Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/2db2540a-c91f-3421-985b-093c00e390c1.roa
File: 2db2540a-c91f-3421-985b-093c00e390c1.roa (raw, json)
Hash identifier: I4f+My7N2Z0FPT207gw/v/A1eqRlxXVvCuG5VFi0UVU=
Subject key identifier: 90:FA:0C:87:49:AA:6C:D3:B4:90:C0:A0:E3:D9:4A:22:AF:BE:47:E6
Certificate issuer: /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial: 010D0C9F432858439A7F089A6A9E0161D298BFC0
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/2db2540a-c91f-3421-985b-093c00e390c1.roa
Signing time: Thu 19 Oct 2023 16:22:39 +0000
ROA not before: Thu 19 Oct 2023 16:22:39 +0000
ROA not after: Wed 17 Jan 2024 17:22:39 +0000
asID: 16509
IP address blocks: 158.26.56.0/21 maxlen: 21
158.26.168.0/21 maxlen: 21
158.26.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:9a:7f:08:9a:6a:9e:01:61:d2:98:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
Validity
Not Before: Oct 19 16:22:39 2023 GMT
Not After : Jan 17 17:22:39 2024 GMT
Subject: CN=bbcf5bd8-e19e-4b45-998f-69c67b923516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:02:09:f7:d6:6a:40:70:87:37:6c:c6:0d:
b5:7b:6b:af:f3:5f:d9:72:44:b3:56:d5:6a:3a:e2:
7a:d0:bd:67:66:c1:2d:5f:c9:8a:31:36:51:db:d0:
62:fa:c3:61:da:33:44:4b:e3:7d:21:45:40:3c:25:
95:a9:c5:a2:83:00:13:47:7c:f1:0e:ed:8d:1c:33:
df:28:5a:f2:a2:de:d4:45:ba:8f:5e:09:89:1b:4c:
8d:79:df:32:1f:7f:ee:7e:ba:58:a6:b7:16:fa:b0:
ef:2a:d8:f6:bd:77:38:8d:92:fa:35:67:1a:3d:30:
60:18:ae:e4:91:c0:fe:cb:c7:40:00:96:4f:80:26:
b2:30:7d:9d:a3:12:9c:41:93:d0:b9:66:d4:c5:45:
7b:13:46:cc:8f:cd:2d:2d:90:6c:bb:f7:5d:16:5b:
96:a5:83:b7:cd:eb:aa:45:b1:2d:1b:9b:35:d8:53:
99:98:ab:53:15:9f:58:3d:41:28:0e:04:78:88:d2:
8c:42:14:f2:c9:5d:dd:71:02:b6:a2:99:d5:82:4a:
53:70:c3:09:6e:50:87:9b:37:38:bf:f9:de:6d:d9:
19:5a:77:7c:39:3c:a9:c1:7b:80:b7:86:6a:d2:01:
41:3c:81:06:b8:af:59:d6:23:86:91:4c:5d:9a:26:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FA:0C:87:49:AA:6C:D3:B4:90:C0:A0:E3:D9:4A:22:AF:BE:47:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/2db2540a-c91f-3421-985b-093c00e390c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
X509v3 Authority Key Identifier:
keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.26.56.0/21
158.26.168.0/21
158.26.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:24:6c:ea:ce:59:b3:cb:12:e2:16:d8:72:c0:85:61:71:cc:
19:97:4f:c2:cc:8b:a1:73:70:c4:1b:fb:fe:9a:60:2a:51:e3:
44:10:7b:7c:b9:72:65:ba:4a:78:17:d2:ab:1e:d6:38:4a:71:
8d:c3:31:fc:9f:4c:92:6f:03:7e:89:64:84:4b:eb:12:cb:a7:
2b:11:74:b8:a3:5c:2f:3d:35:e9:37:76:4f:43:24:91:07:dc:
54:46:0d:b6:25:81:a8:23:59:b0:d8:8f:4c:16:96:e9:e2:09:
3a:f8:62:f7:49:d7:f0:c9:70:5a:83:54:d2:07:8e:5c:90:b4:
0a:7f:39:72:d6:23:9e:a2:4d:a3:52:bb:79:6f:05:a1:ea:43:
9d:b0:20:30:c1:bc:09:94:d7:e6:b3:68:3d:2f:ed:12:79:13:
d9:4d:61:63:a7:ad:6d:81:91:f3:e5:24:69:35:22:aa:58:00:
12:f5:8a:01:29:13:ad:27:23:5d:10:82:a1:81:06:d9:82:5e:
7b:55:30:ba:62:7f:eb:43:c6:05:fc:64:f4:2d:20:08:d9:fb:
c9:c4:59:72:68:f6:67:af:52:e8:85:60:44:24:7d:8a:81:a6:
f0:38:ec:02:20:f9:07:4f:44:78:42:d1:b0:1c:56:1e:4c:99:
7d:53:98:98
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEOafwiaap4BYdKYv8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1
ZGIyMB4XDTIzMTAxOTE2MjIzOVoXDTI0MDExNzE3MjIzOVowLzEtMCsGA1UEAxMk
YmJjZjViZDgtZTE5ZS00YjQ1LTk5OGYtNjljNjdiOTIzNTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg0CCffWakBwhzdsxg21e2uv81/ZckSzVtVq
OuJ60L1nZsEtX8mKMTZR29Bi+sNh2jNES+N9IUVAPCWVqcWigwATR3zxDu2NHDPf
KFryot7URbqPXgmJG0yNed8yH3/ufrpYprcW+rDvKtj2vXc4jZL6NWcaPTBgGK7k
kcD+y8dAAJZPgCayMH2doxKcQZPQuWbUxUV7E0bMj80tLZBsu/ddFluWpYO3zeuq
RbEtG5s12FOZmKtTFZ9YPUEoDgR4iNKMQhTyyV3dcQK2opnVgkpTcMMJblCHmzc4
v/nebdkZWnd8OTypwXuAt4Zq0gFBPIEGuK9Z1iOGkUxdmibrywIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFJD6DIdJqmzTtJDAoOPZSiKvvkfmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2
NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvMmRiMjU0MGEtYzkxZi0z
NDIxLTk4NWItMDkzYzAwZTM5MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDVhNjU0ZjUtNDMwNi00MmY4LWE1
NDctMGEyMTI2NWQ1ZGIyLzA1YTY1NGY1LTQzMDYtNDJmOC1hNTQ3LTBhMjEyNjVk
NWRiMi5jcmwwHwYDVR0jBBgwFoAUcqZ1c3d2/kvn4Dnlhd2Pwvp/3WMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIx
MjY1ZDVkYjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDnho4AwQD
nhqoAwQDnhrYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGskbOrOWbPLEuIW2HLAhWFxzBmXT8LMi6FzcMQb
+/6aYCpR40QQe3y5cmW6SngX0qse1jhKcY3DMfyfTJJvA36JZIRL6xLLpysRdLij
XC89Nek3dk9DJJEH3FRGDbYlgagjWbDYj0wWluniCTr4YvdJ1/DJcFqDVNIHjlyQ
tAp/OXLWI56iTaNSu3lvBaHqQ52wIDDBvAmU1+azaD0v7RJ5E9lNYWOnrW2BkfPl
JGk1IqpYABL1igEpE60nI10QgqGBBtmCXntVMLpif+tDxgX8ZPQtIAjZ+8nEWXJo
9mevUuiFYEQkfYqBpvA47AIg+QdPRHhC0bAcVh5MmX1TmJg=
-----END CERTIFICATE-----
Generated at Mon Oct 23 15:16:39 2023 by rpki-client on console-ams.rpki-client.org