Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/47c75b19-8fec-32f5-a76e-31df6210fc85.roa
File: 47c75b19-8fec-32f5-a76e-31df6210fc85.roa (raw, json)
Hash identifier: mRgIONaNLnzKr4Mb6hMLYE0BKQDtghwApXx3w9KPSwY=
Subject key identifier: C2:4B:04:7D:5F:BF:7F:F5:74:8C:C2:19:F6:07:14:8D:37:B4:53:51
Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Certificate serial: 010D0C9F4328584632BE52BF24134DCF26A41C80
Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/47c75b19-8fec-32f5-a76e-31df6210fc85.roa
Signing time: Thu 13 Jun 2024 14:46:54 +0000
ROA not before: Thu 13 Jun 2024 14:46:54 +0000
ROA not after: Wed 11 Sep 2024 14:46:54 +0000
asID: 396261
IP address blocks: 128.163.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:32:be:52:bf:24:13:4d:cf:26:a4:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5
Validity
Not Before: Jun 13 14:46:54 2024 GMT
Not After : Sep 11 14:46:54 2024 GMT
Subject: CN=043964bf-fc06-4c39-90f9-7867d00762b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:c2:ec:e7:ed:fc:49:a8:4c:e1:90:56:1c:
80:cc:13:90:17:7e:31:a8:8e:bf:4c:12:30:23:7a:
e4:ff:69:48:11:7f:eb:a1:67:70:9c:e9:3a:37:ac:
4f:8c:98:96:20:d8:bb:e4:cb:99:16:b0:1c:ee:24:
4f:97:47:46:e3:e2:33:50:ba:0f:36:50:8b:58:66:
6f:d5:27:1d:32:3b:55:23:4c:90:64:13:79:42:e0:
fa:01:ee:f3:df:13:30:88:50:7e:cd:5c:ad:2b:3d:
73:41:7f:10:dc:ef:eb:17:c6:56:b9:ac:63:29:65:
54:9a:a8:54:7f:62:83:e8:95:26:9e:88:34:00:27:
c9:bd:d1:fc:0e:e9:08:c8:dc:d6:4b:73:b7:58:0d:
93:58:57:cc:cb:8b:4e:a7:de:26:8f:1f:79:57:03:
d5:ed:72:25:f2:c9:d8:7d:db:24:9d:31:6c:21:bc:
04:f4:b2:98:e0:ca:3d:c5:27:83:6f:7e:bd:0d:21:
ed:4e:4d:fd:f6:1f:d9:9a:42:39:cc:a5:a0:9a:ea:
1f:a4:92:f8:d2:2c:d6:d5:cd:65:ee:8a:b1:6c:e5:
35:71:72:28:92:81:77:95:61:b0:a5:f1:79:eb:02:
a2:b9:ec:40:68:f5:33:e0:ba:6f:2a:a8:83:77:f6:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:04:7D:5F:BF:7F:F5:74:8C:C2:19:F6:07:14:8D:37:B4:53:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/47c75b19-8fec-32f5-a76e-31df6210fc85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl
X509v3 Authority Key Identifier:
keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.163.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:88:96:d7:61:83:da:11:09:bd:2c:ca:99:8c:ae:ca:28:e2:
5d:6c:12:3b:0b:29:9e:0f:d5:2d:ae:7d:96:fa:50:2c:7f:96:
f9:bc:e9:af:84:77:d1:4f:98:e1:66:68:0f:e8:23:da:06:eb:
a3:d8:cf:6d:3a:b4:2b:ef:5a:d4:17:f7:cd:60:1c:c0:a1:f6:
96:43:4f:67:01:1f:30:08:84:27:7f:63:07:6c:69:07:93:de:
e3:21:f2:40:df:ef:71:c7:d0:f3:99:85:92:db:17:b5:9c:75:
49:3d:a5:f9:9b:78:c8:5e:74:12:f1:97:a6:d8:e9:32:94:dc:
49:e7:9d:ac:ac:23:27:6e:47:1c:92:43:10:60:c1:ac:88:00:
a2:05:70:a9:22:41:ec:51:de:b8:48:1d:0b:53:1e:fd:a5:17:
ec:84:42:ab:24:17:d2:37:48:32:52:85:16:20:98:c6:13:f1:
22:e2:0d:8b:7b:90:93:33:1c:70:94:8e:13:e1:54:f0:90:4b:
97:d6:a1:25:bb:92:40:10:a1:2c:e0:9e:fc:99:32:1e:a1:94:
76:42:ea:6f:6a:3d:e2:f8:19:ad:b4:1f:3e:d9:42:0b:ae:e6:
d7:f9:78:85:3b:ec:3a:c9:2f:91:8f:0a:99:21:0b:d5:b1:c6:
c5:e0:7a:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyvlK/JBNNzyakHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh
OWU1MB4XDTI0MDYxMzE0NDY1NFoXDTI0MDkxMTE0NDY1NFowLzEtMCsGA1UEAxMk
MDQzOTY0YmYtZmMwNi00YzM5LTkwZjktNzg2N2QwMDc2MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KfC7Oft/EmoTOGQVhyAzBOQF34xqI6/TBIw
I3rk/2lIEX/roWdwnOk6N6xPjJiWINi75MuZFrAc7iRPl0dG4+IzULoPNlCLWGZv
1ScdMjtVI0yQZBN5QuD6Ae7z3xMwiFB+zVytKz1zQX8Q3O/rF8ZWuaxjKWVUmqhU
f2KD6JUmnog0ACfJvdH8DukIyNzWS3O3WA2TWFfMy4tOp94mjx95VwPV7XIl8snY
fdsknTFsIbwE9LKY4Mo9xSeDb369DSHtTk399h/ZmkI5zKWgmuofpJL40izW1c1l
7oqxbOU1cXIokoF3lWGwpfF56wKiuexAaPUz4LpvKqiDd/YIgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJLBH1fv3/1dIzCGfYHFI03tFNRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw
ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvNDdjNzViMTktOGZlYy0z
MmY1LWE3NmUtMzFkZjYyMTBmYzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm
M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm
YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx
MGFmZmE5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgKPKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2Iltdhg9oRCb0sypmMrsoo4l1sEjsLKZ4P1S2ufZb6UCx/lvm86a+E
d9FPmOFmaA/oI9oG66PYz206tCvvWtQX981gHMCh9pZDT2cBHzAIhCd/YwdsaQeT
3uMh8kDf73HH0POZhZLbF7WcdUk9pfmbeMhedBLxl6bY6TKU3EnnnaysIyduRxyS
QxBgwayIAKIFcKkiQexR3rhIHQtTHv2lF+yEQqskF9I3SDJShRYgmMYT8SLiDYt7
kJMzHHCUjhPhVPCQS5fWoSW7kkAQoSzgnvyZMh6hlHZC6m9qPeL4Ga20Hz7ZQguu
5tf5eIU77DrJL5GPCpkhC9WxxsXgeo0=
-----END CERTIFICATE-----
Generated at Wed Aug 14 22:30:40 2024 by rpki-client on console-fra.rpki-client.org