Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e3a04edc-b9ce-3b27-bbcd-7260f64b5ede.roa
File: e3a04edc-b9ce-3b27-bbcd-7260f64b5ede.roa (raw, json)
Hash identifier: OQKWabFeDuZtHLtdhyNGukHP1d0bvGSOE5pAxZGXAyk=
Subject key identifier: 06:DA:E6:38:6E:DD:54:79:5D:B3:58:4A:D1:C4:67:97:D3:E8:90:09
Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial: 010D0C9F43285843D63E22D11000867D6C50C580
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e3a04edc-b9ce-3b27-bbcd-7260f64b5ede.roa
Signing time: Fri 10 Nov 2023 02:00:15 +0000
ROA not before: Fri 10 Nov 2023 02:00:15 +0000
ROA not after: Thu 08 Feb 2024 02:00:15 +0000
asID: 55293
IP address blocks: 45.4.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d6:3e:22:d1:10:00:86:7d:6c:50:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Validity
Not Before: Nov 10 02:00:15 2023 GMT
Not After : Feb 8 02:00:15 2024 GMT
Subject: CN=6e6ea59f-6340-4e57-ba5b-7fd86df570db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:a9:0b:70:8d:e1:5c:c9:d2:cd:a8:f1:28:
6f:b7:89:84:7b:60:89:2e:f5:95:ad:1f:89:19:5b:
46:a2:1a:d5:a8:3d:e1:ce:7d:fd:3d:df:74:3f:64:
c0:a8:27:5c:f8:8a:37:8d:96:9e:3a:e7:d6:4c:57:
d3:14:63:6e:2b:28:9a:93:80:bf:c2:fe:c9:53:81:
3e:25:90:6a:93:b6:e8:b2:03:d2:22:73:7f:9b:71:
b9:74:8b:dd:98:67:3a:e8:56:47:5c:df:a1:96:a1:
56:4f:e6:ee:57:be:2d:fa:b6:65:55:1c:a8:7d:18:
ed:2d:fa:2e:93:4c:21:fd:62:a6:94:db:25:9e:c6:
e9:2a:ce:6e:02:1d:1d:f4:91:a1:d7:d1:d4:85:86:
c1:13:c3:ff:57:d1:1d:4e:20:e4:e9:4e:e1:ed:6a:
e3:45:ae:37:05:9b:11:c4:1d:cf:05:64:ee:ed:d6:
f2:bb:1c:af:09:75:4a:ee:20:41:58:fc:07:ef:3d:
bc:a2:0c:4c:4a:43:c0:38:09:e6:ff:31:a7:c8:13:
4c:77:f7:00:54:b5:c1:ea:c7:b7:13:7e:1d:a2:53:
6b:92:2d:1d:c6:6a:74:4f:0e:cb:69:69:c9:77:38:
e9:cb:00:1a:2e:38:42:6d:fd:6f:1f:47:e6:89:7d:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:E6:38:6E:DD:54:79:5D:B3:58:4A:D1:C4:67:97:D3:E8:90:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/e3a04edc-b9ce-3b27-bbcd-7260f64b5ede.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
X509v3 Authority Key Identifier:
keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
sbgp-ipAddrBlock: critical
IPv4:
45.4.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b4:4f:48:73:f7:70:16:18:ad:6e:4c:0b:ee:f7:59:e3:d7:
22:4b:6b:5e:78:0b:3a:99:a8:28:f4:11:38:a9:33:7f:71:03:
09:0d:95:2e:64:b8:41:3b:3e:76:94:2f:54:5f:6b:3a:58:b1:
83:06:bc:c1:a9:77:15:84:c7:63:7e:10:cf:a3:e1:d2:ad:14:
94:84:12:cf:90:24:43:53:08:7c:97:f8:00:ea:2b:6c:c7:b9:
6b:5a:82:35:2d:77:73:cd:41:31:29:d0:e3:55:35:f1:fc:95:
12:b7:0a:ae:38:8f:26:06:67:b4:12:4a:2d:21:94:3e:54:1d:
f5:02:6e:e3:75:cf:14:2f:a7:d4:fa:a4:60:ba:44:ba:c6:1c:
be:ae:1f:49:5e:34:65:3a:25:64:7d:88:80:40:aa:43:85:34:
90:03:c5:82:0f:02:73:6b:ac:ca:7c:75:4b:60:09:af:e7:36:
ef:08:c8:ef:ab:30:65:4c:5f:84:bf:f9:a1:51:ec:08:f8:81:
b0:b9:9f:65:f3:d3:07:82:79:c5:48:d1:8a:c9:e4:87:ce:f2:
d1:ff:56:53:89:9b:11:32:4f:77:57:7e:6a:7d:ad:33:19:e7:
1d:5c:0c:05:5b:97:7d:5c:33:62:1a:7e:6f:18:fd:25:95:0c:
36:9b:c4:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPWPiLREACGfWxQxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIzMTExMDAyMDAxNVoXDTI0MDIwODAyMDAxNVowLzEtMCsGA1UEAxMk
NmU2ZWE1OWYtNjM0MC00ZTU3LWJhNWItN2ZkODZkZjU3MGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDypC3CN4VzJ0s2o8Shvt4mEe2CJLvWVrR+J
GVtGohrVqD3hzn39Pd90P2TAqCdc+Io3jZaeOufWTFfTFGNuKyiak4C/wv7JU4E+
JZBqk7bosgPSInN/m3G5dIvdmGc66FZHXN+hlqFWT+buV74t+rZlVRyofRjtLfou
k0wh/WKmlNslnsbpKs5uAh0d9JGh19HUhYbBE8P/V9EdTiDk6U7h7WrjRa43BZsR
xB3PBWTu7dbyuxyvCXVK7iBBWPwH7z28ogxMSkPAOAnm/zGnyBNMd/cAVLXB6se3
E34dolNrki0dxmp0Tw7LaWnJdzjpywAaLjhCbf1vH0fmiX1fkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAba5jhu3VR5XbNYStHEZ5fT6JAJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvZTNhMDRlZGMtYjljZS0z
YjI3LWJiY2QtNzI2MGY2NGI1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQSsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACy0T0hz93AWGK1uTAvu91nj1yJLa154CzqZqCj0ETipM39xAwkNlS5k
uEE7PnaUL1RfazpYsYMGvMGpdxWEx2N+EM+j4dKtFJSEEs+QJENTCHyX+ADqK2zH
uWtagjUtd3PNQTEp0ONVNfH8lRK3Cq44jyYGZ7QSSi0hlD5UHfUCbuN1zxQvp9T6
pGC6RLrGHL6uH0leNGU6JWR9iIBAqkOFNJADxYIPAnNrrMp8dUtgCa/nNu8IyO+r
MGVMX4S/+aFR7Aj4gbC5n2Xz0weCecVI0YrJ5IfO8tH/VlOJmxEyT3dXfmp9rTMZ
5x1cDAVbl31cM2Iafm8Y/SWVDDabxIw=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org