Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/c55cf1d8-4f52-3823-ac79-f731bc72bac6.roa
File: c55cf1d8-4f52-3823-ac79-f731bc72bac6.roa (raw, json)
Hash identifier: EXESQfoTkU5DcnsFuXFRKZRl+tVuRY6HxON4TFr0ek0=
Subject key identifier: 5C:9D:68:33:79:07:37:27:E4:54:1A:AC:15:C3:A3:A6:53:48:5D:53
Certificate issuer: /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Certificate serial: 010D0C9F432858406040C2D941D6391158E6DEC0
Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/c55cf1d8-4f52-3823-ac79-f731bc72bac6.roa
Signing time: Tue 27 Dec 2022 17:06:30 +0000
ROA not before: Tue 27 Dec 2022 17:06:30 +0000
ROA not after: Mon 31 Mar 2025 04:00:00 +0000
asID: 55140
IP address blocks: 23.138.0.0/24 maxlen: 24
162.220.180.0/22 maxlen: 24
162.245.104.0/21 maxlen: 24
162.252.96.0/22 maxlen: 24
198.1.0.0/21 maxlen: 24
209.177.74.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:60:40:c2:d9:41:d6:39:11:58:e6:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Validity
Not Before: Dec 27 17:06:30 2022 GMT
Not After : Mar 31 04:00:00 2025 GMT
Subject: CN=7dd150ce-e3c1-4a46-9152-149cb21b597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:7e:31:9f:73:26:d5:e5:2e:00:1c:e3:62:
00:bd:43:c0:6c:69:4f:a8:b3:39:59:40:b1:40:84:
83:88:62:3f:34:f0:82:2f:8f:c7:d1:8f:94:26:25:
03:85:8c:12:ad:50:31:51:19:93:2f:03:26:3f:89:
3c:e0:05:31:e7:9a:ed:0b:ad:a9:b2:21:ca:84:8c:
68:38:18:78:5d:13:1d:e5:b9:c7:9d:f6:82:6f:14:
da:00:0d:ba:43:a2:3c:b4:ea:2c:45:00:5f:43:01:
3a:ad:ee:42:be:64:17:1d:46:6b:15:d5:13:c6:90:
2a:69:8d:7b:89:d7:26:68:36:ac:70:fa:3c:90:82:
fc:92:d4:55:86:06:3f:53:15:b1:8b:c5:f9:f9:c0:
af:6e:97:c9:04:16:6f:80:c9:01:05:05:e6:28:56:
75:2d:34:bc:c5:9a:87:0c:b9:4a:c9:22:3f:be:4a:
05:4b:17:af:01:41:f7:df:69:1a:9c:0c:bb:3b:48:
b9:ea:bf:40:24:1f:bb:c3:64:b5:50:b4:26:cd:60:
2f:f4:9f:44:6b:e0:71:1f:65:46:f9:19:5d:81:60:
f0:42:31:bc:97:5f:7a:10:ef:1f:d2:68:f0:f5:8f:
da:60:8a:94:a6:08:44:4c:e8:7d:4b:9a:be:9d:5c:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:68:33:79:07:37:27:E4:54:1A:AC:15:C3:A3:A6:53:48:5D:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/c55cf1d8-4f52-3823-ac79-f731bc72bac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl
X509v3 Authority Key Identifier:
keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.0.0/24
162.220.180.0/22
162.245.104.0/21
162.252.96.0/22
198.1.0.0/21
209.177.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4c:4b:66:3c:8e:9c:9c:8a:31:bf:19:f6:c2:f1:31:34:a9:
30:29:6f:23:4a:1d:24:15:17:24:05:a9:40:7a:99:c3:a8:d2:
