Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6001430-9cf1-30b6-b78d-cc30293b2d18.roa
File: d6001430-9cf1-30b6-b78d-cc30293b2d18.roa (raw, json)
Hash identifier: XRkd8DuMDFC0CGqL3e4WlRDM+QRDUHQOQcE5OJIyGCg=
Subject key identifier: 85:95:86:72:2A:51:8D:DA:21:F9:6C:8B:ED:94:94:B1:F9:9B:6F:15
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285840C2037E7C3A96A73D9CD26900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6001430-9cf1-30b6-b78d-cc30293b2d18.roa
Signing time: Tue 13 Dec 2022 18:27:09 +0000
ROA not before: Tue 13 Dec 2022 18:27:09 +0000
ROA not after: Mon 05 May 2025 04:00:00 +0000
asID: 7029
IP address blocks: 45.40.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Mar 2023 00:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c2:03:7e:7c:3a:96:a7:3d:9c:d2:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Dec 13 18:27:09 2022 GMT
Not After : May 5 04:00:00 2025 GMT
Subject: CN=4df577a4-9c25-4388-b462-f662e2870869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6d:41:a8:cd:fb:26:7c:13:16:02:70:0a:af:
7d:14:91:e6:5a:30:06:45:5b:48:06:a1:01:88:97:
15:6a:68:5e:23:c2:38:ec:86:23:11:54:1b:d3:a5:
37:8e:db:44:7d:e8:8b:08:2b:12:37:61:0a:a4:26:
b6:74:88:c8:1e:60:1f:fc:df:b4:6a:14:28:b5:ee:
87:1d:0e:db:f3:15:e9:53:2f:1f:8c:40:cd:94:18:
fb:c5:c6:cd:bf:eb:d1:7c:1f:74:01:9f:a7:3a:72:
45:f0:7b:60:de:3d:a1:18:bf:e3:a0:6a:69:31:97:
4b:d8:bc:b1:e8:d7:fe:12:33:68:c5:93:9d:67:75:
79:91:e5:39:43:62:69:59:aa:82:3b:9d:1a:3a:d3:
b7:91:d8:73:5c:b2:d1:1f:e2:7c:c0:2d:fa:8e:f2:
b1:59:44:19:8d:98:eb:56:86:d8:86:23:c9:e2:dd:
d5:a2:28:5e:bf:2c:69:c6:b0:ff:ec:b4:34:4f:b4:
ba:84:cd:7c:ec:49:a6:0e:0f:27:c0:34:9b:29:ce:
10:7e:40:8e:ca:f6:ca:8b:1b:60:b1:5b:3a:8e:0f:
48:d6:02:64:3f:99:76:2c:eb:74:98:1d:4d:cd:46:
2f:36:02:a9:80:83:e7:5e:89:0f:55:de:53:cf:d9:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:95:86:72:2A:51:8D:DA:21:F9:6C:8B:ED:94:94:B1:F9:9B:6F:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d6001430-9cf1-30b6-b78d-cc30293b2d18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:fa:1e:25:0f:e0:7e:5d:4f:04:53:71:9f:9a:e1:20:8f:f0:
d3:8b:33:74:2c:d3:2d:bf:cc:ba:5b:1e:7b:6a:96:78:8b:72:
66:60:8a:71:ba:b3:a8:ce:ce:a7:0a:99:44:08:13:6f:d0:ef:
a0:3b:85:f5:1e:2f:dd:63:1b:6c:91:d3:06:cb:3b:a8:b1:f6:
b9:a8:19:c8:c0:5c:f9:4f:12:38:f7:8c:16:59:53:0c:22:22:
e7:76:ab:ce:42:51:71:58:28:ac:3f:d0:fb:e2:86:26:52:ec:
00:ba:9e:9d:e6:87:27:2b:95:c0:2d:59:5e:4c:46:47:14:1f:
81:af:cb:0e:7f:3d:a9:a5:e7:3f:b4:d5:73:d4:7c:5b:69:61:
9e:f1:b4:ab:56:4d:40:9b:78:51:5c:a4:24:6f:2f:c4:2f:ec:
0a:ad:7f:7d:70:56:bc:49:be:cf:ff:e0:88:8f:c3:ff:d9:fc:
4f:8f:ab:27:c7:e6:96:52:9c:71:42:55:b5:67:fb:31:39:21:
14:6e:5f:01:3d:3f:cf:f2:5e:3a:f2:37:78:66:f1:1b:d8:e6:
fc:b9:cf:3b:05:f5:3d:f0:d1:fa:1a:35:8d:54:00:68:96:5c:
a4:df:ca:74:4a:ef:a2:8d:77:d6:85:77:38:79:fe:28:cf:21:
8e:5b:09:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEDCA358OpanPZzSaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIyMTIxMzE4MjcwOVoXDTI1MDUwNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGRmNTc3YTQtOWMyNS00Mzg4LWI0NjItZjY2MmUyODcwODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW1BqM37JnwTFgJwCq99FJHmWjAGRVtIBqEB
iJcVamheI8I47IYjEVQb06U3jttEfeiLCCsSN2EKpCa2dIjIHmAf/N+0ahQote6H
HQ7b8xXpUy8fjEDNlBj7xcbNv+vRfB90AZ+nOnJF8Htg3j2hGL/joGppMZdL2Lyx
6Nf+EjNoxZOdZ3V5keU5Q2JpWaqCO50aOtO3kdhzXLLRH+J8wC36jvKxWUQZjZjr
VobYhiPJ4t3VoihevyxpxrD/7LQ0T7S6hM187EmmDg8nwDSbKc4QfkCOyvbKixtg
sVs6jg9I1gJkP5l2LOt0mB1NzUYvNgKpgIPnXokPVd5Tz9mHVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWVhnIqUY3aIflsi+2UlLH5m28VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDYwMDE0MzAtOWNmMS0z
MGI2LWI3OGQtY2MzMDI5M2IyZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALShgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB76HiUP4H5dTwRTcZ+a4SCP8NOLM3Qs0y2/zLpbHntqlniLcmZginG6
s6jOzqcKmUQIE2/Q76A7hfUeL91jG2yR0wbLO6ix9rmoGcjAXPlPEjj3jBZZUwwi
Iud2q85CUXFYKKw/0PvihiZS7AC6np3mhycrlcAtWV5MRkcUH4Gvyw5/Paml5z+0
1XPUfFtpYZ7xtKtWTUCbeFFcpCRvL8Qv7Aqtf31wVrxJvs//4IiPw//Z/E+PqyfH
5pZSnHFCVbVn+zE5IRRuXwE9P8/yXjryN3hm8RvY5vy5zzsF9T3w0foaNY1UAGiW
XKTfynRK76KNd9aFdzh5/ijPIY5bCfs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:10 2025 by rpki-client