Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/0a5bf808-e3d2-33f7-aece-1ca019a76756.roa
File: 0a5bf808-e3d2-33f7-aece-1ca019a76756.roa (raw, json)
Hash identifier: PCbzX/zX1h6V8ZJT9bsQ/1Az2YWMbIyfeakZsv2HhXI=
Subject key identifier: A7:E0:F4:24:CD:25:45:0F:94:58:21:6D:69:03:6C:5F:91:08:DF:46
Certificate issuer: /CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366
Certificate serial: 010D0C9F432858451E4599142EB7A1415A669B20
Authority key identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/0a5bf808-e3d2-33f7-aece-1ca019a76756.roa
Signing time: Wed 06 Mar 2024 14:00:31 +0000
ROA not before: Wed 06 Mar 2024 14:00:31 +0000
ROA not after: Tue 04 Jun 2024 13:00:31 +0000
asID: 22773
IP address blocks: 23.148.216.0/24 maxlen: 24
2607:2cc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 17 Mar 2024 10:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:1e:45:99:14:2e:b7:a1:41:5a:66:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366
Validity
Not Before: Mar 6 14:00:31 2024 GMT
Not After : Jun 4 13:00:31 2024 GMT
Subject: CN=914c1e9e-e627-47cc-a9e5-65c1ea6c0af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:70:b7:05:37:a1:28:8e:38:b8:ce:68:16:
54:81:27:60:68:77:a4:c0:3a:9d:7e:7b:40:f8:41:
54:7b:5b:4f:31:5e:61:c8:97:60:cb:70:61:50:18:
49:37:d1:c9:54:2a:6e:0b:82:19:b3:6e:5b:ff:f8:
11:53:1f:84:4c:52:cc:15:8a:e1:74:23:21:83:76:
9e:eb:d3:d2:05:f0:1b:ab:65:8d:43:fb:dc:d0:c4:
62:df:a0:8e:3f:8c:c9:a2:53:ad:e4:61:bb:66:2c:
ab:52:fd:a3:97:b0:63:25:e6:b5:90:e0:e4:a5:cd:
5a:ae:37:48:8f:89:03:bf:e0:e0:d3:7e:76:16:39:
11:74:db:2d:1a:b0:31:ec:8a:31:a3:e2:43:65:91:
8a:f8:68:cd:a2:37:27:9a:55:7e:0a:d9:cf:57:5e:
ec:bc:9b:1f:3d:dc:cd:bb:b6:2a:e3:15:45:31:97:
56:db:a9:4f:32:e1:2b:6e:66:8b:81:35:fb:12:df:
b7:fb:e4:6b:d8:e7:e0:6b:40:a0:f1:5c:b9:dc:ac:
08:8a:bd:59:09:cc:e3:8c:ff:01:63:8b:45:19:14:
cb:6f:be:d6:14:78:08:fd:0f:35:8e:d9:5f:af:2b:
fa:d7:60:be:0f:a6:fa:c5:f0:63:f0:95:84:3e:16:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:F4:24:CD:25:45:0F:94:58:21:6D:69:03:6C:5F:91:08:DF:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/0a5bf808-e3d2-33f7-aece-1ca019a76756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.crl
X509v3 Authority Key Identifier:
keyid:9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.216.0/24
IPv6:
2607:2cc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:eb:3f:f2:90:e1:c4:07:54:5e:c9:86:d8:e9:4a:ba:53:8d:
21:0c:4e:6c:b0:78:06:39:00:4d:e6:52:40:75:74:72:31:78:
