Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3ac1d16-896f-3405-9f6d-2f1dab4ed12c.roa
File: c3ac1d16-896f-3405-9f6d-2f1dab4ed12c.roa (raw, json)
Hash identifier: WYPbcEOUphsmQw9QPoZcG6En1ulZkKbjr85PQcdV8WA=
Subject key identifier: C8:F5:E2:A2:DE:3B:54:F9:B6:68:27:8D:A1:2F:31:24:2C:51:FA:DE
Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial: 010D0C9F4328584309FD8CF8AEF0967B6844E8C0
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3ac1d16-896f-3405-9f6d-2f1dab4ed12c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36040
IP address blocks: 136.22.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:24:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:fd:8c:f8:ae:f0:96:7b:68:44:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=205d05f6-da13-49f3-94cb-be299940b84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:bf:79:14:c1:85:f0:68:79:3b:22:1b:fe:
9a:66:09:34:f9:bb:10:50:fd:fa:a7:ba:30:e6:db:
20:7f:35:d3:ca:04:35:ab:4a:31:67:c9:a3:a1:1b:
cf:0a:43:42:61:92:49:6a:e5:85:09:0d:df:07:d5:
3e:32:00:d1:01:a8:5c:94:55:89:0a:8f:10:d6:61:
b3:19:3e:72:2f:fa:01:c4:53:44:fc:d8:a2:e3:69:
1c:e2:d5:1f:c3:2a:ab:bf:bd:a1:74:7d:f5:ff:bc:
e9:c7:9d:c8:a9:68:28:3d:13:25:91:c2:81:1e:3d:
bb:f6:50:b8:57:c6:e3:3a:91:51:0a:8c:bc:9f:2b:
19:86:ff:22:03:ac:fb:e4:c7:b0:71:4f:c2:b3:7b:
6d:9d:0a:42:bf:60:e6:05:d8:30:0e:11:61:d9:0e:
87:b8:3d:06:14:a2:ce:71:9f:ef:cc:8d:f3:f1:b9:
e7:1b:64:75:9c:6f:63:97:68:e9:7e:32:0f:ee:0e:
4d:ff:fd:37:89:4b:74:98:04:e0:09:8a:49:28:71:
4d:8b:89:d2:dc:a0:99:c9:f9:cc:a4:70:29:21:b8:
db:41:12:f3:e6:01:50:f1:e0:98:d6:92:4b:3e:6c:
e0:6e:48:a9:b5:dc:47:85:55:7d:ad:54:27:cf:74:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F5:E2:A2:DE:3B:54:F9:B6:68:27:8D:A1:2F:31:24:2C:51:FA:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c3ac1d16-896f-3405-9f6d-2f1dab4ed12c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl
X509v3 Authority Key Identifier:
keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.22.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:69:fd:01:39:b8:4d:5c:61:93:cc:cb:13:01:bb:86:05:05:
f3:af:68:eb:96:92:bd:50:33:c9:9e:3c:ad:a6:aa:59:e6:39:
5e:69:8b:41:7c:6f:25:5a:4e:70:f2:ce:0c:88:b5:66:6d:04:
9c:58:aa:58:fc:a9:f1:59:23:7b:0f:b6:07:4e:8f:78:74:76:
26:21:86:c4:55:26:7a:da:1f:10:e9:a6:8b:4b:26:58:2f:48:
ae:c7:08:90:c6:77:f4:c8:42:5a:36:5c:de:c6:77:11:ab:f3:
32:07:5c:f1:de:67:23:e9:00:90:f4:82:06:b6:2f:43:29:c4:
cb:25:08:6a:33:2d:28:7a:b5:f3:8e:32:db:88:be:36:08:42:
9e:42:bf:11:b6:a3:8b:ff:66:bc:f3:fb:2f:55:37:75:bb:5a:
2c:02:c3:c6:d5:a0:19:b3:4e:66:7d:1e:a0:51:9c:c5:af:64:
9c:0b:06:d8:8b:cc:e4:ea:2a:d9:69:a3:a7:f5:0e:aa:e7:7f:
8d:c3:84:fe:70:d8:8c:26:92:40:16:38:3c:dd:21:58:e4:29:
40:24:cf:39:39:26:87:86:ed:13:be:db:27:de:fe:89:29:57:
83:d2:70:4a:07:26:a2:ea:0a:78:db:6a:4e:32:8a:cb:72:0c:
f4:91:80:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMJ/Yz4rvCWe2hE6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh
ZWEyMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MjA1ZDA1ZjYtZGExMy00OWYzLTk0Y2ItYmUyOTk5NDBiODRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Eu/eRTBhfBoeTsiG/6aZgk0+bsQUP36p7ow
5tsgfzXTygQ1q0oxZ8mjoRvPCkNCYZJJauWFCQ3fB9U+MgDRAahclFWJCo8Q1mGz
GT5yL/oBxFNE/Nii42kc4tUfwyqrv72hdH31/7zpx53IqWgoPRMlkcKBHj279lC4
V8bjOpFRCoy8nysZhv8iA6z75MewcU/Cs3ttnQpCv2DmBdgwDhFh2Q6HuD0GFKLO
cZ/vzI3z8bnnG2R1nG9jl2jpfjIP7g5N//03iUt0mATgCYpJKHFNi4nS3KCZyfnM
pHApIbjbQRLz5gFQ8eCY1pJLPmzgbkiptdxHhVV9rVQnz3SfnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMj14qLeO1T5tmgnjaEvMSQsUfreMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2
Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYzNhYzFkMTYtODk2Zi0z
NDA1LTlmNmQtMmYxZGFiNGVkMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4
ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh
YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2
MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNp/QE5uE1cYZPMyxMBu4YFBfOvaOuWkr1QM8mePK2mqlnmOV5pi0F8
byVaTnDyzgyItWZtBJxYqlj8qfFZI3sPtgdOj3h0diYhhsRVJnraHxDppotLJlgv
SK7HCJDGd/TIQlo2XN7GdxGr8zIHXPHeZyPpAJD0gga2L0MpxMslCGozLSh6tfOO
MtuIvjYIQp5CvxG2o4v/Zrzz+y9VN3W7WiwCw8bVoBmzTmZ9HqBRnMWvZJwLBtiL
zOTqKtlpo6f1Dqrnf43DhP5w2IwmkkAWODzdIVjkKUAkzzk5JoeG7RO+2yfe/okp
V4PScEoHJqLqCnjbak4yistyDPSRgH4=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org