Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9fc89c-45dd-3922-9cb7-e246feb01503.roa
File: 2d9fc89c-45dd-3922-9cb7-e246feb01503.roa (raw, json)
Hash identifier: O3TWUNxut+n8pMv/6wNrf1csWlUAKzJD6cVkqKM96N8=
Subject key identifier: DE:60:97:16:89:11:BF:B7:98:AE:27:AB:A8:7F:80:9A:41:C7:04:07
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584646145DC4E84662A8378EFEE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9fc89c-45dd-3922-9cb7-e246feb01503.roa
Signing time: Thu 20 Jun 2024 13:00:33 +0000
ROA not before: Thu 20 Jun 2024 13:00:33 +0000
ROA not after: Wed 18 Sep 2024 13:00:33 +0000
asID: 834
IP address blocks: 104.224.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 18:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:46:14:5d:c4:e8:46:62:a8:37:8e:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Jun 20 13:00:33 2024 GMT
Not After : Sep 18 13:00:33 2024 GMT
Subject: CN=25c164d1-94c4-4b26-bdae-4ddeb590b07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:ce:3a:44:26:5a:20:f8:af:98:f1:34:c6:
85:03:e5:88:3f:56:df:87:b5:f8:41:69:29:3d:e4:
33:67:51:ee:bf:4f:b7:9e:1b:4e:b5:fc:eb:17:58:
76:07:1e:57:c4:5b:7d:0f:5e:4b:5c:cc:d2:e4:0c:
c1:eb:a1:a3:26:44:80:5b:9f:f4:80:76:b1:43:e9:
2c:b6:18:2e:14:49:fa:15:93:ab:68:bd:da:5e:09:
20:50:83:70:b8:2a:45:dd:f0:a3:0f:b7:22:dc:8d:
73:38:c9:8e:ea:e8:8f:a1:7a:03:80:74:0b:5d:cc:
14:cc:78:d6:5d:00:f0:b5:1e:23:20:83:1a:fc:be:
4a:b3:b7:9f:f1:59:4f:46:18:63:01:ed:49:1e:fa:
65:50:49:86:c1:c0:59:85:9e:45:41:60:28:e5:e0:
ce:ee:44:d6:8c:ef:43:be:21:cb:11:c6:06:ee:f1:
12:7f:6f:f7:0a:69:07:56:07:3a:5f:73:54:82:0b:
29:be:d1:0b:2d:28:57:af:aa:b2:cb:27:3b:9e:1b:
a3:f0:65:03:df:f9:e1:f0:d3:61:81:18:a0:ec:90:
a1:83:b8:e7:21:7a:50:db:b7:02:e7:b2:f0:ca:6f:
37:5c:56:e5:9c:81:40:73:a0:4e:7a:c5:dc:be:4b:
c4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:97:16:89:11:BF:B7:98:AE:27:AB:A8:7F:80:9A:41:C7:04:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2d9fc89c-45dd-3922-9cb7-e246feb01503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
104.224.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3c:2d:a5:67:e2:7e:2b:3e:b3:14:54:05:e1:50:aa:92:db:
a4:f0:55:59:ad:34:17:31:97:50:1c:2b:5a:15:90:07:cb:c4:
cd:e3:d2:26:22:1f:1d:36:e8:63:b9:30:7d:a6:02:91:c3:aa:
3a:54:92:5a:11:ae:9c:2a:20:0e:2a:8f:aa:69:29:35:08:0c:
20:f7:76:90:97:ad:ff:e9:cc:2d:d4:7d:db:62:1c:67:9e:ee:
0c:93:ab:49:27:6e:51:27:a3:3e:b9:ed:a5:ba:fb:89:7e:47:
23:02:2f:e3:d5:e3:dd:db:61:da:9c:ab:5a:01:37:71:59:33:
6c:d4:7b:8f:ab:be:78:b2:83:09:67:6d:7a:00:6f:a7:de:2f:
97:9d:93:57:a3:db:9f:34:ec:5d:d1:68:04:dc:14:27:b6:4a:
8b:c9:26:8d:66:06:4b:cf:62:cc:8b:c5:3b:9b:7c:de:a7:7a:
30:60:78:04:00:0f:60:0a:6d:99:41:af:38:59:d1:c7:bb:f3:
d6:b4:f5:5a:80:f6:dc:c9:8b:4b:85:6a:12:00:b1:8d:41:63:
ff:aa:85:91:79:5a:28:b9:9c:5d:89:c7:97:69:26:31:4d:1c:
8c:8b:a4:4f:8e:96:61:28:bf:09:7a:f3:b4:0f:93:39:6a:77:
12:91:ce:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZGFF3E6EZiqDeO/uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDYyMDEzMDAzM1oXDTI0MDkxODEzMDAzM1owLzEtMCsGA1UEAxMk
MjVjMTY0ZDEtOTRjNC00YjI2LWJkYWUtNGRkZWI1OTBiMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMvOOkQmWiD4r5jxNMaFA+WIP1bfh7X4QWkp
PeQzZ1Huv0+3nhtOtfzrF1h2Bx5XxFt9D15LXMzS5AzB66GjJkSAW5/0gHaxQ+ks
thguFEn6FZOraL3aXgkgUINwuCpF3fCjD7ci3I1zOMmO6uiPoXoDgHQLXcwUzHjW
XQDwtR4jIIMa/L5Ks7ef8VlPRhhjAe1JHvplUEmGwcBZhZ5FQWAo5eDO7kTWjO9D
viHLEcYG7vESf2/3CmkHVgc6X3NUggspvtELLShXr6qyyyc7nhuj8GUD3/nh8NNh
gRig7JChg7jnIXpQ27cC57Lwym83XFblnIFAc6BOesXcvkvEkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5glxaJEb+3mK4nq6h/gJpBxwQHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMmQ5ZmM4OWMtNDVkZC0z
OTIyLTljYjctZTI0NmZlYjAxNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOBPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADY8LaVn4n4rPrMUVAXhUKqS26TwVVmtNBcxl1AcK1oVkAfLxM3j0iYi
Hx026GO5MH2mApHDqjpUkloRrpwqIA4qj6ppKTUIDCD3dpCXrf/pzC3UfdtiHGee
7gyTq0knblEnoz657aW6+4l+RyMCL+PV493bYdqcq1oBN3FZM2zUe4+rvniygwln
bXoAb6feL5edk1ej25807F3RaATcFCe2SovJJo1mBkvPYsyLxTubfN6nejBgeAQA
D2AKbZlBrzhZ0ce789a09VqA9tzJi0uFahIAsY1BY/+qhZF5Wii5nF2Jx5dpJjFN
HIyLpE+OlmEovwl687QPkzlqdxKRzvs=
-----END CERTIFICATE-----
Generated at Wed Aug 21 22:37:04 2024 by rpki-client on console-fra.rpki-client.org