Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa
File: cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa (raw, json)
Hash identifier: xcE/8J/p6HhR1RUuzUb0MkhDIdk1GsOgYClLx7Q5KUw=
Subject key identifier: 1B:03:C3:8E:16:D5:5E:1F:2B:AF:BA:AA:08:7A:71:4A:AD:91:19:78
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328583E1BC9E789A382F1A35D3D7740
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 25 May 2028 04:00:00 +0000
asID: 11404
IP address blocks: 152.44.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 12:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:c9:e7:89:a3:82:f1:a3:5d:3d:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : May 25 04:00:00 2028 GMT
Subject: CN=ccf859b7-7a53-43e8-9d0f-3b6d95406cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:b2:22:69:87:7c:99:b7:37:96:a6:92:23:
cc:03:be:9b:ed:95:2b:33:c5:4a:c3:e6:b2:2a:ce:
3f:d0:96:69:7d:6d:3b:8d:77:9b:79:07:70:97:0a:
c8:34:e4:c7:fa:3a:bf:e7:22:d9:d8:d7:5e:76:79:
24:df:6d:23:79:33:2c:ef:f2:c9:ed:82:8c:94:53:
33:59:fb:6f:3e:7c:db:5e:6a:18:4b:30:55:41:cd:
00:bc:88:4f:69:14:f3:87:e1:84:b2:56:8c:f8:5a:
57:7a:a5:47:ce:97:b9:a3:af:71:29:ec:fb:85:42:
c8:94:74:3c:9c:9d:7d:bb:41:e8:63:e0:65:c2:22:
c9:b8:db:2a:9a:d7:9c:fd:eb:85:d3:9b:18:57:61:
d5:40:e5:49:fd:5e:b8:ea:dc:45:0d:dd:fe:ac:2e:
f6:b9:06:d4:fa:60:1a:aa:1d:63:02:e1:b7:e0:e9:
3a:40:14:af:57:66:1d:de:e0:b2:d7:b6:28:03:8e:
53:91:6a:f5:23:fa:8e:71:e8:37:03:2e:49:8c:ea:
65:b6:88:65:9a:1b:bf:05:0d:3f:83:a2:1c:7b:9c:
e6:fa:30:71:72:dc:19:0c:2c:3a:85:1c:a4:a0:a5:
e1:72:f2:11:00:33:66:f2:9f:01:f6:c3:34:dd:4a:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:C3:8E:16:D5:5E:1F:2B:AF:BA:AA:08:7A:71:4A:AD:91:19:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
152.44.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:c4:42:f1:ea:43:7b:44:f2:e0:a0:21:a7:0b:c3:c1:b5:cf:
82:22:f2:69:3b:7c:bb:51:8c:a3:c1:8d:42:d5:ea:5b:7b:32:
6d:b3:49:46:16:d4:5b:13:59:2d:89:b4:9b:98:74:c4:aa:64:
c3:e3:8a:5c:d5:f8:fa:e8:34:5c:a2:a4:06:8f:31:ef:bb:7b:
9d:6d:e2:fc:59:f4:4b:dd:c7:34:56:84:db:0b:ed:7d:d7:fd:
bf:ef:c1:c2:06:aa:60:aa:a4:1f:da:b9:f7:b9:b4:fa:6b:d0:
de:89:47:a9:51:64:87:a2:01:8b:30:6e:08:86:73:1f:73:29:
1e:e2:3a:3d:11:8f:99:fd:f1:91:e1:77:8f:14:6f:b9:ca:4c:
91:67:97:02:49:b4:b3:42:dd:23:2e:bb:aa:ea:96:d4:8e:19:
04:59:f6:03:be:d9:af:f8:f1:e8:15:b1:6a:0a:c4:dc:39:62:
ab:72:28:7f:b9:a2:a1:6d:5d:6d:ff:43:04:78:a2:76:e5:f4:
f8:0f:50:e7:c7:d6:ee:da:6d:97:e1:63:7f:0a:ee:5b:00:cb:
16:03:95:bf:1a:59:d2:94:33:20:19:68:5d:de:aa:a7:63:95:
82:2f:db:c8:7d:7e:29:cf:a2:43:5b:15:cf:a8:4c:ba:9c:3f:
a9:a4:db:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4byeeJo4Lxo109d0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIyMDYwMTEyMDAwMFoXDTI4MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2NmODU5YjctN2E1My00M2U4LTlkMGYtM2I2ZDk1NDA2Y2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYWyImmHfJm3N5amkiPMA76b7ZUrM8VKw+ay
Ks4/0JZpfW07jXebeQdwlwrINOTH+jq/5yLZ2Ndednkk320jeTMs7/LJ7YKMlFMz
WftvPnzbXmoYSzBVQc0AvIhPaRTzh+GEslaM+FpXeqVHzpe5o69xKez7hULIlHQ8
nJ19u0HoY+BlwiLJuNsqmtec/euF05sYV2HVQOVJ/V646txFDd3+rC72uQbU+mAa
qh1jAuG34Ok6QBSvV2Yd3uCy17YoA45TkWr1I/qOceg3Ay5JjOpltohlmhu/BQ0/
g6Ice5zm+jBxctwZDCw6hRykoKXhcvIRADNm8p8B9sM03UocLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsDw44W1V4fK6+6qgh6cUqtkRl4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2I4MjJjNTEtNzUxZS0z
NWJjLTllNGYtNjljZjQ5ZjBkYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHmCyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzEQvHqQ3tE8uCgIacLw8G1z4Ii8mk7fLtRjKPBjULV6lt7Mm2zSUYW
1FsTWS2JtJuYdMSqZMPjilzV+ProNFyipAaPMe+7e51t4vxZ9EvdxzRWhNsL7X3X
/b/vwcIGqmCqpB/aufe5tPpr0N6JR6lRZIeiAYswbgiGcx9zKR7iOj0Rj5n98ZHh
d48Ub7nKTJFnlwJJtLNC3SMuu6rqltSOGQRZ9gO+2a/48egVsWoKxNw5YqtyKH+5
oqFtXW3/QwR4onbl9PgPUOfH1u7abZfhY38K7lsAyxYDlb8aWdKUMyAZaF3eqqdj
lYIv28h9finPokNbFc+oTLqcP6mk280=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:55 2025 by rpki-client