Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa
File: a5365f80-f54d-36a5-9718-451dd2936f74.roa (raw, json)
Hash identifier: dM616d9VUSMTEG2X78cpwThNN9uQpU73Tf/xzYzlfvI=
Subject key identifier: 73:00:8D:23:E6:AA:A8:FF:EA:34:AF:A2:B3:77:A4:9F:3A:E3:94:CA
Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial: 010D0C9F43285845B7B3871B42956D91D8D28600
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa
Signing time: Tue 30 Apr 2024 13:00:34 +0000
ROA not before: Tue 30 Apr 2024 13:00:34 +0000
ROA not after: Mon 29 Jul 2024 13:00:34 +0000
asID: 13213
IP address blocks: 173.255.128.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 15:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:b7:b3:87:1b:42:95:6d:91:d8:d2:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Validity
Not Before: Apr 30 13:00:34 2024 GMT
Not After : Jul 29 13:00:34 2024 GMT
Subject: CN=e16295ec-6c1b-4694-bedb-339a68ab9601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fd:d0:30:fb:a0:cb:5d:18:56:9a:67:e1:4b:
38:bc:e6:2a:e2:ef:c7:3a:ae:00:e2:6c:41:ab:77:
2f:24:4d:34:fb:05:56:44:e9:30:0c:6a:7a:f2:52:
c8:06:57:25:03:d2:c1:77:2d:8c:e0:dc:8e:b6:87:
c9:72:4a:a0:92:51:5e:bf:85:53:7c:46:ca:87:42:
fc:9e:af:04:b3:30:f9:19:4a:b5:40:46:e7:93:de:
75:69:f4:58:cc:c5:c1:2e:2c:ce:a8:ba:f0:16:61:
4a:17:47:13:24:1e:5f:9d:ec:9b:e0:3a:f4:14:b4:
77:d4:62:56:b6:0a:25:e8:d1:32:a6:91:25:3f:ee:
f7:d8:50:10:98:35:d6:50:95:08:db:7f:af:e9:68:
60:d7:79:ea:01:6a:86:f7:fd:bb:02:ac:eb:4a:24:
be:e3:b2:1d:ac:b3:32:6e:7a:5e:fd:48:d7:3d:aa:
e7:d2:dd:5f:eb:5e:ed:02:23:f9:a1:78:c6:65:be:
e1:3a:fa:be:95:5c:c9:5c:7d:9f:53:d6:92:cc:08:
ff:7f:a4:c9:7b:23:01:0a:3d:37:6b:ab:53:d0:5f:
45:19:c7:ff:fd:1f:4e:b9:49:d9:f8:49:c1:94:90:
50:ef:38:dc:52:cb:9e:68:d5:60:fe:81:f9:1d:7a:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:8D:23:E6:AA:A8:FF:EA:34:AF:A2:B3:77:A4:9F:3A:E3:94:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/a5365f80-f54d-36a5-9718-451dd2936f74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
X509v3 Authority Key Identifier:
keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.255.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:7a:c6:2d:99:7f:56:6f:e5:64:a5:50:1a:4d:a7:30:d8:be:
24:c8:40:cf:d3:a1:34:ad:fc:38:44:d0:86:01:eb:0e:de:70:
a6:67:71:d5:08:a6:c0:79:5b:84:f4:fd:4d:5f:4d:69:70:9b:
e7:82:8e:a9:fd:d6:da:6f:07:39:dd:10:98:89:2d:15:03:db:
3d:ab:0f:58:47:d1:56:e4:bf:55:0d:0e:de:ab:28:94:e8:56:
66:70:ff:25:51:a0:65:76:db:f5:b5:68:79:25:93:16:b0:7d:
c0:f8:d5:8b:9a:98:ae:16:e0:ad:71:cd:18:32:19:c5:7f:06:
28:f1:85:0f:55:06:f4:b5:4d:7c:0e:b4:28:6a:20:d7:35:90:
36:d2:62:41:1e:29:8f:a2:0b:ab:57:79:ba:ee:e8:81:ca:b7:
ff:e2:41:c1:16:fd:76:35:00:d0:e8:a4:ca:c6:9d:20:6c:c8:
38:fc:42:28:d2:89:a9:16:7d:b8:33:67:de:d8:6c:aa:b4:99:
c3:9d:0a:52:65:2a:f6:37:a6:f4:4d:a9:93:86:80:a2:18:a6:
fc:58:84:da:92:df:1f:8a:8e:3f:a3:30:05:a9:c4:aa:76:e1:
69:19:dd:49:66:fe:3b:3c:db:46:cc:d7:d4:b6:b5:fd:07:c3:
96:1f:94:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW3s4cbQpVtkdjShgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI0MDQzMDEzMDAzNFoXDTI0MDcyOTEzMDAzNFowLzEtMCsGA1UEAxMk
ZTE2Mjk1ZWMtNmMxYi00Njk0LWJlZGItMzM5YTY4YWI5NjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf3QMPugy10YVppn4Us4vOYq4u/HOq4A4mxB
q3cvJE00+wVWROkwDGp68lLIBlclA9LBdy2M4NyOtofJckqgklFev4VTfEbKh0L8
nq8EszD5GUq1QEbnk951afRYzMXBLizOqLrwFmFKF0cTJB5fneyb4Dr0FLR31GJW
tgol6NEyppElP+732FAQmDXWUJUI23+v6Whg13nqAWqG9/27AqzrSiS+47IdrLMy
bnpe/UjXParn0t1f617tAiP5oXjGZb7hOvq+lVzJXH2fU9aSzAj/f6TJeyMBCj03
a6tT0F9FGcf//R9OuUnZ+EnBlJBQ7zjcUsueaNVg/oH5HXo/3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMAjSPmqqj/6jSvorN3pJ8645TKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvYTUzNjVmODAtZjU0ZC0z
NmE1LTk3MTgtNDUxZGQyOTM2Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrf+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx6xi2Zf1Zv5WSlUBpNpzDYviTIQM/ToTSt/DhE0IYB6w7ecKZncdUI
psB5W4T0/U1fTWlwm+eCjqn91tpvBzndEJiJLRUD2z2rD1hH0Vbkv1UNDt6rKJTo
VmZw/yVRoGV22/W1aHklkxawfcD41YuamK4W4K1xzRgyGcV/BijxhQ9VBvS1TXwO
tChqINc1kDbSYkEeKY+iC6tXebru6IHKt//iQcEW/XY1ANDopMrGnSBsyDj8QijS
iakWfbgzZ97YbKq0mcOdClJlKvY3pvRNqZOGgKIYpvxYhNqS3x+Kjj+jMAWpxKp2
4WkZ3Ulm/js820bM19S2tf0Hw5YflCU=
-----END CERTIFICATE-----
Generated at Wed Jul 17 20:18:45 2024 by rpki-client on console-ams.rpki-client.org