Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfd84ffe-d0f6-346a-950d-592acdc67ff4.roa
File: cfd84ffe-d0f6-346a-950d-592acdc67ff4.roa (raw, json)
Hash identifier: RYRtd3BtI73MLyLgo6eK3W4Eae7n12w2dj3SgGrqRFQ=
Subject key identifier: 89:F3:9A:A2:E3:97:57:DF:34:A0:72:65:13:B3:AC:8D:4F:AF:E1:70
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584198CD4619D24D8BD4D3A8F5C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfd84ffe-d0f6-346a-950d-592acdc67ff4.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Mon 21 Jul 2025 04:00:00 +0000
asID: 7411
IP address blocks: 173.211.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:98:cd:46:19:d2:4d:8b:d4:d3:a8:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : Jul 21 04:00:00 2025 GMT
Subject: CN=eae6c9bd-2dcf-4646-bfc7-316ec6ba6c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:04:5c:a1:02:43:be:21:2c:9a:ef:c2:1e:59:
41:ef:9b:7d:64:ba:f1:a2:dd:e5:54:23:2c:9e:a6:
40:d2:7f:a9:3c:7d:dd:48:ea:f1:ef:d7:96:a1:40:
21:de:c5:65:6d:df:02:f2:77:1e:01:33:c7:c9:de:
b4:04:12:d8:00:7e:f7:1c:6c:3d:ce:4e:14:44:2d:
5d:16:cf:4e:3a:9c:96:dc:fc:df:39:27:ff:b1:d7:
d0:95:90:f4:e2:df:8b:98:8d:60:5e:86:0c:80:43:
06:d3:15:6a:85:74:05:fc:4b:20:c3:85:b9:69:e4:
a4:29:0d:0a:37:ec:31:9a:f5:06:b7:9c:8e:3b:6c:
f4:6f:88:68:8a:2f:b7:f7:7c:64:5c:02:05:50:fc:
71:00:7e:df:9c:bd:22:13:4e:0f:bb:44:bf:e0:f3:
bd:21:97:c7:75:d0:65:cc:9e:82:53:3a:cd:2e:65:
46:1e:1e:1e:45:cf:d3:e4:af:76:fd:9b:1f:1d:16:
f3:03:0e:87:9a:34:c0:99:30:36:6a:6e:63:1d:c1:
30:97:91:e4:bb:19:a1:5f:7c:37:f8:0e:4c:b1:48:
8b:10:2c:af:fe:23:03:a8:7f:ce:23:b2:cf:0e:5b:
51:98:19:d9:d3:51:50:1b:1f:a7:eb:5c:c1:7e:8f:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:9A:A2:E3:97:57:DF:34:A0:72:65:13:B3:AC:8D:4F:AF:E1:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfd84ffe-d0f6-346a-950d-592acdc67ff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:2f:f6:6f:d9:f0:ca:0c:95:5e:8c:8b:f5:df:38:ca:b4:6e:
c3:ff:4a:b5:bc:37:6c:00:e4:c8:59:9f:9b:aa:b5:f9:e1:2a:
b4:1c:0b:99:9e:d6:65:78:6a:0e:af:f6:bf:ec:49:4a:c6:d4:
a1:ee:5b:24:19:db:2c:2e:71:f2:80:14:9e:1d:8c:f1:49:a4:
19:ba:7e:68:0a:09:21:d4:f7:4b:66:c0:8b:03:a6:8c:3f:de:
83:8d:39:a8:f4:11:58:f1:81:68:52:15:14:a8:13:6b:54:76:
ec:8c:fd:bc:66:42:36:d4:63:06:bb:6d:f4:4f:10:32:25:b4:
30:7b:28:f0:5d:ba:f2:e0:bf:6a:2d:1e:8b:6f:42:a2:4d:cf:
3b:3a:d5:0b:07:76:39:da:2e:c4:0c:79:15:dd:76:01:69:08:
67:6f:0b:cd:8b:54:95:63:91:01:26:88:ef:a4:ae:f1:b7:8c:
b1:01:91:d9:a0:7c:0b:75:41:cb:36:2c:5d:00:d4:81:99:cc:
1e:d9:0e:b6:18:c3:fd:89:5d:b3:bf:0b:3a:2c:7a:e2:0d:aa:
f9:1c:22:85:1c:1f:13:1f:06:c0:b3:a7:e1:4f:4c:7c:6b:c4:
13:c3:68:3b:36:8f:cf:0d:f3:fa:1c:16:b9:4c:a4:f4:08:92:
09:db:50:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGYzUYZ0k2L1NOo9cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDcyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWFlNmM5YmQtMmRjZi00NjQ2LWJmYzctMzE2ZWM2YmE2YzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQRcoQJDviEsmu/CHllB75t9ZLrxot3lVCMs
nqZA0n+pPH3dSOrx79eWoUAh3sVlbd8C8nceATPHyd60BBLYAH73HGw9zk4URC1d
Fs9OOpyW3PzfOSf/sdfQlZD04t+LmI1gXoYMgEMG0xVqhXQF/Esgw4W5aeSkKQ0K
N+wxmvUGt5yOO2z0b4hoii+393xkXAIFUPxxAH7fnL0iE04Pu0S/4PO9IZfHddBl
zJ6CUzrNLmVGHh4eRc/T5K92/ZsfHRbzAw6HmjTAmTA2am5jHcEwl5HkuxmhX3w3
+A5MsUiLECyv/iMDqH/OI7LPDltRmBnZ01FQGx+n61zBfo9ilwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInzmqLjl1ffNKByZROzrI1Pr+FwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvY2ZkODRmZmUtZDBmNi0z
NDZhLTk1MGQtNTkyYWNkYzY3ZmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIv9m/Z8MoMlV6Mi/XfOMq0bsP/SrW8N2wA5MhZn5uqtfnhKrQcC5me
1mV4ag6v9r/sSUrG1KHuWyQZ2ywucfKAFJ4djPFJpBm6fmgKCSHU90tmwIsDpow/
3oONOaj0EVjxgWhSFRSoE2tUduyM/bxmQjbUYwa7bfRPEDIltDB7KPBduvLgv2ot
HotvQqJNzzs61QsHdjnaLsQMeRXddgFpCGdvC82LVJVjkQEmiO+krvG3jLEBkdmg
fAt1Qcs2LF0A1IGZzB7ZDrYYw/2JXbO/CzoseuINqvkcIoUcHxMfBsCzp+FPTHxr
xBPDaDs2j88N8/ocFrlMpPQIkgnbUME=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:28 2023 by rpki-client on console-fra.rpki-client.org