Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/407221d9-02de-3f8c-9320-9a15fbb6cfc7.roa
File: 407221d9-02de-3f8c-9320-9a15fbb6cfc7.roa (raw, json)
Hash identifier: 4gHkXHDebmfcZ63s84mwxiCITYqBqxReSyIKbOD2vFo=
Subject key identifier: BB:A7:29:66:17:7A:B0:FA:6B:15:E5:FD:67:FA:E9:72:7B:77:83:A4
Certificate issuer: /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial: 010D0C9F43285842BE45E3C17331B712457D5AE0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/407221d9-02de-3f8c-9320-9a15fbb6cfc7.roa
Signing time: Tue 01 Aug 2023 19:09:40 +0000
ROA not before: Tue 01 Aug 2023 19:09:40 +0000
ROA not after: Mon 30 Oct 2023 19:09:40 +0000
asID: 16410
IP address blocks: 205.157.246.0/24 maxlen: 24
205.157.204.0/24 maxlen: 24
192.112.245.0/24 maxlen: 24
205.157.193.0/24 maxlen: 24
205.157.203.0/24 maxlen: 24
205.157.240.0/24 maxlen: 24
205.157.242.0/24 maxlen: 24
205.157.245.0/24 maxlen: 24
205.157.247.0/24 maxlen: 24
205.157.248.0/24 maxlen: 24
205.157.249.0/24 maxlen: 24
205.157.250.0/24 maxlen: 24
205.157.251.0/24 maxlen: 24
205.157.254.0/24 maxlen: 24
205.157.255.0/24 maxlen: 24
206.180.0.0/23 maxlen: 23
206.180.4.0/24 maxlen: 24
206.180.5.0/24 maxlen: 24
206.180.6.0/24 maxlen: 24
206.180.7.0/24 maxlen: 24
206.180.8.0/24 maxlen: 24
206.180.12.0/22 maxlen: 22
206.180.25.0/24 maxlen: 24
206.180.27.0/24 maxlen: 24
206.180.28.0/24 maxlen: 24
206.180.36.0/24 maxlen: 24
206.180.37.0/24 maxlen: 24
206.180.38.0/24 maxlen: 24
206.180.39.0/24 maxlen: 24
206.180.52.0/24 maxlen: 24
206.180.53.0/24 maxlen: 24
206.180.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:be:45:e3:c1:73:31:b7:12:45:7d:5a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Validity
Not Before: Aug 1 19:09:40 2023 GMT
Not After : Oct 30 19:09:40 2023 GMT
Subject: CN=a2ba5587-e2d4-43cf-a568-8cf912b55d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bf:4e:cd:21:44:93:b3:df:5a:f7:b0:ca:44:
6a:60:15:0b:95:07:03:20:48:bc:31:ad:23:30:72:
54:e3:4f:56:dd:5f:3b:a6:ce:c2:b9:74:8c:93:66:
d2:56:77:f0:00:b3:1e:70:48:10:76:b9:86:d9:9d:
62:d0:97:38:53:be:b8:81:9a:0d:28:e2:2a:f6:a8:
32:cc:cb:09:b8:01:bd:f4:23:67:a5:6b:ba:9a:2d:
c3:e5:3b:60:9a:50:c7:23:95:cc:3b:ed:a9:67:99:
42:c8:af:cf:57:7d:70:f6:f6:25:88:8e:7d:10:65:
b6:51:47:35:48:6b:61:bc:6c:51:c7:f2:81:a0:ee:
8e:9f:53:b4:30:46:51:11:2f:16:10:d6:28:2f:8e:
1c:57:df:a6:ce:ac:71:df:2c:11:d9:2d:76:5b:ac:
a1:5c:1a:24:c0:21:30:34:ae:20:38:cb:7d:f1:ff:
2d:f7:c1:46:b1:3b:66:81:06:ae:48:fe:51:98:d6:
2e:97:dc:5a:30:59:25:a7:c1:47:fa:f3:5e:54:1a:
2c:78:25:fb:8f:f4:1c:d8:4c:af:c3:b7:22:80:8a:
87:63:81:4e:b3:36:c1:04:0f:6d:da:64:f9:d9:fb:
f3:c4:9f:e9:76:f1:bf:79:08:62:0a:78:4c:93:62:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:29:66:17:7A:B0:FA:6B:15:E5:FD:67:FA:E9:72:7B:77:83:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/407221d9-02de-3f8c-9320-9a15fbb6cfc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
