Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42cd5b63-a9ed-3de9-88ec-3e9d6a7c2e62.roa
File: 42cd5b63-a9ed-3de9-88ec-3e9d6a7c2e62.roa (raw, json)
Hash identifier: ThMPv6xbsvjsv2TMhtCVuDY+mwYmdVZFc4yZAB2+Ryk=
Subject key identifier: 64:69:71:78:20:8B:6F:0F:F0:4B:D0:B4:43:4C:DA:F2:0D:A1:2F:24
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285845809B5DD2F658AD18328AAA00
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42cd5b63-a9ed-3de9-88ec-3e9d6a7c2e62.roa
Signing time: Wed 10 Apr 2024 19:22:35 +0000
ROA not before: Wed 10 Apr 2024 19:22:35 +0000
ROA not after: Tue 09 Jul 2024 19:22:35 +0000
asID: 399439
IP address blocks: 216.249.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 13:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:80:9b:5d:d2:f6:58:ad:18:32:8a:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 10 19:22:35 2024 GMT
Not After : Jul 9 19:22:35 2024 GMT
Subject: CN=7a7dc3ed-cb3d-467c-95ed-cea47b78bd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:bc:54:6a:ed:98:34:ed:77:26:d0:81:0e:
5e:7e:ce:37:3d:b5:f0:56:8d:5e:4a:0f:b4:8a:44:
a1:d9:e1:2d:01:4e:44:25:e9:f6:1a:98:fe:39:3d:
80:0f:9b:92:7e:fb:4e:0e:4a:95:84:66:3b:69:6f:
cc:bc:62:e3:17:03:44:1e:23:11:f4:bc:8e:52:d7:
a1:6c:6f:7c:67:ab:e5:1c:51:4e:a9:1f:4e:79:a1:
2b:d3:de:14:3e:3c:6c:4d:27:3f:cf:e6:d6:f3:84:
f9:ed:99:5c:c1:4f:fa:cd:3b:73:4b:b1:74:5f:a8:
6f:42:bf:b7:11:bf:c1:97:33:19:25:24:c5:b8:41:
e8:1a:45:32:e7:1b:b6:a8:93:fa:80:d5:1e:3d:68:
5b:c1:9a:2b:13:a1:3c:f0:e5:ed:5f:73:5b:20:28:
e6:c0:d2:18:6f:d8:4e:a1:b3:9f:f3:ab:d3:c5:d9:
92:7c:35:01:93:bc:b6:25:78:b3:a6:21:71:a8:d7:
a6:ab:93:e2:bb:78:07:6e:2e:78:62:b0:78:1e:a5:
44:73:51:d7:d6:15:28:cf:fc:e9:f4:cd:96:21:99:
d3:30:bf:e9:5b:9e:c4:8e:73:b6:b2:ca:6f:49:94:
42:23:fa:e9:ea:16:48:b6:f8:56:11:03:56:f9:01:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:71:78:20:8B:6F:0F:F0:4B:D0:B4:43:4C:DA:F2:0D:A1:2F:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/42cd5b63-a9ed-3de9-88ec-3e9d6a7c2e62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:c8:12:1f:37:81:b6:38:b6:09:36:b5:f4:3a:3d:9e:51:a6:
2b:cf:ef:2b:ee:89:24:a5:55:d5:5c:3a:53:38:34:de:02:82:
e6:5e:22:6b:17:9c:ff:6b:1f:9b:72:66:f0:74:e2:19:da:cf:
da:a2:8f:60:31:4e:a6:f5:b7:c4:87:4e:10:5e:15:48:a8:53:
d0:2f:d8:d1:8e:6b:b5:ce:5e:69:b7:6b:ce:1b:ac:7a:64:a4:
79:ce:30:3c:c1:36:4b:d1:1a:cc:29:b1:b3:7b:f3:bb:f3:af:
e8:4c:b5:4b:46:01:55:ab:8c:06:80:7f:4d:b9:cb:72:e3:be:
21:86:52:f0:5f:d8:4c:36:b5:23:b5:0e:1a:1f:27:3f:2d:2e:
1e:0b:37:3a:0f:ed:dd:a6:94:b0:1e:84:af:fc:de:8a:cf:2f:
9d:2d:71:dd:b1:24:61:54:97:65:b3:76:9c:24:9d:33:9a:c4:
5e:15:d8:79:40:22:3f:56:a0:09:ad:99:f2:d1:2d:e5:aa:50:
37:6e:8a:a8:5a:ed:40:10:d1:f2:8f:7d:c8:1a:dc:7d:41:e1:
1a:d4:00:00:a4:3f:22:57:84:1b:aa:e9:ec:9c:f4:c3:be:7e:
80:c6:05:21:8c:6b:d5:21:ec:7d:a3:41:f5:19:37:44:21:2e:
c1:30:48:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWAm13S9litGDKKqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI0MDQxMDE5MjIzNVoXDTI0MDcwOTE5MjIzNVowLzEtMCsGA1UEAxMk
N2E3ZGMzZWQtY2IzZC00NjdjLTk1ZWQtY2VhNDdiNzhiZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ye8VGrtmDTtdybQgQ5efs43PbXwVo1eSg+0
ikSh2eEtAU5EJen2Gpj+OT2AD5uSfvtODkqVhGY7aW/MvGLjFwNEHiMR9LyOUteh
bG98Z6vlHFFOqR9OeaEr094UPjxsTSc/z+bW84T57ZlcwU/6zTtzS7F0X6hvQr+3
Eb/BlzMZJSTFuEHoGkUy5xu2qJP6gNUePWhbwZorE6E88OXtX3NbICjmwNIYb9hO
obOf86vTxdmSfDUBk7y2JXizpiFxqNemq5Piu3gHbi54YrB4HqVEc1HX1hUoz/zp
9M2WIZnTML/pW57EjnO2sspvSZRCI/rp6hZItvhWEQNW+QE34wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGRpcXggi28P8EvQtENM2vINoS8kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNDJjZDViNjMtYTllZC0z
ZGU5LTg4ZWMtM2U5ZDZhN2MyZTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2PnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbIEh83gbY4tgk2tfQ6PZ5RpivP7yvuiSSlVdVcOlM4NN4CguZeImsX
nP9rH5tyZvB04hnaz9qij2AxTqb1t8SHThBeFUioU9Av2NGOa7XOXmm3a84brHpk
pHnOMDzBNkvRGswpsbN787vzr+hMtUtGAVWrjAaAf025y3LjviGGUvBf2Ew2tSO1
DhofJz8tLh4LNzoP7d2mlLAehK/83orPL50tcd2xJGFUl2WzdpwknTOaxF4V2HlA
Ij9WoAmtmfLRLeWqUDduiqha7UAQ0fKPfcga3H1B4RrUAACkPyJXhBuq6eyc9MO+
foDGBSGMa9Uh7H2jQfUZN0QhLsEwSJ8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org