12:97:ab:04:7e:f6:9b:fd:8d:bf:95:2f:f7:d1:66:59:b7:9d:
79:32:51:67:75:c7:52:1e:4d:2a:f3:bd:04:4e:e3:4b:ad:7c:
95:56:3e:21:29:62:e4:23:a8:b5:08:f4:b0:73:15:65:67:89:
18:93:08:32:51:d0:f4:4e:9c:bd:78:04:b2:e5:b9:a4:9a:e5:
30:3f:5a:a5:8a:af:1b:54:01:34:24:ce:2d:c2:aa:f6:1f:69:
0b:39:56:4a:f6:7c:35:dd:fc:93:fe:59:22:00:94:9a:80:39:
fe:1a:de:77:cb:21:df:7c:fa:da:0a:c5:42:40:01:6a:3b:5b:
40:7f:5d:f1:a4:f8:61:f9:35:09:99:0c:81:fe:f4:20:be:02:
ae:7f:70:67:c5:94:93:02:c9:41:e7:7e:c2:c2:da:ae:e0:aa:
fc:0e:2a:c1:fe:b8:b8:28:a6:12:c8:46:52:dd:b7:b6:89:d3:
3e:dc:09:2b:11:64:18:66:d8:94:51:86:23:3b:1a:0a:bf:ee:
70:5a:57:f7:2c:35:c9:6a:d3:28:e6:ae:bc:5b:88:29:ec:70:
6b:91:c9:9f
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEBgQMLZQdY5EVjm3sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTcwN2MyZGQtMjY0Ny00MTY0LWI0YjMtOWU3ZGExNDFk
NWU5MB4XDTIyMTIyNzE3MDYzMFoXDTI1MDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2RkMTUwY2UtZTNjMS00YTQ2LTkxNTItMTQ5Y2IyMWI1OTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDp+MZ9zJtXlLgAc42IAvUPAbGlPqLM5WUCx
QISDiGI/NPCCL4/H0Y+UJiUDhYwSrVAxURmTLwMmP4k84AUx55rtC62psiHKhIxo
OBh4XRMd5bnHnfaCbxTaAA26Q6I8tOosRQBfQwE6re5CvmQXHUZrFdUTxpAqaY17
idcmaDascPo8kIL8ktRVhgY/UxWxi8X5+cCvbpfJBBZvgMkBBQXmKFZ1LTS8xZqH
DLlKySI/vkoFSxevAUH332kanAy7O0i56r9AJB+7w2S1ULQmzWAv9J9Ea+BxH2VG
+RldgWDwQjG8l196EO8f0mjw9Y/aYIqUpghETOh9S5q+nVzfRwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFFydaDN5Bzcn5FQarBXDo6ZTSF1TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85NzA3
YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdkYTE0MWQ1ZTkvYzU1Y2YxZDgtNGY1Mi0z
ODIzLWFjNzktZjczMWJjNzJiYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTcwN2MyZGQtMjY0Ny00MTY0LWI0
YjMtOWU3ZGExNDFkNWU5Lzk3MDdjMmRkLTI2NDctNDE2NC1iNGIzLTllN2RhMTQx
ZDVlOS5jcmwwHwYDVR0jBBgwFoAUk1umtQlGETLURYU61Z0YQwTsBRkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85NzA3YzJkZC0yNjQ3LTQxNjQtYjRiMy05ZTdk
YTE0MWQ1ZTkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF4oAAwQC
oty0AwQDovVoAwQCovxgAwQDxgEAAwQB0bFKMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC1MS2Y8jpycijG/
GfbC8TE0qTApbyNKHSQVFyQFqUB6mcOo0hKXqwR+9pv9jb+VL/fRZlm3nXkyUWd1
x1IeTSrzvQRO40utfJVWPiEpYuQjqLUI9LBzFWVniRiTCDJR0PROnL14BLLluaSa
5TA/WqWKrxtUATQkzi3CqvYfaQs5Vkr2fDXd/JP+WSIAlJqAOf4a3nfLId98+toK
xUJAAWo7W0B/XfGk+GH5NQmZDIH+9CC+Aq5/cGfFlJMCyUHnfsLC2q7gqvwOKsH+
uLgophLIRlLdt7aJ0z7cCSsRZBhm2JRRhiM7Ggq/7nBaV/csNclq0yjmrrxbiCns
cGuRyZ8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org