X509v3 Authority Key Identifier:
keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.112.245.0/24
205.157.193.0/24
205.157.203.0-205.157.204.255
205.157.240.0/24
205.157.242.0/24
205.157.245.0-205.157.251.255
205.157.254.0/23
206.180.0.0/23
206.180.4.0-206.180.8.255
206.180.12.0/22
206.180.25.0/24
206.180.27.0-206.180.28.255
206.180.36.0/22
206.180.52.0-206.180.54.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b4:33:48:f2:84:27:d0:74:2d:22:8f:f9:29:0d:dd:28:aa:
3c:c6:ab:8e:cb:c7:a2:4b:45:1a:87:bf:87:a0:10:83:e9:21:
2c:95:b6:be:31:95:4b:cf:5a:82:95:a7:80:ae:40:b4:98:16:
a5:79:86:82:da:33:fe:4d:30:14:92:bb:61:e3:3c:eb:24:e5:
44:68:94:6f:08:4e:33:97:55:39:4f:83:b0:99:4c:df:65:20:
d1:29:db:2e:29:5e:2b:94:e8:9d:8f:e6:2e:5d:5c:38:82:d6:
03:ef:0a:c1:02:d5:03:7a:de:40:3a:bf:2e:42:cf:5e:4e:c9:
69:5c:93:f4:92:91:3f:ff:0a:5e:a9:69:af:a2:78:0a:d8:76:
91:57:c3:da:14:cf:d6:15:53:59:29:c2:92:78:ad:bc:db:b3:
a3:7c:65:44:13:63:d0:27:dc:be:fd:bd:bc:74:45:28:dd:f7:
2c:b8:86:c8:91:5a:22:7b:60:e3:17:dc:51:0c:73:2e:f3:c8:
62:9b:4c:88:c7:e9:c4:cc:1a:29:26:21:43:a5:a6:01:58:92:
67:cb:6f:4a:85:4b:41:94:f5:ab:69:07:94:f6:af:8e:5d:d0:
8d:8e:51:d5:a6:c6:ca:f2:ca:5e:31:99:9b:a7:96:98:99:4e:
f2:4f:2a:19
-----BEGIN CERTIFICATE-----
MIIGvTCCBaWgAwIBAgIUAQ0Mn0MoWEK+RePBczG3EkV9WuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTIzMDgwMTE5MDk0MFoXDTIzMTAzMDE5MDk0MFowLzEtMCsGA1UEAxMk
YTJiYTU1ODctZTJkNC00M2NmLWE1NjgtOGNmOTEyYjU1ZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL9OzSFEk7PfWvewykRqYBULlQcDIEi8Ma0j
MHJU409W3V87ps7CuXSMk2bSVnfwALMecEgQdrmG2Z1i0Jc4U764gZoNKOIq9qgy
zMsJuAG99CNnpWu6mi3D5TtgmlDHI5XMO+2pZ5lCyK/PV31w9vYliI59EGW2UUc1
SGthvGxRx/KBoO6On1O0MEZRES8WENYoL44cV9+mzqxx3ywR2S12W6yhXBokwCEw
NK4gOMt98f8t98FGsTtmgQauSP5RmNYul9xaMFklp8FH+vNeVBoseCX7j/Qc2Eyv
w7cigIqHY4FOszbBBA9t2mT52fvzxJ/pdvG/eQhiCnhMk2KTDQIDAQABo4IDzzCC
A8swHQYDVR0OBBYEFLunKWYXerD6axXl/Wf66XJ7d4OkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvNDA3MjIxZDktMDJkZS0z
ZjhjLTkzMjAtOWExNWZiYjZjZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAMEAMBw
9QMEAM2dwTAMAwQAzZ3LAwQAzZ3MAwQAzZ3wAwQAzZ3yMAwDBADNnfUDBALNnfgD
BAHNnf4DBAHOtAAwDAMEAs60BAMEAM60CAMEAs60DAMEAM60GTAMAwQAzrQbAwQA
zrQcAwQCzrQkMAwDBALOtDQDBADOtDYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfLQzSPKEJ9B0LSKP+SkN
3SiqPMarjsvHoktFGoe/h6AQg+khLJW2vjGVS89agpWngK5AtJgWpXmGgtoz/k0w
FJK7YeM86yTlRGiUbwhOM5dVOU+DsJlM32Ug0SnbLileK5TonY/mLl1cOILWA+8K
wQLVA3reQDq/LkLPXk7JaVyT9JKRP/8KXqlpr6J4Cth2kVfD2hTP1hVTWSnCknit
vNuzo3xlRBNj0Cfcvv29vHRFKN33LLiGyJFaIntg4xfcUQxzLvPIYptMiMfpxMwa
KSYhQ6WmAViSZ8tvSoVLQZT1q2kHlPavjl3QjY5R1abGyvLKXjGZm6eWmJlO8k8q
GQ==
-----END CERTIFICATE-----
Generated at Wed Oct 11 18:15:31 2023 by rpki-client on console-ams.rpki-client.org