Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/25533434-dbfa-3726-9915-77592a54b34c.roa
File: 25533434-dbfa-3726-9915-77592a54b34c.roa (raw, json)
Hash identifier: Uy0uvwujcHA0OEMFgXvie7Wl3z++HAFL/43Fwer0W8Q=
Subject key identifier: 04:84:63:53:07:C3:47:F6:50:E1:35:C4:21:A5:44:90:85:54:CA:54
Certificate issuer: /CN=bf199120-727f-4e3f-bb44-8136224777e0
Certificate serial: 010D0C9F43285839ABDAC40455BFB0A3F7FA5100
Authority key identifier: E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/25533434-dbfa-3726-9915-77592a54b34c.roa
Signing time: Thu 22 Apr 2021 04:00:00 +0000
ROA not before: Thu 22 Apr 2021 04:00:00 +0000
ROA not after: Wed 26 Jul 2023 04:00:00 +0000
asID: 3356
IP address blocks: 66.187.8.0/24 maxlen: 24
66.187.9.0/24 maxlen: 24
66.187.10.0/24 maxlen: 24
66.187.11.0/24 maxlen: 24
66.187.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:ab:da:c4:04:55:bf:b0:a3:f7:fa:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf199120-727f-4e3f-bb44-8136224777e0
Validity
Not Before: Apr 22 04:00:00 2021 GMT
Not After : Jul 26 04:00:00 2023 GMT
Subject: CN=bcaf6c47-639f-48a0-a693-168bc8a932e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:5d:76:4f:b7:2a:d8:fe:27:14:e7:32:03:
cc:63:f5:96:39:51:e7:7a:9a:39:cc:91:62:4a:f3:
6b:5f:dd:e8:8e:1f:ea:8a:df:8c:f3:80:16:a0:72:
db:73:77:15:db:bd:da:e2:51:49:e4:be:58:31:0d:
67:b5:92:76:c0:08:00:3c:bd:44:f6:b5:ae:f6:0d:
22:8e:23:cc:3a:ac:4b:f3:7d:af:be:ef:11:bf:6b:
e9:99:e8:43:38:53:32:57:25:0c:25:64:5a:14:a3:
94:21:c2:4c:e4:d0:4d:e1:24:17:4e:a1:21:e1:9e:
b3:ba:07:8b:b0:76:c1:50:a6:cb:c4:4e:a8:ef:75:
7a:c8:d5:a6:83:a7:c5:2d:d4:0f:05:26:37:57:82:
59:b0:fc:1a:df:29:22:8c:19:11:ca:1f:4e:14:53:
f3:1d:36:13:dd:a6:a8:25:30:2a:00:fd:9c:27:90:
dc:49:83:e4:50:1a:7a:63:f3:c5:69:36:03:a5:40:
b8:7d:34:64:34:ff:36:68:0b:7f:29:bf:ce:37:78:
bd:fb:9b:d1:bc:db:20:b2:e4:fb:33:a3:5b:75:01:
bd:bc:29:1f:52:aa:7a:50:15:d0:d8:3b:ea:cb:85:
92:5b:ad:cf:cf:29:39:f6:51:ef:eb:c0:ce:ba:87:
3e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:63:53:07:C3:47:F6:50:E1:35:C4:21:A5:44:90:85:54:CA:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/25533434-dbfa-3726-9915-77592a54b34c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0/bf199120-727f-4e3f-bb44-8136224777e0.crl
X509v3 Authority Key Identifier:
keyid:E7:5D:2A:3B:AE:64:3D:38:0F:62:5D:33:61:15:39:70:E5:F6:58:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bf199120-727f-4e3f-bb44-8136224777e0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.187.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:17:3b:e8:39:14:ac:97:36:f5:18:5d:2f:93:ef:60:0c:13:
