Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf6dd20f-ad84-3b74-b780-ad933fa1db14.roa
File: cf6dd20f-ad84-3b74-b780-ad933fa1db14.roa (raw, json)
Hash identifier: 6gCwmQMBg2kne25MQEUsUBMtvz8LdLpDLL2Omo9ab98=
Subject key identifier: DB:56:5C:83:C3:D5:27:58:01:9B:1D:0D:B1:0C:B5:1D:33:44:BF:AA
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328583E1BC9E798D6693CD80B9E1D80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf6dd20f-ad84-3b74-b780-ad933fa1db14.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 25 May 2028 04:00:00 +0000
asID: 11404
IP address blocks: 162.211.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 12:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1b:c9:e7:98:d6:69:3c:d8:0b:9e:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : May 25 04:00:00 2028 GMT
Subject: CN=4ead5ba0-3183-44b0-8d79-fbbb6d7f47e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:66:68:0b:b4:b8:00:41:82:d1:aa:e2:7d:
7b:95:ed:cf:7f:34:2e:ae:f3:2b:28:5e:bf:2b:d2:
72:6e:d3:8e:36:d5:34:d3:1f:4b:b0:2f:15:2e:f8:
dd:bb:79:fe:a6:e4:8e:3e:0c:a1:c9:69:c4:d8:b7:
83:f3:04:10:0a:3a:ab:42:df:78:f0:1d:7a:e0:5e:
2b:38:70:cd:78:52:c7:de:95:d5:11:9a:50:ee:60:
9b:b1:35:c7:a7:1a:23:41:f0:a9:5d:0a:41:d4:bd:
46:1c:6b:81:5b:c1:8b:d8:ec:60:6d:4c:4e:72:2a:
00:67:df:bc:aa:bf:ce:34:fe:52:ee:79:89:91:8a:
20:48:67:a8:2f:c2:db:fe:d6:6c:53:ab:dc:2f:cd:
74:9a:ad:74:27:88:5e:52:51:31:ec:09:88:97:47:
65:11:4e:c5:d6:50:54:f4:f4:2c:7c:fc:61:7d:94:
c1:5f:54:88:52:3d:6c:e8:ba:cf:10:2f:02:5a:5b:
92:5e:47:be:a0:e7:0b:8a:f4:02:8c:ef:df:ce:3e:
66:da:63:2f:38:87:d7:78:64:7b:c4:ff:e4:3e:94:
d8:ef:7e:8f:5a:25:80:92:2d:49:9c:d9:c6:c5:b4:
72:8b:01:20:ec:87:f9:db:34:40:47:ee:bb:6c:d0:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:5C:83:C3:D5:27:58:01:9B:1D:0D:B1:0C:B5:1D:33:44:BF:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cf6dd20f-ad84-3b74-b780-ad933fa1db14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
162.211.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ad:20:c0:db:72:01:83:e4:e5:df:66:d3:9b:8c:62:12:53:
cc:a0:a5:ad:dc:63:1f:26:91:87:81:a0:c1:52:4f:45:25:31:
26:ab:f6:a8:d1:91:13:f2:2a:4d:51:ce:21:de:c7:46:32:bd:
aa:a1:44:28:8c:76:fa:d3:ec:87:b1:a5:7d:2d:92:5a:f5:4e:
9a:78:0a:66:ad:de:f9:af:74:bb:f5:fe:bb:6c:66:d4:38:ca:
16:09:ec:af:7c:81:82:26:f9:95:7a:77:15:15:9c:f7:b0:82:
58:23:37:f1:7d:5e:34:bc:49:d9:7c:a3:27:d2:61:16:91:38:
07:8c:27:0d:6a:49:3b:c7:03:6d:66:23:b6:2c:4f:0f:fb:d0:
fb:53:bd:3f:e6:3b:6e:d9:2e:b6:84:5e:8e:eb:59:70:58:de:
7b:d2:c6:9c:0a:d7:79:fd:0f:a4:22:ab:b2:60:e0:2c:38:8a:
ca:b0:d8:54:75:43:3e:eb:b1:4d:22:a4:a8:e8:7f:7c:8e:5b:
61:29:d2:5b:66:0d:99:fa:aa:6b:13:2e:2a:18:e7:1a:7f:7d:
c7:e9:f4:47:01:24:58:2d:ae:b4:fa:95:e2:7d:79:19:08:eb:
32:50:78:75:28:b8:41:d4:4d:de:b9:dd:4a:4a:63:e7:18:af:
81:a6:c3:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4byeeY1mk82AueHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTIyMDYwMTEyMDAwMFoXDTI4MDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGVhZDViYTAtMzE4My00NGIwLThkNzktZmJiYjZkN2Y0N2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklpmaAu0uABBgtGq4n17le3PfzQurvMrKF6/
K9JybtOONtU00x9LsC8VLvjdu3n+puSOPgyhyWnE2LeD8wQQCjqrQt948B164F4r
OHDNeFLH3pXVEZpQ7mCbsTXHpxojQfCpXQpB1L1GHGuBW8GL2OxgbUxOcioAZ9+8
qr/ONP5S7nmJkYogSGeoL8Lb/tZsU6vcL810mq10J4heUlEx7AmIl0dlEU7F1lBU
9PQsfPxhfZTBX1SIUj1s6LrPEC8CWluSXke+oOcLivQCjO/fzj5m2mMvOIfXeGR7
xP/kPpTY736PWiWAki1JnNnGxbRyiwEg7If52zRAR+67bNBmKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtWXIPD1SdYAZsdDbEMtR0zRL+qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2Y2ZGQyMGYtYWQ4NC0z
Yjc0LWI3ODAtYWQ5MzNmYTFkYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotPYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWtIMDbcgGD5OXfZtObjGISU8ygpa3cYx8mkYeBoMFST0UlMSar9qjR
kRPyKk1RziHex0YyvaqhRCiMdvrT7IexpX0tklr1Tpp4Cmat3vmvdLv1/rtsZtQ4
yhYJ7K98gYIm+ZV6dxUVnPewglgjN/F9XjS8Sdl8oyfSYRaROAeMJw1qSTvHA21m
I7YsTw/70PtTvT/mO27ZLraEXo7rWXBY3nvSxpwK13n9D6Qiq7Jg4Cw4isqw2FR1
Qz7rsU0ipKjof3yOW2Ep0ltmDZn6qmsTLioY5xp/fcfp9EcBJFgtrrT6leJ9eRkI
6zJQeHUouEHUTd653UpKY+cYr4GmwzE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org