Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ba99043d-1e5e-390c-b313-68fba1324afc.roa
File: ba99043d-1e5e-390c-b313-68fba1324afc.roa (raw, json)
Hash identifier: jGGfJMxkSpOl3WLGgGNoGi/1BqECTjbpm6q/t2+07Aw=
Subject key identifier: CC:B5:FA:45:57:62:11:91:30:ED:9E:78:80:34:EB:D7:0F:BB:E6:74
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858471BA5A860FF525B7E13898140
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ba99043d-1e5e-390c-b313-68fba1324afc.roa
Signing time: Thu 05 Sep 2024 01:00:30 +0000
ROA not before: Thu 05 Sep 2024 01:00:30 +0000
ROA not after: Wed 04 Dec 2024 02:00:30 +0000
asID: 203724
IP address blocks: 161.69.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 14:54:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:1b:a5:a8:60:ff:52:5b:7e:13:89:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Sep 5 01:00:30 2024 GMT
Not After : Dec 4 02:00:30 2024 GMT
Subject: CN=cdbd79f8-d5c0-4162-957a-794294ab155f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:9b:19:78:04:fe:0d:f5:b0:0e:62:cf:16:
9a:ea:de:d5:77:fa:00:01:6e:12:0b:5f:f8:62:ba:
23:14:62:86:d4:07:c4:c0:79:e7:8e:25:f5:e0:9b:
b9:10:b6:1b:22:84:bf:74:5d:fc:41:38:c5:51:e5:
14:80:2e:93:1f:48:56:bf:fe:25:e7:c9:b1:b4:1d:
6e:8a:ad:ff:5e:30:03:aa:c5:ff:62:b3:c8:5c:79:
6f:00:ed:26:12:78:30:00:c4:d3:e7:c6:a9:c1:dc:
3b:c2:91:02:c6:da:e6:9f:5a:60:4c:41:0c:11:f3:
f3:e6:02:6c:97:c8:75:f5:3f:b0:95:43:ea:09:9a:
a9:0b:23:0a:d4:54:3f:18:97:71:17:fe:5f:67:a5:
93:d8:b4:64:07:97:ee:98:6f:2b:72:28:4a:c0:5c:
05:cb:ab:2a:4a:96:61:b0:b5:6c:f1:51:47:bc:4c:
e0:3c:a0:af:3e:25:5e:fa:ce:c9:50:9c:48:aa:37:
93:51:2d:d2:20:53:de:7b:6a:51:4c:0b:27:fe:cd:
03:e1:4f:14:d3:63:df:b5:14:13:b6:98:f9:36:68:
f1:41:e1:ff:69:21:ed:19:fb:92:5e:90:d9:07:bc:
d0:42:26:5d:11:7d:75:4e:d4:0d:54:3c:67:b6:51:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:FA:45:57:62:11:91:30:ED:9E:78:80:34:EB:D7:0F:BB:E6:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/ba99043d-1e5e-390c-b313-68fba1324afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:cf:fe:ec:69:8c:50:5e:73:aa:f4:c8:2f:c1:ad:5e:64:5e:
19:44:50:e4:5b:bb:85:d5:8a:c4:dc:d1:4b:76:cf:d7:a3:5a:
30:ad:fe:e7:45:17:44:eb:3e:1e:ce:96:e2:95:45:90:85:da:
35:23:e4:ae:f4:2f:0c:fe:27:2c:e3:a8:e5:5a:ca:e5:9f:02:
8f:3c:ac:4e:c0:7d:ef:d2:ba:ae:f2:e2:ef:f9:4c:51:02:0b:
95:36:58:bb:e7:e6:fa:80:62:40:29:a1:c6:e9:2e:fb:b1:91:
09:12:53:c4:96:d2:dd:c6:c7:69:34:ea:d7:39:6e:cb:d1:d6:
dd:71:a1:04:3a:cc:08:8d:e0:0a:dc:f0:a6:ca:3c:65:6b:40:
28:47:a2:76:b7:d1:52:e0:d8:b3:35:60:ed:24:e4:19:c7:4d:
63:0a:53:e2:5f:88:cc:74:4f:dc:35:27:c6:36:30:09:d5:f0:
0f:b8:97:38:04:f1:9a:cd:88:35:70:d8:ef:5e:9b:d5:32:33:
c3:9e:2a:24:10:f3:70:f0:d9:f4:fe:98:3b:b7:93:87:80:9e:
00:11:ec:39:cc:6a:71:84:53:98:10:a5:d3:70:f7:f0:ed:be:
cf:7c:99:8d:55:7c:8f:a1:de:99:ca:f8:42:dc:74:c5:ff:77:
26:74:c6:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcbpahg/1JbfhOJgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI0MDkwNTAxMDAzMFoXDTI0MTIwNDAyMDAzMFowLzEtMCsGA1UEAxMk
Y2RiZDc5ZjgtZDVjMC00MTYyLTk1N2EtNzk0Mjk0YWIxNTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq+bGXgE/g31sA5izxaa6t7Vd/oAAW4SC1/4
YrojFGKG1AfEwHnnjiX14Ju5ELYbIoS/dF38QTjFUeUUgC6TH0hWv/4l58mxtB1u
iq3/XjADqsX/YrPIXHlvAO0mEngwAMTT58apwdw7wpECxtrmn1pgTEEMEfPz5gJs
l8h19T+wlUPqCZqpCyMK1FQ/GJdxF/5fZ6WT2LRkB5fumG8rcihKwFwFy6sqSpZh
sLVs8VFHvEzgPKCvPiVe+s7JUJxIqjeTUS3SIFPee2pRTAsn/s0D4U8U02PftRQT
tpj5NmjxQeH/aSHtGfuSXpDZB7zQQiZdEX11TtQNVDxntlEwDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy1+kVXYhGRMO2eeIA069cPu+Z0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYmE5OTA0M2QtMWU1ZS0z
OTBjLWIzMTMtNjhmYmExMzI0YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErP/uxpjFBec6r0yC/BrV5kXhlEUORbu4XVisTc0Ut2z9ejWjCt/udF
F0TrPh7OluKVRZCF2jUj5K70Lwz+JyzjqOVayuWfAo88rE7Afe/Suq7y4u/5TFEC
C5U2WLvn5vqAYkApocbpLvuxkQkSU8SW0t3Gx2k06tc5bsvR1t1xoQQ6zAiN4Arc
8KbKPGVrQChHona30VLg2LM1YO0k5BnHTWMKU+JfiMx0T9w1J8Y2MAnV8A+4lzgE
8ZrNiDVw2O9em9UyM8OeKiQQ83Dw2fT+mDu3k4eAngAR7DnManGEU5gQpdNw9/Dt
vs98mY1VfI+h3pnK+ELcdMX/dyZ0xkk=
-----END CERTIFICATE-----
Generated at Tue Nov 5 19:59:38 2024 by rpki-client on console-fra.rpki-client.org