89:6d:58:b8:64:ae:0d:d0:a8:11:ae:bd:21:80:55:2f:b5:51:
ef:cf:f4:f9:bd:f8:c5:d8:88:28:aa:d2:32:8d:b6:39:54:7c:
c9:46:a2:84:1d:e4:40:11:3d:f1:ec:08:f5:25:05:ee:ea:e0:
4b:db:dc:b8:e9:e3:83:b8:f4:24:a9:5f:8b:b9:79:fc:21:5b:
99:87:d1:c2:c7:8d:a7:ca:59:c7:fd:c7:0c:64:4d:95:38:2d:
a9:b9:0b:72:5d:b5:9c:0f:22:6a:36:4f:71:05:fe:8f:df:7a:
85:d0:26:56:92:02:35:d8:5c:e3:85:23:21:ed:cb:a8:b1:03:
9e:42:c3:d1:cc:06:e5:0a:52:da:d2:8f:20:40:56:95:43:94:
56:3f:3e:99:bc:a7:98:a1:e7:41:69:03:4f:9b:fa:7d:26:8f:
58:f4:ec:17:a2:c9:2e:55:b9:3d:13:d7:96:dc:03:5a:9c:21:
6b:57:63:c7:7a:e7:e6:bc:20:79:e1:16:a5:d6:42:5c:1e:a0:
b4:8d:fd:2f:2c:de:50:86:52:64:e7:da:a6:b9:93:49:c4:2b:
ef:aa:d8:c7:43:ae:3c:d0:c2:09:f6:36:e5:ff:1f:7e:d4:08:
a8:45:1f:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDmr2sQEVb+wo/f6UQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxOTkxMjAtNzI3Zi00ZTNmLWJiNDQtODEzNjIyNDc3
N2UwMB4XDTIxMDQyMjA0MDAwMFoXDTIzMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
YmNhZjZjNDctNjM5Zi00OGEwLWE2OTMtMTY4YmM4YTkzMmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK9ddk+3Ktj+JxTnMgPMY/WWOVHnepo5zJFi
SvNrX93ojh/qit+M84AWoHLbc3cV273a4lFJ5L5YMQ1ntZJ2wAgAPL1E9rWu9g0i
jiPMOqxL832vvu8Rv2vpmehDOFMyVyUMJWRaFKOUIcJM5NBN4SQXTqEh4Z6zugeL
sHbBUKbLxE6o73V6yNWmg6fFLdQPBSY3V4JZsPwa3ykijBkRyh9OFFPzHTYT3aao
JTAqAP2cJ5DcSYPkUBp6Y/PFaTYDpUC4fTRkNP82aAt/Kb/ON3i9+5vRvNsgsuT7
M6NbdQG9vCkfUqp6UBXQ2Dvqy4WSW63Pzyk59lHv68DOuoc+DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASEY1MHw0f2UOE1xCGlRJCFVMpUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZjE5
OTEyMC03MjdmLTRlM2YtYmI0NC04MTM2MjI0Nzc3ZTAvMjU1MzM0MzQtZGJmYS0z
NzI2LTk5MTUtNzc1OTJhNTRiMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmYxOTkxMjAtNzI3Zi00ZTNmLWJi
NDQtODEzNjIyNDc3N2UwL2JmMTk5MTIwLTcyN2YtNGUzZi1iYjQ0LTgxMzYyMjQ3
NzdlMC5jcmwwHwYDVR0jBBgwFoAU510qO65kPTgPYl0zYRU5cOX2WMYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZjE5OTEyMC03MjdmLTRlM2YtYmI0NC04MTM2
MjI0Nzc3ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrsIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYXO+g5FKyXNvUYXS+T72AME4ltWLhkrg3QqBGuvSGAVS+1Ue/P9Pm9
+MXYiCiq0jKNtjlUfMlGooQd5EARPfHsCPUlBe7q4Evb3Ljp44O49CSpX4u5efwh
W5mH0cLHjafKWcf9xwxkTZU4Lam5C3JdtZwPImo2T3EF/o/feoXQJlaSAjXYXOOF
IyHty6ixA55Cw9HMBuUKUtrSjyBAVpVDlFY/Ppm8p5ih50FpA0+b+n0mj1j07Bei
yS5VuT0T15bcA1qcIWtXY8d65+a8IHnhFqXWQlweoLSN/S8s3lCGUmTn2qa5k0nE
K++q2MdDrjzQwgn2NuX/H37UCKhFH24=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:44 2023 by rpki-client on console-fra.rpki-client.org