Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ce8de171-4a57-3e68-8f92-9886f6d230fe.roa
File: ce8de171-4a57-3e68-8f92-9886f6d230fe.roa (raw, json)
Hash identifier: tTSG0PKb2lxjPjVciuNySbN2ZFeOdCImhpOlYIw60wU=
Subject key identifier: 29:CF:9C:7D:6C:BB:D5:FA:32:70:AB:50:60:31:8C:E1:CF:17:CC:A0
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285847520B20B4E752641454DEB380
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ce8de171-4a57-3e68-8f92-9886f6d230fe.roa
Signing time: Tue 24 Sep 2024 12:38:39 +0000
ROA not before: Tue 24 Sep 2024 12:38:39 +0000
ROA not after: Mon 23 Dec 2024 13:38:39 +0000
asID: 16509
IP address blocks: 216.24.226.0/24 maxlen: 24
216.24.227.0/24 maxlen: 24
216.24.228.0/24 maxlen: 24
216.24.229.0/24 maxlen: 24
216.24.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:52:0b:20:b4:e7:52:64:14:54:de:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Sep 24 12:38:39 2024 GMT
Not After : Dec 23 13:38:39 2024 GMT
Subject: CN=25f581e8-1fd5-4d50-9d4b-3e07a3f1f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:62:6c:66:50:f8:e4:7f:97:b8:77:29:eb:
d3:64:e5:76:ef:16:a8:74:39:12:82:52:59:ed:7b:
d0:ed:35:98:c0:fb:df:e8:e5:c5:ce:5b:9d:4f:2b:
4e:17:32:fd:36:fb:51:b3:d2:03:11:84:07:3a:14:
61:69:54:7c:6c:f4:91:a8:3b:08:bb:89:da:a2:8c:
9a:85:a6:0b:04:ab:45:d4:8e:eb:92:1d:b2:d7:9c:
dd:1b:4d:32:f7:d1:07:0d:9c:cf:5a:95:48:98:9d:
0c:51:a6:d1:f7:79:ac:34:cb:08:8c:bc:e5:65:04:
5e:95:e1:85:ef:b0:c8:10:42:03:f9:9e:7b:bd:cb:
7f:2e:67:d1:97:dd:ca:72:ac:1a:b5:bc:a7:13:f5:
6d:a0:74:a7:5b:9a:a6:7c:07:3d:74:34:1c:ee:36:
84:17:eb:bb:f1:7b:fc:47:66:31:5e:6e:89:bb:02:
42:3a:e5:a6:9e:5b:41:54:54:c8:55:49:e7:f2:48:
61:d5:e4:e3:51:83:ff:f6:38:97:d9:77:9c:c4:31:
55:7b:aa:3f:87:04:7a:36:4e:ac:f4:ff:cc:18:0a:
e6:07:b3:74:80:72:03:4b:24:62:06:4f:95:e7:c9:
bf:ad:24:46:53:e1:fb:30:fe:36:e5:4f:df:49:32:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:9C:7D:6C:BB:D5:FA:32:70:AB:50:60:31:8C:E1:CF:17:CC:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/ce8de171-4a57-3e68-8f92-9886f6d230fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.226.0-216.24.229.255
216.24.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:91:bd:3a:43:dd:76:23:51:29:94:9a:d9:72:43:25:66:88:
61:e9:31:1a:f6:66:81:7e:6b:f6:a8:9a:4e:7c:c2:0e:62:9e:
8d:70:ae:08:78:90:91:b0:e8:89:f9:d0:c0:a1:5a:a6:fc:6a:
45:66:c8:95:22:78:a1:01:61:b1:c6:d5:07:7e:a8:8c:d3:f5:
