Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84a02adc-cd29-389e-81e9-6cc5ecec9504.roa
File: 84a02adc-cd29-389e-81e9-6cc5ecec9504.roa (raw, json)
Hash identifier: 2bBJOA/t5ZOhfLl1o5yic6h44xtwkVmGDvTlPOnt7KE=
Subject key identifier: F1:22:A3:A4:95:C6:5E:62:0B:FA:60:6B:61:09:AD:40:CD:25:18:1E
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F43285839CBDB2EAC1A4055C23E637A40
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84a02adc-cd29-389e-81e9-6cc5ecec9504.roa
Signing time: Tue 09 Feb 2021 05:00:00 +0000
ROA not before: Tue 09 Feb 2021 05:00:00 +0000
ROA not after: Thu 06 Aug 2026 04:00:00 +0000
asID: 1239
IP address blocks: 65.110.40.0/23 maxlen: 23
65.110.42.0/23 maxlen: 23
65.110.44.0/23 maxlen: 23
65.110.46.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 02 Jul 2022 08:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:cb:db:2e:ac:1a:40:55:c2:3e:63:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Feb 9 05:00:00 2021 GMT
Not After : Aug 6 04:00:00 2026 GMT
Subject: CN=2f644e0f-9b63-4138-803d-6d4dd0ca5327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:92:56:29:f7:57:c6:4e:ca:28:e2:8e:82:
f3:83:7a:e3:1d:2b:0a:c3:4e:0f:76:3b:d8:48:76:
c6:c6:56:8c:d4:e2:8a:f1:32:f6:70:1d:3d:c4:f9:
13:be:1f:f5:10:8a:5e:6c:e2:a6:8d:7a:dc:3e:5e:
81:35:4e:e1:21:28:af:47:a1:a5:22:4d:10:35:01:
f5:8d:ef:51:49:5e:2a:c6:11:38:4b:2d:6e:80:85:
79:c2:2a:2f:e9:3d:b3:a4:7a:d3:e2:37:1c:ed:9e:
0a:d2:ae:51:f2:08:99:82:05:13:0e:36:90:81:a6:
9d:ea:95:52:b6:2c:63:8e:14:dc:1c:7d:81:d7:f7:
de:2e:0f:10:3a:3e:1e:a0:50:00:27:c9:55:99:59:
ec:af:ff:b6:b5:1c:39:06:de:8f:2d:cc:bf:fe:5a:
ca:34:eb:2c:f2:22:85:e3:78:e9:96:aa:fc:64:41:
06:ff:81:c8:67:5d:73:74:52:f7:58:9b:50:f1:82:
dd:ee:64:d6:a4:b9:45:ca:a7:1e:c7:ea:62:7c:4d:
8f:08:49:c0:4f:78:d7:4b:a4:ca:b0:1b:b5:b8:6d:
bf:ff:ec:2e:29:3e:be:a8:94:75:5e:f8:f3:db:63:
8e:d6:0a:9a:1c:d0:67:1a:7f:ba:2d:24:6c:84:86:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:A3:A4:95:C6:5E:62:0B:FA:60:6B:61:09:AD:40:CD:25:18:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/84a02adc-cd29-389e-81e9-6cc5ecec9504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
65.110.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:5f:33:b3:bd:a2:e4:61:c5:66:eb:2e:07:03:e4:3b:c8:c2:
98:5f:39:88:ed:7c:c9:4f:38:47:e5:b9:10:c4:ab:84:d4:13:
92:c2:f1:c9:8d:74:1d:13:a3:a7:b5:26:1e:9f:5e:0c:39:02:
be:b0:c0:04:bc:44:42:16:1c:13:6e:f8:29:6a:d5:8b:3d:7a:
9d:78:b0:9f:f3:94:a8:3e:db:36:46:8b:2f:1b:4a:8d:58:ca:
60:4c:cd:64:68:cb:37:37:ef:0f:4e:9d:e7:a8:14:1a:4e:5b:
92:92:50:a8:d2:8a:bc:f0:03:6e:3f:4b:8c:fe:84:58:c1:08:
3d:82:ae:a6:db:dc:76:73:20:2d:17:a6:3e:92:45:8f:d7:f7:
4c:76:b9:2e:51:85:12:2f:9f:19:3c:3b:d0:0d:76:05:fd:14:
88:6e:5b:d1:fa:e8:e9:39:06:47:4c:14:0f:10:d3:8b:c6:ee:
6e:3c:11:6e:07:14:51:b9:bb:8c:2d:c8:e1:4d:bb:0d:60:34:
15:41:32:07:81:52:dd:a0:4b:34:55:70:81:59:2c:b9:4d:9d:
e1:78:29:9f:ab:31:cb:14:d5:40:fe:bf:fa:c6:d3:82:38:02:
79:10:02:91:17:90:82:43:bd:24:c1:aa:dd:ab:57:f2:ec:df:
cf:05:54:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDnL2y6sGkBVwj5jekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTIxMDIwOTA1MDAwMFoXDTI2MDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
MmY2NDRlMGYtOWI2My00MTM4LTgwM2QtNmQ0ZGQwY2E1MzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLmSVin3V8ZOyijijoLzg3rjHSsKw04PdjvY
SHbGxlaM1OKK8TL2cB09xPkTvh/1EIpebOKmjXrcPl6BNU7hISivR6GlIk0QNQH1
je9RSV4qxhE4Sy1ugIV5wiov6T2zpHrT4jcc7Z4K0q5R8giZggUTDjaQgaad6pVS
tixjjhTcHH2B1/feLg8QOj4eoFAAJ8lVmVnsr/+2tRw5Bt6PLcy//lrKNOss8iKF
43jplqr8ZEEG/4HIZ11zdFL3WJtQ8YLd7mTWpLlFyqcex+pifE2PCEnAT3jXS6TK
sBu1uG2//+wuKT6+qJR1Xvjz22OO1gqaHNBnGn+6LSRshIYOfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEio6SVxl5iC/pga2EJrUDNJRgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvODRhMDJhZGMtY2QyOS0z
ODllLTgxZTktNmNjNWVjZWM5NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQW4oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZfM7O9ouRhxWbrLgcD5DvIwphfOYjtfMlPOEfluRDEq4TUE5LC8cmN
dB0To6e1Jh6fXgw5Ar6wwAS8REIWHBNu+Clq1Ys9ep14sJ/zlKg+2zZGiy8bSo1Y
ymBMzWRoyzc37w9OneeoFBpOW5KSUKjSirzwA24/S4z+hFjBCD2Crqbb3HZzIC0X
pj6SRY/X90x2uS5RhRIvnxk8O9ANdgX9FIhuW9H66Ok5BkdMFA8Q04vG7m48EW4H
FFG5u4wtyOFNuw1gNBVBMgeBUt2gSzRVcIFZLLlNneF4KZ+rMcsU1UD+v/rG04I4
AnkQApEXkIJDvSTBqt2rV/Ls388FVM0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org