Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02860268-8460-3979-999b-954c7f80c52e.roa
File: 02860268-8460-3979-999b-954c7f80c52e.roa (raw, json)
Hash identifier: sx2HR7A9cDORVJ0DKX0LYOSksZfu8Fkoy08nKq1BBcY=
Subject key identifier: 88:4E:F5:00:65:56:A3:41:0F:39:62:17:92:A1:4B:56:20:27:9D:8D
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F43285846FA0141763F7C160721F670E0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02860268-8460-3979-999b-954c7f80c52e.roa
Signing time: Fri 23 Aug 2024 23:47:38 +0000
ROA not before: Fri 23 Aug 2024 23:47:38 +0000
ROA not after: Fri 22 Nov 2024 00:47:38 +0000
asID: 394432
IP address blocks: 107.148.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 12:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:fa:01:41:76:3f:7c:16:07:21:f6:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Aug 23 23:47:38 2024 GMT
Not After : Nov 22 00:47:38 2024 GMT
Subject: CN=ceab7339-1a84-4466-a7b1-91f613a77687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:b5:9a:14:44:20:5a:04:ee:b2:f8:fe:61:
2a:39:ab:43:6c:92:4e:7b:24:08:2e:db:71:f5:d2:
a4:b4:34:45:e7:e5:da:ce:70:bc:5b:a6:5c:71:15:
7c:66:04:ce:fd:69:50:55:db:0e:af:8a:04:75:64:
71:9a:d7:c6:57:37:ad:c1:78:4c:62:51:b7:b7:fe:
34:72:d0:3e:33:a2:63:02:3b:22:45:40:af:14:a0:
58:62:df:d0:b8:40:23:fd:c6:33:58:71:52:1b:3c:
d5:69:b3:d8:4f:84:65:8b:85:bd:b4:46:92:10:23:
f0:b9:22:ff:9f:b9:9a:00:50:2a:70:74:bb:be:90:
66:ad:a2:18:a4:ce:d4:e5:d2:a1:94:57:c7:dd:a3:
a9:49:33:c2:7e:0d:b5:56:d7:d3:5a:b4:09:32:59:
d1:3d:6b:86:b5:e6:1c:15:33:54:3c:bc:b3:67:58:
01:be:10:36:59:6b:7c:49:7d:7f:4b:b4:fc:1d:27:
18:9d:09:3b:0a:98:27:95:93:20:b2:72:9e:88:3b:
1b:b4:f6:1d:6a:2e:22:68:3d:f4:44:0a:ad:1a:58:
01:1f:62:c5:14:59:76:46:e3:87:d3:5a:32:94:e8:
35:25:85:f0:8a:c7:d7:33:28:da:06:58:9b:60:ce:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:F5:00:65:56:A3:41:0F:39:62:17:92:A1:4B:56:20:27:9D:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/02860268-8460-3979-999b-954c7f80c52e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:35:59:df:94:23:5e:5e:fb:f7:77:bd:50:10:bf:ef:01:cd:
f1:c9:b3:3a:94:21:bf:52:6f:fe:f8:70:a5:34:24:58:f4:a2:
14:86:5e:de:9f:2c:67:84:1d:14:ed:5b:73:13:3a:1c:93:69:
6c:ae:b6:3b:a3:4d:eb:d8:29:65:39:d1:69:cf:04:81:fe:c8:
95:35:00:f7:7f:47:4e:be:87:fa:e1:6c:de:bf:e5:ec:38:1f:
ec:08:35:61:44:3a:f3:e3:c1:a9:5b:5c:d6:49:ab:de:5a:30:
f0:4d:c8:be:45:5c:08:6e:39:e1:84:bb:4d:aa:54:b2:e9:85:
5f:6e:e7:d0:11:8b:04:0a:68:d0:ef:a0:a1:69:b5:9e:02:92:
7e:45:9d:94:84:73:8b:e0:55:c7:30:c6:d2:5f:94:f6:56:dd:
d7:3d:49:c1:f7:79:47:cd:bc:9d:45:db:f7:ba:f5:70:06:ea:
40:3d:76:73:24:de:1d:75:44:9a:c5:11:b7:5e:27:f0:07:a4:
09:0f:0c:12:a9:98:93:6b:06:4a:b4:3c:7d:e5:2e:c4:e8:dc:
a7:89:08:02:19:0e:9f:aa:b7:e4:91:80:7a:59:6c:af:cd:f1:
9d:da:5f:fd:2f:60:8e:f7:80:23:4e:09:18:92:38:6f:f3:31:
61:f7:9e:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEb6AUF2P3wWByH2cOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI0MDgyMzIzNDczOFoXDTI0MTEyMjAwNDczOFowLzEtMCsGA1UEAxMk
Y2VhYjczMzktMWE4NC00NDY2LWE3YjEtOTFmNjEzYTc3Njg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTG1mhREIFoE7rL4/mEqOatDbJJOeyQILttx
9dKktDRF5+XaznC8W6ZccRV8ZgTO/WlQVdsOr4oEdWRxmtfGVzetwXhMYlG3t/40
ctA+M6JjAjsiRUCvFKBYYt/QuEAj/cYzWHFSGzzVabPYT4Rli4W9tEaSECPwuSL/
n7maAFAqcHS7vpBmraIYpM7U5dKhlFfH3aOpSTPCfg21VtfTWrQJMlnRPWuGteYc
FTNUPLyzZ1gBvhA2WWt8SX1/S7T8HScYnQk7CpgnlZMgsnKeiDsbtPYdai4iaD30
RAqtGlgBH2LFFFl2RuOH01oylOg1JYXwisfXMyjaBlibYM5FiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhO9QBlVqNBDzliF5KhS1YgJ52NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDI4NjAyNjgtODQ2MC0z
OTc5LTk5OWItOTU0YzdmODBjNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5QnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGY1Wd+UI15e+/d3vVAQv+8BzfHJszqUIb9Sb/74cKU0JFj0ohSGXt6f
LGeEHRTtW3MTOhyTaWyutjujTevYKWU50WnPBIH+yJU1APd/R06+h/rhbN6/5ew4
H+wINWFEOvPjwalbXNZJq95aMPBNyL5FXAhuOeGEu02qVLLphV9u59ARiwQKaNDv
oKFptZ4Ckn5FnZSEc4vgVccwxtJflPZW3dc9ScH3eUfNvJ1F2/e69XAG6kA9dnMk
3h11RJrFEbdeJ/AHpAkPDBKpmJNrBkq0PH3lLsTo3KeJCAIZDp+qt+SRgHpZbK/N
8Z3aX/0vYI73gCNOCRiSOG/zMWH3nn4=
-----END CERTIFICATE-----
Generated at Tue Sep 3 14:51:06 2024 by rpki-client on console-ams.rpki-client.org