Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/69c3fb78-4c25-39a1-9e91-c9a4d998685c.roa
File: 69c3fb78-4c25-39a1-9e91-c9a4d998685c.roa (raw, json)
Hash identifier: xwqXvVGF5oQwXayg2lSupvIjTsV9lx4WVrQvmK5ZGu0=
Subject key identifier: 23:1B:99:DC:F8:9D:96:C1:23:08:88:D0:70:6C:69:53:F0:F1:78:0B
Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial: 010D0C9F432858430A19CFE8E094931DDB073FC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/69c3fb78-4c25-39a1-9e91-c9a4d998685c.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 36492
IP address blocks: 209.107.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 22 Mar 2024 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:19:cf:e8:e0:94:93:1d:db:07:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=c2fc9c3b-c4d6-4ae7-91d0-b878241bc3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:73:b9:a9:04:fc:ac:61:29:12:a2:fb:f2:
d7:8d:b9:f4:d4:be:e5:2c:e9:e9:4f:78:86:19:8e:
30:10:2a:07:6a:73:20:e3:8f:2d:26:6e:cf:7d:63:
d1:58:bd:e6:c3:e2:f9:e5:fe:07:2c:d1:76:51:9f:
5f:98:77:33:c6:18:cc:60:f9:9c:24:ea:0c:c8:64:
61:f5:ac:4d:55:fb:a0:2a:f0:a3:dc:b4:99:4d:99:
c3:1d:2c:1c:8e:7b:e5:e5:0d:45:da:c4:14:ae:65:
c8:dd:69:0f:40:15:cb:75:6c:b2:18:07:b6:b3:37:
9d:2f:cc:73:ab:12:87:87:d0:d8:fd:f6:6b:bf:a6:
0e:8a:c5:a7:f2:51:67:de:6d:b4:67:6e:a9:93:cf:
46:28:d0:15:29:98:ef:c2:ac:2e:e0:2e:96:9d:ee:
1b:b3:1a:a1:6d:cd:f4:38:6a:18:cc:24:c1:10:98:
d3:95:fa:7c:b6:63:93:c6:0b:5c:85:77:9d:08:29:
33:55:ba:62:1e:bd:9c:8e:09:5a:df:d5:ea:7c:6d:
e5:7e:c1:86:d4:d7:d3:6b:e2:1f:2d:2f:77:e2:27:
68:31:ab:96:ee:4b:3e:b5:4c:1d:27:60:d9:ab:61:
6d:c1:d6:61:34:e9:8f:ba:a4:38:39:f7:ac:d3:3e:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:99:DC:F8:9D:96:C1:23:08:88:D0:70:6C:69:53:F0:F1:78:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/69c3fb78-4c25-39a1-9e91-c9a4d998685c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
X509v3 Authority Key Identifier:
keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.107.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:3f:fb:c5:db:07:3d:ab:61:e3:a9:15:ec:c6:3f:f1:2d:09:
7a:ac:ad:b0:15:fa:42:73:0f:96:ee:fe:b9:c0:ed:0b:2a:a4:
27:37:f3:59:f4:d8:04:90:f4:41:cb:bf:74:28:2d:6e:78:97:
c2:e0:ec:82:40:c8:b1:5f:39:45:4c:c9:12:36:15:e2:b3:c4:
43:06:6b:e9:fe:38:4b:dc:d9:07:94:39:f3:13:db:92:93:a5:
b1:3d:5b:8b:22:63:1b:d8:51:d9:eb:89:c7:9e:7a:26:83:c3:
bc:4c:6d:89:4f:f7:8f:7e:23:19:9f:38:e6:c7:bf:e7:34:db:
b2:b5:e5:31:2d:9d:65:34:10:fa:aa:8f:4d:87:f7:0b:fb:98:
5f:ed:b9:6e:cd:45:65:1d:b2:9e:ea:41:9f:98:cd:e2:70:7a:
c5:55:34:fe:bd:51:34:6f:41:da:1e:01:98:c5:b4:e8:f2:00:
6a:38:de:4a:50:a5:84:1b:e9:b3:03:8e:b2:d6:cd:29:16:80:
c6:48:29:4e:86:ba:b5:b6:fd:da:e8:39:e8:af:e4:e2:bf:d0:
75:1d:a3:53:84:16:2a:5e:c8:f6:44:e5:0a:83:10:1c:85:3b:
5b:33:50:87:2c:7f:06:5b:70:0f:6f:ac:c8:a7:f5:b0:81:60:
31:d4:f1:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKGc/o4JSTHdsHP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzJmYzljM2ItYzRkNi00YWU3LTkxZDAtYjg3ODI0MWJjM2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMZzuakE/KxhKRKi+/LXjbn01L7lLOnpT3iG
GY4wECoHanMg448tJm7PfWPRWL3mw+L55f4HLNF2UZ9fmHczxhjMYPmcJOoMyGRh
9axNVfugKvCj3LSZTZnDHSwcjnvl5Q1F2sQUrmXI3WkPQBXLdWyyGAe2szedL8xz
qxKHh9DY/fZrv6YOisWn8lFn3m20Z26pk89GKNAVKZjvwqwu4C6Wne4bsxqhbc30
OGoYzCTBEJjTlfp8tmOTxgtchXedCCkzVbpiHr2cjgla39XqfG3lfsGG1NfTa+If
LS934idoMauW7ks+tUwdJ2DZq2FtwdZhNOmPuqQ4Ofes0z6KPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMbmdz4nZbBIwiI0HBsaVPw8XgLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNjljM2ZiNzgtNGMyNS0z
OWExLTllOTEtYzlhNGQ5OTg2ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADI/+8XbBz2rYeOpFezGP/EtCXqsrbAV+kJzD5bu/rnA7QsqpCc381n0
2ASQ9EHLv3QoLW54l8Lg7IJAyLFfOUVMyRI2FeKzxEMGa+n+OEvc2QeUOfMT25KT
pbE9W4siYxvYUdnriceeeiaDw7xMbYlP949+IxmfOObHv+c027K15TEtnWU0EPqq
j02H9wv7mF/tuW7NRWUdsp7qQZ+YzeJwesVVNP69UTRvQdoeAZjFtOjyAGo43kpQ
pYQb6bMDjrLWzSkWgMZIKU6GurW2/droOeiv5OK/0HUdo1OEFipeyPZE5QqDEByF
O1szUIcsfwZbcA9vrMin9bCBYDHU8VM=
-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org