Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cf30e489-88d5-3003-9d73-30bf66b24d73.roa
File: cf30e489-88d5-3003-9d73-30bf66b24d73.roa (raw, json)
Hash identifier: a16wAftNrBH5kBRpH+sLw6tqnF2wpBjeNOdsOaPgV84=
Subject key identifier: 41:1C:99:B5:79:94:9C:6B:90:51:38:87:7B:D4:23:80:D3:F3:98:7E
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F43285843157F3CC342CF3DAA256E4900
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cf30e489-88d5-3003-9d73-30bf66b24d73.roa
Signing time: Sat 02 Sep 2023 01:00:27 +0000
ROA not before: Sat 02 Sep 2023 01:00:27 +0000
ROA not after: Fri 01 Dec 2023 02:00:27 +0000
asID: 393841
IP address blocks: 170.133.208.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:15:7f:3c:c3:42:cf:3d:aa:25:6e:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Sep 2 01:00:27 2023 GMT
Not After : Dec 1 02:00:27 2023 GMT
Subject: CN=b81cdbde-804d-43db-8a6e-f8c0e1ba6b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:d8:88:de:e4:2c:4b:34:01:0c:3b:75:73:
28:0e:7d:65:0b:17:2c:e5:47:91:71:a1:6c:fd:25:
7a:d3:46:8f:00:b2:40:09:85:04:6d:bf:6f:61:df:
ac:c7:d7:e0:29:3f:ac:71:f4:5e:d7:a6:8d:ff:97:
6d:6b:0c:6e:cf:0a:c6:4b:2b:fe:61:65:93:d4:5e:
36:4f:3f:d5:7f:b0:73:83:c8:83:b8:d3:88:ce:7c:
b7:b8:1e:3f:8d:62:aa:9c:d4:8e:af:e4:be:fd:d7:
16:01:fe:31:f3:74:74:82:d1:57:f3:79:ff:56:a0:
2d:cf:00:de:5b:e2:8b:2a:57:84:85:ae:65:06:40:
e9:1b:b7:25:93:29:00:83:89:65:29:71:e6:5e:35:
a0:85:00:a4:8c:84:67:17:6a:7c:b7:c3:fc:2c:7a:
2a:b7:38:56:ba:2f:7c:6a:04:bf:94:f0:2e:a0:0f:
ca:1a:ca:b5:31:22:7e:b2:17:52:e4:6c:94:d1:4d:
8c:51:33:a1:92:ab:6e:a1:48:34:d9:84:f9:0f:a9:
48:58:ce:a5:c8:92:b0:21:54:55:4c:7b:13:80:d1:
70:03:ae:8c:32:68:c3:30:44:c5:fd:fa:18:3c:a2:
4e:28:23:e4:dd:37:45:71:18:bd:0a:a5:e0:44:88:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:99:B5:79:94:9C:6B:90:51:38:87:7B:D4:23:80:D3:F3:98:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/cf30e489-88d5-3003-9d73-30bf66b24d73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:30:b3:a5:48:66:98:0d:7a:ef:1a:7c:76:7a:95:44:26:60:
64:1f:db:39:e6:00:2c:d7:06:7c:b1:cb:3a:e0:c1:16:8b:ea:
8e:8e:74:68:96:f6:60:36:38:3a:99:9b:61:6b:d7:55:09:b3:
0c:0a:1f:0f:fd:a0:03:a4:64:89:9d:00:1e:15:3f:24:bb:be:
1a:2c:ca:03:31:aa:6d:7e:94:0a:73:cf:0a:47:a3:31:05:ca:
85:21:b9:cc:09:7f:6a:8c:a3:b2:5b:c4:6f:2a:02:b4:25:93:
61:92:9c:03:d3:81:fc:98:67:0c:60:a0:af:ce:f1:9c:0a:78:
de:86:8f:2b:9b:20:b8:f1:8e:8d:6b:69:fb:fc:95:12:71:2e:
75:4e:ab:e3:7f:43:e9:cc:4b:96:61:f0:91:0b:0b:6d:b0:7a:
b4:f7:44:e5:06:ea:6f:d7:2f:b3:21:55:68:d8:33:b6:ce:6e:
82:80:7d:28:f7:ab:43:35:94:ff:47:3b:59:46:6c:7a:c4:0f:
d0:9d:fb:8a:4d:6f:6c:02:bb:6a:ff:6d:fc:13:84:6e:ab:36:
fb:f0:71:3d:8d:7a:86:1a:38:b0:d1:55:da:9b:c9:ee:a2:e8:
01:f6:48:75:93:94:aa:79:3c:53:74:90:9a:81:e1:ef:63:27:
78:6b:9a:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMVfzzDQs89qiVuSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5
NzdmMB4XDTIzMDkwMjAxMDAyN1oXDTIzMTIwMTAyMDAyN1owLzEtMCsGA1UEAxMk
YjgxY2RiZGUtODA0ZC00M2RiLThhNmUtZjhjMGUxYmE2YjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnLYiN7kLEs0AQw7dXMoDn1lCxcs5UeRcaFs
/SV600aPALJACYUEbb9vYd+sx9fgKT+scfRe16aN/5dtawxuzwrGSyv+YWWT1F42
Tz/Vf7Bzg8iDuNOIzny3uB4/jWKqnNSOr+S+/dcWAf4x83R0gtFX83n/VqAtzwDe
W+KLKleEha5lBkDpG7clkykAg4llKXHmXjWghQCkjIRnF2p8t8P8LHoqtzhWui98
agS/lPAuoA/KGsq1MSJ+shdS5GyU0U2MUTOhkqtuoUg02YT5D6lIWM6lyJKwIVRV
THsTgNFwA66MMmjDMETF/foYPKJOKCPk3TdFcRi9CqXgRIhMeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEEcmbV5lJxrkFE4h3vUI4DT85h+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm
ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvY2YzMGU0ODktODhkNS0z
MDAzLTlkNzMtMzBiZjY2YjI0ZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj
MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5
OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk
ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgws6VIZpgNeu8afHZ6lUQmYGQf2znmACzXBnyxyzrgwRaL6o6OdGiW
9mA2ODqZm2Fr11UJswwKHw/9oAOkZImdAB4VPyS7vhosygMxqm1+lApzzwpHozEF
yoUhucwJf2qMo7JbxG8qArQlk2GSnAPTgfyYZwxgoK/O8ZwKeN6GjyubILjxjo1r
afv8lRJxLnVOq+N/Q+nMS5Zh8JELC22werT3ROUG6m/XL7MhVWjYM7bOboKAfSj3
q0M1lP9HO1lGbHrED9Cd+4pNb2wCu2r/bfwThG6rNvvwcT2NeoYaOLDRVdqbye6i
6AH2SHWTlKp5PFN0kJqB4e9jJ3hrmhc=
-----END CERTIFICATE-----
Generated at Fri Sep 15 06:20:15 2023 by rpki-client on console-fra.rpki-client.org