bd:3f:05:7c:90:37:81:03:b2:f2:b4:c7:25:f2:bd:71:7d:ab:
65:32:c1:81:4a:cf:c7:1e:08:2c:84:64:38:23:1e:ae:38:32:
07:71:75:9b:45:57:9c:62:95:1c:8b:02:7a:3b:b7:8d:c6:0c:
60:e6:51:d7:69:88:ce:d8:25:d4:d2:40:d1:1e:81:40:26:29:
2b:f0:58:7c:f1:b0:6c:65:e4:8b:0b:06:56:63:61:df:db:19:
3b:fa:8a:77:1b:6b:1d:33:0d:07:d2:0e:e7:22:0f:1f:6a:92:
79:88:29:dd:62:5d:f7:b8:9e:68:09:e8:bb:6f:14:37:93:69:
32:f0:f4:13:20:32:83:5f:c5:fc:70:9a:ad:32:76:b9:65:b9:
8d:4b:46:fe:7b:6c:06:f7:8e:29:b5:c5:3a:f8:28:b5:bc:86:
9c:ef:1c:44:33:5c:f2:d1:23:67:9c:c9:8b:c6:3d:d9:2f:6f:
0e:e7:c0:37
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEdSCyC051JkFFTes4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxY2I2YWQtNmNkNi00NTgxLWE1YWMtNWE2ZmQ3NDQ5
NWM5MB4XDTI0MDkyNDEyMzgzOVoXDTI0MTIyMzEzMzgzOVowLzEtMCsGA1UEAxMk
MjVmNTgxZTgtMWZkNS00ZDUwLTlkNGItM2UwN2EzZjFmNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuVibGZQ+OR/l7h3KevTZOV27xaodDkSglJZ
7XvQ7TWYwPvf6OXFzludTytOFzL9NvtRs9IDEYQHOhRhaVR8bPSRqDsIu4naooya
haYLBKtF1I7rkh2y15zdG00y99EHDZzPWpVImJ0MUabR93msNMsIjLzlZQReleGF
77DIEEID+Z57vct/LmfRl93KcqwatbynE/VtoHSnW5qmfAc9dDQc7jaEF+u78Xv8
R2YxXm6JuwJCOuWmnltBVFTIVUnn8khh1eTjUYP/9jiX2XecxDFVe6o/hwR6Nk6s
9P/MGArmB7N0gHIDSyRiBk+V58m/rSRGU+H7MP425U/fSTJhxQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFCnPnH1su9X6MnCrUGAxjOHPF8ygMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NzFj
YjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZmZDc0NDk1YzkvY2U4ZGUxNzEtNGE1Ny0z
ZTY4LThmOTItOTg4NmY2ZDIzMGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODcxY2I2YWQtNmNkNi00NTgxLWE1
YWMtNWE2ZmQ3NDQ5NWM5Lzg3MWNiNmFkLTZjZDYtNDU4MS1hNWFjLTVhNmZkNzQ0
OTVjOS5jcmwwHwYDVR0jBBgwFoAUntBlR2d0sGuDPxz+dPUN9EuFl7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84NzFjYjZhZC02Y2Q2LTQ1ODEtYTVhYy01YTZm
ZDc0NDk1YzkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHYGOID
BAHYGOQDBADYGO8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEADJG9OkPddiNRKZSa2XJDJWaIYekxGvZmgX5r
9qiaTnzCDmKejXCuCHiQkbDoifnQwKFapvxqRWbIlSJ4oQFhscbVB36ojNP1vT8F
fJA3gQOy8rTHJfK9cX2rZTLBgUrPxx4ILIRkOCMerjgyB3F1m0VXnGKVHIsCeju3
jcYMYOZR12mIztgl1NJA0R6BQCYpK/BYfPGwbGXkiwsGVmNh39sZO/qKdxtrHTMN
B9IO5yIPH2qSeYgp3WJd97ieaAnou28UN5NpMvD0EyAyg1/F/HCarTJ2uWW5jUtG
/ntsBveOKbXFOvgotbyGnO8cRDNc8tEjZ5zJi8Y92S9vDufANw==
-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:35 2024 by rpki-client on console-fra.rpki-client.org