wcaXdk0hXwlDQ8odTec5MtLgV8Q/
jgIq6R8UNcFgJecb6kx+dfcvIMW53rk1lO8Ir3JWNx+46Gug6LhcGwzON/FzpNjY
o5t9WHOaNU9mJ/JDn0p7B1Nx8UbBA1mGgdr/x7FVYB4xGHsBzCMxx2WVGAwEQknY
RW4ztYkwv5wjftwuEaxjEkQbabKahA3hXG3UrY12VWnbKUNIvh/M1gyABP+K9Ved
vCbPWmlZCFHGZxGwm21myYNpnZtaJBFsBQEGHMNMse5hcLK4LmgqswyKa70Uko+u
stk+QW5byRquWM8QFCvK7iaYJCoJ2nxkbyTLhb93QDR2z57UgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQKVLO5mrPAAoriW6aNwp2YBPFWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm
ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvYzVlZWE5NzYtZTRhMy0z
NzIzLTkzYjgtMzU4MjkzMjc4YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm
MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3
N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2
ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJN5/W4ma7ED9Pkh/y3Hwdacs8QcabEPZI0I/+uNgpMXqUY6mykDWLPB
3S7C1RPyKJIaypGKP8ZVqxoKc2Bj18KYfX3JSP1gSMHyObHJAxqZ0s8udkxfiOJg
xFLjdp7twUSiNYvMyclkLufTebPKu5JvLpU9/7Ss5Jh1E7KGopqHIB4czEU1bmWV
3X7llFfhvAW+fSNRAFP7u0cSaecgWSXHuTlVPu2XbfeyvDRZb0KtFvjONiCsZV9Y
EoYNpLCD/dk4tH7Pk5soLnVFrMQTmfx9zOaURlbO0m75pUmGvX2CkZh7lRDapJop
+g4StK0jLWG21VPGSjfpYJi60WDZzXk=
-----END CERTIFICATE-----
Generated at Tue Sep 19 16:04:34 2023 by rpki-client on console-fra.rpki-client.org