Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/e702f215-aa6d-3918-9270-03e968d08777.roa
File: e702f215-aa6d-3918-9270-03e968d08777.roa (raw, json)
Hash identifier: KfeaROhkfdgsNmJgLtFpzVQR15kLJ4JLvHj66+otPOc=
Subject key identifier: 6E:2A:0B:9D:E1:6B:39:49:CF:D2:29:6B:F4:C5:6B:7F:63:55:3E:2C
Certificate issuer: /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial: 010D0C9F43285847152598D49547B9EC180B1600
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/e702f215-aa6d-3918-9270-03e968d08777.roa
Signing time: Mon 02 Sep 2024 17:07:41 +0000
ROA not before: Mon 02 Sep 2024 17:07:41 +0000
ROA not after: Sun 01 Dec 2024 18:07:41 +0000
asID: 9009
IP address blocks: 141.195.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 11 Sep 2024 17:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:15:25:98:d4:95:47:b9:ec:18:0b:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Validity
Not Before: Sep 2 17:07:41 2024 GMT
Not After : Dec 1 18:07:41 2024 GMT
Subject: CN=376fe906-3ee7-4f05-a0fd-09ed604becaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:62:52:9e:38:6e:c8:7b:45:fe:90:60:fc:
06:d7:3b:5f:9c:8f:83:04:71:7b:14:46:e5:7f:b1:
a5:9c:ff:e5:db:d5:6e:36:50:ed:a5:92:5b:d8:3b:
59:ea:91:82:38:bd:ff:1d:6a:7d:6b:e5:90:81:c0:
b5:aa:5e:7c:df:e6:54:8f:4a:d1:91:81:c9:ed:62:
cc:7a:3e:ff:1b:c9:a1:54:19:48:55:89:fe:e6:af:
42:48:b7:85:9d:6f:fc:c8:f1:31:d4:fa:41:53:18:
6b:1f:79:3e:55:ee:03:b4:a8:a2:3c:2f:1f:57:5c:
59:24:94:44:41:b4:19:0b:0b:07:76:8d:b7:5b:84:
12:2b:bf:ca:6a:c4:83:3f:cb:15:f5:e2:1f:5b:77:
fa:85:da:4f:a8:b9:82:94:53:21:15:7e:29:06:8b:
82:31:45:9d:4f:04:f4:60:be:b1:0c:b8:dd:d0:f3:
63:83:e7:92:4a:fc:ba:42:3e:3d:ca:61:53:29:1a:
59:68:0c:77:b2:1b:d5:0e:2d:1b:a3:ce:7d:15:4b:
0f:c9:a3:4f:97:82:3f:68:37:e6:36:5d:43:9b:f1:
87:ef:89:61:77:aa:f6:cb:b1:93:f0:44:d8:be:3b:
c4:11:2a:0b:06:6c:a0:3e:1b:b3:c9:08:fc:89:61:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:0B:9D:E1:6B:39:49:CF:D2:29:6B:F4:C5:6B:7F:63:55:3E:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/e702f215-aa6d-3918-9270-03e968d08777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
X509v3 Authority Key Identifier:
keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:a1:54:8b:be:e9:6e:cd:e5:c6:bd:56:ac:7f:08:e4:53:5e:
7d:e0:55:ff:1d:96:cb:46:6a:6b:65:da:f0:06:05:0f:ba:bf:
b9:52:b4:1d:ad:be:9d:ba:d8:70:6a:34:ce:2e:77:cb:e5:74:
15:63:c6:9e:21:d9:6c:84:be:e4:cc:0d:35:71:b9:2f:fe:f2:
ea:7d:56:75:d8:a7:80:3e:23:5e:09:bf:35:54:2c:00:49:94:
19:23:e3:a2:56:88:e1:0d:5f:21:0d:1c:1e:1e:cd:64:3e:d7:
59:e7:dd:80:7a:83:4c:82:72:54:ca:8d:6c:a7:4d:dd:e9:7e:
23:44:97:cd:89:b0:79:4c:f7:dc:e4:0c:a9:5c:4c:56:74:a0:
02:cf:bc:17:43:e0:a3:c4:ef:ab:95:56:22:4a:30:70:d6:4b:
08:1a:6c:1d:b0:f1:1a:8d:79:54:6c:a2:9e:e7:c2:e2:3b:e1:
78:42:04:65:3e:63:e8:d9:d0:84:de:c7:dc:f8:a7:1c:16:ba:
c7:83:02:25:f9:73:8d:55:0a:fa:e5:03:da:80:c8:99:f4:7a:
64:20:5c:da:0f:0d:b0:15:c4:66:08:b4:6a:41:07:5a:24:ce:
fb:47:2b:a1:5f:75:46:85:27:aa:a6:6e:13:02:50:de:8b:2a:
fc:8a:5b:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcVJZjUlUe57BgLFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmZDljODctOWRjOC00OGMyLTljN2QtZTcyNDEyYTM1
ZTVjMB4XDTI0MDkwMjE3MDc0MVoXDTI0MTIwMTE4MDc0MVowLzEtMCsGA1UEAxMk
Mzc2ZmU5MDYtM2VlNy00ZjA1LWEwZmQtMDllZDYwNGJlY2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHViUp44bsh7Rf6QYPwG1ztfnI+DBHF7FEbl
f7GlnP/l29VuNlDtpZJb2DtZ6pGCOL3/HWp9a+WQgcC1ql583+ZUj0rRkYHJ7WLM
ej7/G8mhVBlIVYn+5q9CSLeFnW/8yPEx1PpBUxhrH3k+Ve4DtKiiPC8fV1xZJJRE
QbQZCwsHdo23W4QSK7/KasSDP8sV9eIfW3f6hdpPqLmClFMhFX4pBouCMUWdTwT0
YL6xDLjd0PNjg+eSSvy6Qj49ymFTKRpZaAx3shvVDi0bo859FUsPyaNPl4I/aDfm
Nl1Dm/GH74lhd6r2y7GT8ETYvjvEESoLBmygPhuzyQj8iWFtKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4qC53hazlJz9Ipa/TFa39jVT4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZk
OWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0MTJhMzVlNWMvZTcwMmYyMTUtYWE2ZC0z
OTE4LTkyNzAtMDNlOTY4ZDA4Nzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjBmZDljODctOWRjOC00OGMyLTlj
N2QtZTcyNDEyYTM1ZTVjLzYwZmQ5Yzg3LTlkYzgtNDhjMi05YzdkLWU3MjQxMmEz
NWU1Yy5jcmwwHwYDVR0jBBgwFoAUNi3cZad6EHPmFuNH94D90YlnPrEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82MGZkOWM4Ny05ZGM4LTQ4YzItOWM3ZC1lNzI0
MTJhMzVlNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjcN4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEihVIu+6W7N5ca9Vqx/CORTXn3gVf8dlstGamtl2vAGBQ+6v7lStB2t
vp262HBqNM4ud8vldBVjxp4h2WyEvuTMDTVxuS/+8up9VnXYp4A+I14JvzVULABJ
lBkj46JWiOENXyENHB4ezWQ+11nn3YB6g0yCclTKjWynTd3pfiNEl82JsHlM99zk
DKlcTFZ0oALPvBdD4KPE76uVViJKMHDWSwgabB2w8RqNeVRsop7nwuI74XhCBGU+
Y+jZ0ITex9z4pxwWuseDAiX5c41VCvrlA9qAyJn0emQgXNoPDbAVxGYItGpBB1ok
zvtHK6FfdUaFJ6qmbhMCUN6LKvyKW6I=
-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org