Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/3aaaebc7-d526-3ef1-95d9-3c9e7bf1bab1.roa
File: 3aaaebc7-d526-3ef1-95d9-3c9e7bf1bab1.roa (raw, json)
Hash identifier: 10UDmKvtQjY8K6d3RHGhSLrfcT2/2fXpM0Ed66FO/jA=
Subject key identifier: 20:50:7C:29:C3:95:88:A2:31:0A:D2:26:58:F0:5A:7F:D8:A7:D6:D6
Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial: 010D0C9F432858465CB9773452AF3FC697DD2C00
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/3aaaebc7-d526-3ef1-95d9-3c9e7bf1bab1.roa
Signing time: Fri 28 Jun 2024 15:41:04 +0000
ROA not before: Fri 28 Jun 2024 15:41:04 +0000
ROA not after: Thu 26 Sep 2024 15:41:04 +0000
asID: 6762
IP address blocks: 141.195.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Aug 2024 16:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:5c:b9:77:34:52:af:3f:c6:97:dd:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Validity
Not Before: Jun 28 15:41:04 2024 GMT
Not After : Sep 26 15:41:04 2024 GMT
Subject: CN=d5588eab-e201-441d-98e7-1b5b4acbd13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:1d:fb:ee:72:8f:a5:7d:61:95:99:be:3b:
e9:bf:90:bc:c6:d9:cc:1d:0a:b5:57:7c:c5:b0:ec:
6c:3d:d5:73:0b:91:fa:60:cf:ca:68:f2:2d:f0:70:
3a:c7:ac:cd:ff:fb:b4:00:01:27:35:37:f7:39:30:
b5:1f:96:bd:6f:93:ec:fb:7f:b0:ad:c9:69:d1:8e:
da:16:91:79:c9:c9:3f:0c:16:27:d1:a4:2a:ed:fb:
7a:cb:62:32:28:5e:e8:22:19:fb:e6:5c:41:a9:7a:
44:1b:d7:9c:b2:69:d7:ab:29:dd:c1:e0:af:9a:ba:
d4:53:9b:a0:6c:16:5a:ae:c0:b2:a0:38:b2:28:1b:
54:79:c5:60:a7:37:ac:eb:66:bb:e3:2c:cc:00:af:
8b:72:3a:fc:19:a9:44:69:c5:8a:9d:ce:d6:bf:86:
3f:46:6c:cc:31:df:3a:a7:44:4d:2f:dc:2a:fb:7c:
49:74:7b:9c:5b:e6:d6:8c:40:58:9f:db:c2:36:63:
76:77:bc:12:19:a7:a3:71:45:61:b3:9d:4f:2d:f8:
ae:cd:40:3b:bc:0d:f3:b8:c5:33:f9:83:73:22:d5:
75:75:8e:45:e0:99:44:64:9e:07:b7:25:1b:ca:d2:
ad:d2:d4:b6:16:da:5a:80:f0:3c:e2:9b:19:6d:68:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:50:7C:29:C3:95:88:A2:31:0A:D2:26:58:F0:5A:7F:D8:A7:D6:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/3aaaebc7-d526-3ef1-95d9-3c9e7bf1bab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
X509v3 Authority Key Identifier:
keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:ba:e7:a3:bf:50:ac:5d:bc:f8:d4:8d:ed:49:47:f7:d2:e9:
9c:50:0d:53:b8:11:61:0f:97:e2:63:98:87:74:c2:14:37:06:
e2:7f:14:96:f7:86:6b:94:f3:c4:b3:29:89:ba:a8:c4:53:f2:
da:0d:f0:df:53:5c:50:44:75:e0:8f:bd:30:c0:45:90:1a:e7:
62:9a:7e:c7:0f:e4:cb:48:a3:4a:57:6c:04:84:a6:65:86:b9:
65:83:f0:fa:75:3e:dd:04:e9:17:fa:0d:81:fb:89:14:68:0b:
e4:16:3b:7c:91:1b:65:f4:83:da:85:f2:a5:2e:c8:e6:24:89:
53:e6:95:10:4d:76:d1:47:64:71:78:3e:1f:98:d7:ef:2f:75:
e6:8a:b4:e3:c0:25:f4:1d:05:1f:d3:01:87:46:9c:49:6d:2f:
2d:41:d2:5f:2b:29:e5:8f:d2:e3:64:bc:e1:d4:4e:0e:03:81:
c9:69:90:f9:68:fd:6a:68:d0:d2:18:b9:2e:ed:b6:86:fa:ec:
52:0a:76:23:17:ae:fb:b7:f5:9b:c8:25:76:41:5d:5d:59:b4:
c4:27:94:08:ad:6f:02:2f:9c:6d:1b:5a:40:6f:f8:2b:66:b4:
f9:eb:6b:d9:01:79:6e:b2:02:35:00:b7:ff:4d:63:0d:1b:de:
94:a8:0b:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZcuXc0Uq8/xpfdLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1
ZTVjMB4XDTI0MDYyODE1NDEwNFoXDTI0MDkyNjE1NDEwNFowLzEtMCsGA1UEAxMk
ZDU1ODhlYWItZTIwMS00NDFkLTk4ZTctMWI1YjRhY2JkMTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT0d++5yj6V9YZWZvjvpv5C8xtnMHQq1V3zF
sOxsPdVzC5H6YM/KaPIt8HA6x6zN//u0AAEnNTf3OTC1H5a9b5Ps+3+wrclp0Y7a
FpF5yck/DBYn0aQq7ft6y2IyKF7oIhn75lxBqXpEG9ecsmnXqyndweCvmrrUU5ug
bBZarsCyoDiyKBtUecVgpzes62a74yzMAK+Lcjr8GalEacWKnc7Wv4Y/RmzMMd86
p0RNL9wq+3xJdHucW+bWjEBYn9vCNmN2d7wSGaejcUVhs51PLfiuzUA7vA3zuMUz
+YNzItV1dY5F4JlEZJ4HtyUbytKt0tS2FtpagPA84psZbWhevQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBQfCnDlYiiMQrSJljwWn/Yp9bWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk
OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvM2FhYWViYzctZDUyNi0z
ZWYxLTk1ZDktM2M5ZTdiZjFiYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj
N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz
NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0
MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq656O/UKxdvPjUje1JR/fS6ZxQDVO4EWEPl+JjmId0whQ3BuJ/FJb3
hmuU88SzKYm6qMRT8toN8N9TXFBEdeCPvTDARZAa52KafscP5MtIo0pXbASEpmWG
uWWD8Pp1Pt0E6Rf6DYH7iRRoC+QWO3yRG2X0g9qF8qUuyOYkiVPmlRBNdtFHZHF4
Ph+Y1+8vdeaKtOPAJfQdBR/TAYdGnEltLy1B0l8rKeWP0uNkvOHUTg4DgclpkPlo
/Wpo0NIYuS7ttob67FIKdiMXrvu39ZvIJXZBXV1ZtMQnlAitbwIvnG0bWkBv+Ctm
tPnra9kBeW6yAjUAt/9NYw0b3pSoC8U=
-----END CERTIFICATE-----
Generated at Wed Aug 21 19:59:36 2024 by rpki-client on console-ams.rpki-client.org