4a:0c:37:20:48:d9:bb:3c:02:fb:50:28:f6:0a:42:34:78:79:
87:38:7c:42:bc:21:64:69:46:58:06:f0:77:b1:87:81:fb:21:
b9:97:f0:15:76:79:66:d8:c1:a6:ec:3e:05:d2:f5:b2:a2:24:
97:ff:cf:a8:59:3e:59:96:03:f9:78:28:7f:5b:c5:39:04:7f:
b4:cd:e1:c0:f2:65:49:8b:bf:30:5d:e8:57:d8:f1:23:07:05:
00:60:f1:4d:5f:58:ef:16:d8:56:30:44:2a:0f:17:d1:2a:e1:
30:bb:fe:2b:f2:6f:73:25:00:a0:19:52:85:cd:9c:e1:ae:ad:
2f:1b:6e:46:74:3d:74:12:0a:35:59:47:43:7d:67:28:cb:f4:
bd:db:7a:ce:9a:28:6b:46:21:b9:2b:c6:4e:07:e9:74:b7:c5:
86:d3:b5:05:fc:df:9b:82:1f:f6:92:6d:48:fd:4f:c3:f2:7a:
2b:f5:8e:20:7b:01:33:eb:59:b9:97:3a:90:70:cd:1f:0d:ac:
c6:05:67:b4:fe:b3:28:52:50:63:38:22:c3:87:04:f9:c6:ce:
5d:9e:4e:8b
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEUeRZkULrehQVpmmyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODgxODQ1MWUtMmIxNS00ZGU1LTg5ZjktZjNkMWNiNGQ3
MzY2MB4XDTI0MDMwNjE0MDAzMVoXDTI0MDYwNDEzMDAzMVowLzEtMCsGA1UEAxMk
OTE0YzFlOWUtZTYyNy00N2NjLWE5ZTUtNjVjMWVhNmMwYWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngpwtwU3oSiOOLjOaBZUgSdgaHekwDqdfntA
+EFUe1tPMV5hyJdgy3BhUBhJN9HJVCpuC4IZs25b//gRUx+ETFLMFYrhdCMhg3ae
69PSBfAbq2WNQ/vc0MRi36COP4zJolOt5GG7ZiyrUv2jl7BjJea1kODkpc1arjdI
j4kDv+Dg0352FjkRdNstGrAx7Ioxo+JDZZGK+GjNojcnmlV+CtnPV17svJsfPdzN
u7Yq4xVFMZdW26lPMuErbmaLgTX7Et+3++Rr2Ofga0Cg8Vy53KwIir1ZCczjjP8B
Y4tFGRTLb77WFHgI/Q81jtlfryv612C+D6b6xfBj8JWEPhZftQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFKfg9CTNJUUPlFghbWkDbF+RCN9GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ODE4
NDUxZS0yYjE1LTRkZTUtODlmOS1mM2QxY2I0ZDczNjYvMGE1YmY4MDgtZTNkMi0z
M2Y3LWFlY2UtMWNhMDE5YTc2NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODgxODQ1MWUtMmIxNS00ZGU1LTg5
ZjktZjNkMWNiNGQ3MzY2Lzg4MTg0NTFlLTJiMTUtNGRlNS04OWY5LWYzZDFjYjRk
NzM2Ni5jcmwwHwYDVR0jBBgwFoAUnnzwxi0ULX5tvnb2IOE+HZV7Ks0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ODE4NDUxZS0yYjE1LTRkZTUtODlmOS1mM2Qx
Y2I0ZDczNjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5TYMA0E
AgACMAcDBQAmByzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAG3rP/KQ4cQHVF7JhtjpSrpTjSEMTmyweAY5
AE3mUkB1dHIxeEoMNyBI2bs8AvtQKPYKQjR4eYc4fEK8IWRpRlgG8Hexh4H7IbmX
8BV2eWbYwabsPgXS9bKiJJf/z6hZPlmWA/l4KH9bxTkEf7TN4cDyZUmLvzBd6FfY
8SMHBQBg8U1fWO8W2FYwRCoPF9Eq4TC7/ivyb3MlAKAZUoXNnOGurS8bbkZ0PXQS
CjVZR0N9ZyjL9L3bes6aKGtGIbkrxk4H6XS3xYbTtQX835uCH/aSbUj9T8Pyeiv1
jiB7ATPrWbmXOpBwzR8NrMYFZ7T+syhSUGM4IsOHBPnGzl2eTos=
-----END CERTIFICATE-----
Generated at Sun Mar 17 11:18:50 2024 by rpki-client on console-fra.rpki-client.org