Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/512af630-67dd-335d-87c8-5b80ea29efde.roa
File: 512af630-67dd-335d-87c8-5b80ea29efde.roa (raw, json)
Hash identifier: pl0YbLkSNHyaoGgK6efX2BrYbc0XVd58IXg6DO+KNjw=
Subject key identifier: 12:6E:F7:20:22:A9:07:78:D5:96:5B:BB:AC:7B:23:7C:1E:D0:B2:2B
Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Certificate serial: 010D0C9F43285840C4F5A1C6FCC8CE16A7F3D400
Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/512af630-67dd-335d-87c8-5b80ea29efde.roa
Signing time: Mon 23 Jan 2023 17:45:07 +0000
ROA not before: Mon 23 Jan 2023 17:45:07 +0000
ROA not after: Wed 26 Mar 2025 04:00:00 +0000
asID: 40805
IP address blocks: 208.96.176.0/21 maxlen: 24
208.96.188.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c4:f5:a1:c6:fc:c8:ce:16:a7:f3:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66
Validity
Not Before: Jan 23 17:45:07 2023 GMT
Not After : Mar 26 04:00:00 2025 GMT
Subject: CN=d2e808d8-e533-4b71-9d7d-4127d0e9ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:13:17:60:56:11:3c:51:a9:a2:dd:45:52:
24:35:35:40:b5:68:89:11:89:23:42:27:b5:a0:8a:
73:95:20:90:ee:ed:b0:33:21:8c:a4:12:70:75:8d:
3c:e1:16:e8:56:86:7f:a8:69:ee:c7:43:a8:03:7c:
df:de:a6:41:49:73:4e:5c:51:5f:75:0c:45:75:ec:
a8:e6:ec:ed:9f:2b:fe:60:02:5c:48:13:7e:4c:6e:
6a:6d:8e:84:22:c6:c8:46:2f:d1:16:6a:3f:a7:dd:
9a:d4:d2:ec:cc:61:18:59:e7:6b:59:7a:a0:8f:43:
d6:19:32:a7:0b:97:49:bc:fb:58:44:82:53:28:dd:
40:3d:77:6d:8b:0a:df:3a:16:82:4c:5d:09:b4:8d:
c2:ec:8b:4b:7c:fc:c6:24:22:bc:65:1d:04:7e:e4:
86:06:c1:9a:5c:70:6e:c4:36:16:ea:07:dd:77:e2:
39:08:95:95:c7:0a:69:d6:47:e9:7e:70:6a:b0:2b:
a2:de:36:ce:4e:c1:ae:e4:5b:94:73:95:5a:ba:44:
e6:5e:5a:7d:6b:63:58:f5:f3:3e:fd:25:02:a5:c4:
9c:a0:6f:18:3a:ae:f7:6e:99:a5:82:32:76:11:8d:
28:74:de:66:32:ce:dd:a6:7c:74:84:e3:b4:e7:0a:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:F7:20:22:A9:07:78:D5:96:5B:BB:AC:7B:23:7C:1E:D0:B2:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/512af630-67dd-335d-87c8-5b80ea29efde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl
X509v3 Authority Key Identifier:
keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer
sbgp-ipAddrBlock: critical
IPv4:
208.96.176.0/21
208.96.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:de:e7:b8:ef:f6:5f:b3:45:24:23:fd:0b:78:60:29:b3:b0:
dc:90:2f:fa:a5:95:8b:f8:e1:12:7a:31:33:65:66:2a:07:6a:
6e:ed:bc:18:a4:3a:68:fb:3c:85:53:b5:a2:26:17:55:98:6b:
90:09:59:51:dc:3e:81:cf:c0:88:f7:32:68:7e:ec:21:e1:33:
2b:24:0c:0e:77:37:01:e2:ee:76:1f:0d:a5:a8:15:85:93:c2:
72:02:b2:30:64:3a:fe:a8:7d:63:53:df:3f:9b:16:9c:10:cf:
83:91:4d:b5:78:ae:2a:b7:a3:f9:7d:d8:e4:e5:ca:cd:c4:e9:
e2:c4:8f:79:84:95:67:2a:4c:c1:05:83:52:f5:51:f2:e5:34:
1e:13:b8:5c:33:46:dc:4d:b6:39:9b:8b:25:b5:e4:bc:bf:50:
21:c3:0a:2f:68:2d:bb:cd:31:fe:a0:6f:68:7b:22:af:16:69:
c5:89:e5:89:ad:f6:17:64:dd:15:0d:f6:2d:e5:64:da:81:b4:
e7:a0:eb:f9:84:39:10:ab:ab:fb:7b:42:6c:79:14:b2:de:64:
e0:ee:8b:49:c8:d7:09:a7:82:da:8d:22:ec:88:05:31:9c:e1:
d1:e1:24:1b:3a:11:02:a1:5f:a4:00:ee:31:d6:75:a2:76:38:
dc:8a:a6:40
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEDE9aHG/MjOFqfz1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk
ZjY2MB4XDTIzMDEyMzE3NDUwN1oXDTI1MDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDJlODA4ZDgtZTUzMy00YjcxLTlkN2QtNDEyN2QwZTljY2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFsTF2BWETxRqaLdRVIkNTVAtWiJEYkjQie1
oIpzlSCQ7u2wMyGMpBJwdY084RboVoZ/qGnux0OoA3zf3qZBSXNOXFFfdQxFdeyo
5uztnyv+YAJcSBN+TG5qbY6EIsbIRi/RFmo/p92a1NLszGEYWedrWXqgj0PWGTKn
C5dJvPtYRIJTKN1APXdtiwrfOhaCTF0JtI3C7ItLfPzGJCK8ZR0EfuSGBsGaXHBu
xDYW6gfdd+I5CJWVxwpp1kfpfnBqsCui3jbOTsGu5FuUc5VaukTmXlp9a2NY9fM+
/SUCpcScoG8YOq73bpmlgjJ2EY0odN5mMs7dpnx0hOO05wov3QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBJu9yAiqQd41ZZbu6x7I3we0LIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk
MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvNTEyYWY2MzAtNjdkZC0z
MzVkLTg3YzgtNWI4MGVhMjllZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk
MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5
ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3
NGQ0OWRmNjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD0GCwAwQC
0GC8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEbe57jv9l+zRSQj/Qt4YCmzsNyQL/qllYv44RJ6MTNlZioH
am7tvBikOmj7PIVTtaImF1WYa5AJWVHcPoHPwIj3Mmh+7CHhMyskDA53NwHi7nYf
DaWoFYWTwnICsjBkOv6ofWNT3z+bFpwQz4ORTbV4riq3o/l92OTlys3E6eLEj3mE
lWcqTMEFg1L1UfLlNB4TuFwzRtxNtjmbiyW15Ly/UCHDCi9oLbvNMf6gb2h7Iq8W
acWJ5Ymt9hdk3RUN9i3lZNqBtOeg6/mEORCrq/t7Qmx5FLLeZODui0nI1wmngtqN
IuyIBTGc4dHhJBs6EQKhX6QA7jHWdaJ2ONyKpkA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org