Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9347d89-ea61-3a1e-b006-3fdb3762c83a.roa
File: c9347d89-ea61-3a1e-b006-3fdb3762c83a.roa (raw, json)
Hash identifier: kTsKj76RVKBufw2aI4Q2li0V+KwNiGJP/aL9lUYzbcs=
Subject key identifier: 36:65:4A:8F:3B:97:5B:9C:D4:E9:50:53:56:78:1D:56:FA:1C:ED:48
Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial: 010D0C9F4328584309F60ECDC9BFFED50BA9BB40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9347d89-ea61-3a1e-b006-3fdb3762c83a.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 136.22.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:f6:0e:cd:c9:bf:fe:d5:0b:a9:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=60c190f8-044e-44e6-8ec1-7b79fc5e1808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:60:ac:46:fb:6b:5d:fd:fb:7f:bc:f7:d9:c4:
0a:88:aa:d8:04:59:5b:38:d3:da:b2:ec:a6:b0:92:
74:b8:db:56:f3:07:5f:b3:b8:d8:5a:2e:e6:1e:1b:
bf:8e:36:af:78:09:50:d3:70:b3:4d:40:ec:0b:1d:
b0:8b:8f:ff:a3:9e:8b:00:14:d2:4a:03:76:4a:f2:
65:3e:5e:9b:7e:73:aa:81:9b:c6:07:0e:2a:ed:42:
90:80:21:ab:a7:32:b1:ff:08:37:96:4b:c3:47:c6:
92:ab:22:fa:27:76:81:34:ca:9c:a7:c8:11:b7:a4:
51:a8:32:43:60:b2:67:3e:69:fa:bd:02:db:4e:0f:
69:70:84:7b:d2:f4:30:89:3c:0b:68:aa:e8:35:f1:
21:a2:18:c7:1b:ef:a5:b7:1f:88:e2:56:a4:54:d7:
98:8f:5b:e9:63:ed:c6:5c:22:18:ad:5a:c7:1b:7c:
4a:3f:92:0e:00:26:50:18:8f:67:af:e5:c1:85:e6:
5b:a3:59:38:4d:5b:de:9f:db:a5:96:c4:8d:b7:cd:
05:f7:d9:54:c0:ad:ff:9b:f2:20:6e:34:e0:0f:c6:
21:38:75:80:10:b8:d8:d8:58:29:e3:dc:2b:df:6a:
11:da:24:7e:07:83:34:3f:de:68:14:8e:dc:e7:3b:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:4A:8F:3B:97:5B:9C:D4:E9:50:53:56:78:1D:56:FA:1C:ED:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9347d89-ea61-3a1e-b006-3fdb3762c83a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
X509v3 Authority Key Identifier:
keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:25:b5:7d:5d:da:c9:9e:19:aa:91:6d:93:63:f3:35:d6:b0:
3a:21:aa:c6:e0:0f:22:a3:62:96:88:4c:57:4a:e0:01:f8:ee:
91:99:17:c6:9c:4e:f3:06:4c:5f:ca:19:ea:7c:b5:e1:e2:cf:
53:de:0e:c0:7c:42:a0:6c:a4:98:4f:8e:71:7d:09:36:7c:21:
a4:fc:6a:e6:1c:24:7b:7c:fe:db:ae:ef:fd:fd:f7:6b:a1:a4:
16:d0:79:15:46:53:20:fd:c0:1b:89:bb:50:85:e8:e7:78:fb:
ef:28:8c:3e:a2:53:62:69:af:34:a3:8d:b2:d0:ff:26:b9:7d:
b3:34:3b:1c:1b:1e:fe:91:c8:4c:a4:a8:45:34:c0:41:f1:0b:
83:56:ce:1c:ec:74:63:ce:12:5c:1d:cd:10:9f:74:7c:fb:fe:
e2:10:3c:0b:02:bc:d5:52:58:41:3f:e1:87:ce:1f:3f:1c:41:
99:3e:c6:d1:15:a5:e7:d5:f4:5d:ee:ed:0d:79:c0:95:39:5c:
cc:02:1f:b0:ac:22:c2:24:b4:7a:1d:8d:ec:fb:7c:45:dc:ca:
7e:30:aa:0f:06:a3:ec:bb:cc:16:64:83:e9:cc:60:fa:bd:6b:
05:26:55:d7:d9:43:27:0a:82:64:0b:bf:0e:8c:ed:c0:bf:5e:
da:34:d1:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ9g7Nyb/+1Qupu0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
NjBjMTkwZjgtMDQ0ZS00NGU2LThlYzEtN2I3OWZjNWUxODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+WCsRvtrXf37f7z32cQKiKrYBFlbONPasuym
sJJ0uNtW8wdfs7jYWi7mHhu/jjaveAlQ03CzTUDsCx2wi4//o56LABTSSgN2SvJl
Pl6bfnOqgZvGBw4q7UKQgCGrpzKx/wg3lkvDR8aSqyL6J3aBNMqcp8gRt6RRqDJD
YLJnPmn6vQLbTg9pcIR70vQwiTwLaKroNfEhohjHG++ltx+I4lakVNeYj1vpY+3G
XCIYrVrHG3xKP5IOACZQGI9nr+XBheZbo1k4TVven9ullsSNt80F99lUwK3/m/Ig
bjTgD8YhOHWAELjY2Fgp49wr32oR2iR+B4M0P95oFI7c5ztorQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDZlSo87l1uc1OlQU1Z4HVb6HO1IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYzkzNDdkODktZWE2MS0z
YTFlLWIwMDYtM2ZkYjM3NjJjODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYltX1d2smeGaqRbZNj8zXWsDohqsbgDyKjYpaITFdK4AH47pGZF8ac
TvMGTF/KGep8teHiz1PeDsB8QqBspJhPjnF9CTZ8IaT8auYcJHt8/tuu7/3992uh
pBbQeRVGUyD9wBuJu1CF6Od4++8ojD6iU2JprzSjjbLQ/ya5fbM0OxwbHv6RyEyk
qEU0wEHxC4NWzhzsdGPOElwdzRCfdHz7/uIQPAsCvNVSWEE/4YfOHz8cQZk+xtEV
pefV9F3u7Q15wJU5XMwCH7CsIsIktHodjez7fEXcyn4wqg8Go+y7zBZkg+nMYPq9
awUmVdfZQycKgmQLvw6M7cC/Xto00Wk=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:56 2024 by rpki-client on console-fra.rpki-client.org