Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/911b829c-a2f9-3515-a47d-861d0c922864.roa
File: 911b829c-a2f9-3515-a47d-861d0c922864.roa (raw, json)
Hash identifier: WMQ9i2498bAxROVXdXltGa+VnPoCovTqf7idxkol28s=
Subject key identifier: 44:0E:F7:A9:7A:72:A5:B0:F6:7E:EF:FC:40:C3:80:D9:58:C3:05:7F
Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial: 010D0C9F43285843FA890270524D3B2CBB8BA900
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/911b829c-a2f9-3515-a47d-861d0c922864.roa
Signing time: Thu 23 Nov 2023 02:00:16 +0000
ROA not before: Thu 23 Nov 2023 02:00:16 +0000
ROA not after: Wed 21 Feb 2024 02:00:16 +0000
asID: 397453
IP address blocks: 45.138.164.0/22 maxlen: 24
137.83.60.0/22 maxlen: 24
141.193.238.0/24 maxlen: 24
159.112.224.0/21 maxlen: 24
161.38.160.0/20 maxlen: 24
199.103.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:fa:89:02:70:52:4d:3b:2c:bb:8b:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Validity
Not Before: Nov 23 02:00:16 2023 GMT
Not After : Feb 21 02:00:16 2024 GMT
Subject: CN=41890152-a5e0-48f3-b5f5-091c8dac94cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:cb:cc:72:e3:ef:bb:9e:f8:d7:c2:e7:c0:
3c:43:6b:2c:1d:0d:13:2e:e3:3a:f5:82:9e:2f:17:
3c:d7:a9:c3:78:14:11:3c:e3:1a:cb:ba:98:4a:5b:
aa:7e:f8:36:ce:84:16:cc:67:6f:9b:a2:87:22:70:
ad:b0:10:dd:8e:b7:39:3e:a6:45:3c:eb:2d:75:5f:
72:5e:05:c2:fd:a0:7e:71:fd:f2:90:8e:48:5f:94:
6b:c1:c5:bd:dd:79:49:d4:7b:47:cb:dd:34:14:bc:
1a:a2:90:b0:06:a4:e5:55:8d:d1:ff:ed:67:bd:aa:
c0:52:ee:27:cc:1f:03:c4:45:ec:6d:59:9e:b0:04:
40:0b:7e:ea:33:b9:83:61:a5:83:37:e5:be:ba:4b:
81:3d:a6:37:b8:e2:2c:e0:4b:7d:12:d8:20:bd:eb:
cf:6f:86:59:7d:ff:73:1c:07:f7:71:3c:ec:78:35:
81:3d:30:e6:ce:a6:c6:d6:2f:09:b3:92:d0:0f:3e:
bc:4d:30:9b:ba:c2:ab:5f:b5:be:a4:fc:08:ad:85:
0e:06:75:44:25:7f:05:44:13:d2:3f:38:df:23:18:
13:5f:b9:44:d1:16:41:38:90:86:f0:45:d7:68:c4:
8c:43:78:72:b3:92:61:19:72:58:88:fa:d8:b7:e9:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:F7:A9:7A:72:A5:B0:F6:7E:EF:FC:40:C3:80:D9:58:C3:05:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/911b829c-a2f9-3515-a47d-861d0c922864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
X509v3 Authority Key Identifier:
keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
sbgp-ipAddrBlock: critical
IPv4:
45.138.164.0/22
137.83.60.0/22
141.193.238.0/24
159.112.224.0/21
161.38.160.0/20
199.103.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:9b:5e:79:a6:fe:e6:70:b8:4f:c0:b4:7e:de:6d:f6:f0:ee:
f1:69:96:5c:0c:0b:41:61:8b:79:f5:4d:15:d1:6a:8b:d6:76:
a8:cd:6f:a2:11:22:6a:31:b9:e5:d2:62:1e:dc:1e:18:8d:84:
59:92:03:f7:c3:57:9b:cd:a0:a6:2f:63:09:ed:f7:07:df:31:
52:90:60:e4:0d:31:63:46:48:3c:a8:7f:a2:a0:d3:45:02:d2:
aa:31:67:57:b4:7b:37:fc:b1:ca:1a:e2:89:65:46:4f:29:04:
41:f1:f9:39:30:7f:ad:c0:c9:fc:39:8b:bf:1d:60:48:6f:95:
e6:06:b2:72:79:41:2f:5e:9f:00:e8:76:ce:a7:8e:a3:e9:7a:
48:e9:af:08:df:0c:b4:0f:0d:b3:d7:88:77:b9:42:9a:42:fb:
e3:06:67:51:eb:8c:26:39:b2:de:e0:6a:2c:0a:ea:9f:c6:d1:
43:70:37:08:34:3d:9d:f4:c3:3d:e4:f4:be:9e:b4:3d:3b:24:
23:c8:34:74:fe:73:86:39:31:9e:c0:0a:4a:d2:52:5f:09:44:
29:30:21:43:83:53:5e:3d:15:18:99:0c:75:a4:91:28:60:13:
7c:3f:12:a4:b4:96:7d:fe:19:a9:ef:75:aa:1e:7f:9a:e5:a7:
19:94:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 18:29:20 2023 by rpki-client on console-fra.rpki-client.org