Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa
File: fdd8393e-d262-3341-a1dc-1596775503ef.roa (raw, json)
Hash identifier: ebjwP8VQMTrSM8ozLwihbiNcVWZR47qbydJl4QYrRi8=
Subject key identifier: A8:4A:55:D1:44:4E:62:41:89:4E:D6:1C:9D:C4:67:EE:2A:0C:F0:23
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285841B1A5732315EFD72B72F0EB80
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa
Signing time: Tue 24 May 2022 21:33:00 +0000
ROA not before: Tue 24 May 2022 21:33:00 +0000
ROA not after: Mon 26 Aug 2024 04:00:00 +0000
asID: 393529
IP address blocks: 160.129.68.0/22 maxlen: 22
160.129.36.0/22 maxlen: 22
160.129.12.0/22 maxlen: 22
160.129.60.0/22 maxlen: 22
160.129.64.0/22 maxlen: 22
160.129.72.0/22 maxlen: 22
160.129.76.0/22 maxlen: 22
160.129.80.0/22 maxlen: 22
160.129.84.0/22 maxlen: 22
160.129.88.0/22 maxlen: 22
160.129.92.0/22 maxlen: 22
160.129.96.0/22 maxlen: 22
160.129.100.0/22 maxlen: 22
160.129.104.0/22 maxlen: 22
160.129.108.0/22 maxlen: 22
160.129.112.0/22 maxlen: 22
160.129.116.0/22 maxlen: 22
160.129.120.0/22 maxlen: 22
160.129.124.0/22 maxlen: 22
160.129.128.0/22 maxlen: 22
160.129.132.0/22 maxlen: 22
160.129.136.0/22 maxlen: 22
160.129.140.0/22 maxlen: 22
160.129.144.0/22 maxlen: 22
160.129.148.0/22 maxlen: 22
160.129.152.0/22 maxlen: 22
160.129.156.0/22 maxlen: 22
160.129.160.0/22 maxlen: 22
160.129.164.0/22 maxlen: 22
160.129.168.0/22 maxlen: 22
160.129.172.0/22 maxlen: 22
160.129.176.0/22 maxlen: 22
160.129.180.0/22 maxlen: 22
160.129.184.0/22 maxlen: 22
160.129.188.0/22 maxlen: 22
160.129.192.0/22 maxlen: 22
160.129.196.0/22 maxlen: 22
160.129.200.0/22 maxlen: 22
160.129.204.0/22 maxlen: 22
160.129.208.0/22 maxlen: 22
160.129.212.0/22 maxlen: 22
160.129.216.0/22 maxlen: 22
160.129.220.0/22 maxlen: 22
160.129.224.0/22 maxlen: 22
160.129.228.0/22 maxlen: 22
160.129.232.0/22 maxlen: 22
160.129.236.0/22 maxlen: 22
160.129.240.0/22 maxlen: 22
160.129.244.0/22 maxlen: 22
160.129.248.0/22 maxlen: 22
160.129.252.0/22 maxlen: 22
160.129.56.0/22 maxlen: 22
160.129.48.0/22 maxlen: 22
160.129.52.0/22 maxlen: 22
160.129.40.0/22 maxlen: 22
160.129.44.0/22 maxlen: 22
160.129.28.0/22 maxlen: 22
160.129.0.0/22 maxlen: 22
160.129.4.0/22 maxlen: 22
160.129.8.0/22 maxlen: 22
160.129.16.0/22 maxlen: 22
160.129.20.0/22 maxlen: 22
160.129.24.0/22 maxlen: 22
160.129.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 27 Apr 2023 19:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:b1:a5:73:23:15:ef:d7:2b:72:f0:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: May 24 21:33:00 2022 GMT
Not After : Aug 26 04:00:00 2024 GMT
Subject: CN=3669d1f3-ff4c-45c7-9cef-765f3dec4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:b1:58:11:31:9c:0c:87:1e:5f:34:c0:1b:
ae:c2:aa:13:8f:60:2d:bf:be:b7:53:8c:68:e3:9f:
d9:8d:e8:7f:d0:f7:d4:bf:1a:19:66:ba:97:5f:23:
32:6f:31:02:4a:9e:68:27:49:33:ea:10:68:47:80:
59:e8:1d:83:54:35:79:56:d3:6d:79:62:51:90:9a:
d2:16:ad:c6:3d:b9:6a:0f:8e:de:60:c9:72:73:8b:
ef:92:de:21:c9:1f:e6:3b:31:71:18:15:a1:b4:e2:
97:78:b9:87:79:7e:c3:5b:1f:19:ad:b8:24:31:7d:
0d:67:47:3b:c9:ce:a2:a4:ac:56:eb:fe:f3:84:66:
09:50:63:69:a0:61:28:d2:04:02:f4:60:00:a2:95:
87:e4:d3:ec:91:46:68:26:96:5f:81:6c:2f:dd:4b:
64:06:26:b2:3f:35:af:10:58:50:6e:b9:3d:88:27:
af:28:01:20:77:3d:13:bc:39:36:08:48:67:2a:fa:
09:ee:51:d1:24:49:c8:b5:59:b7:f9:25:65:05:2c:
13:6e:cd:1b:a2:c3:7d:b3:d2:8e:6c:c2:3e:1e:c4:
9d:24:45:14:a6:ba:d6:6a:a4:33:c0:57:88:a9:13:
49:a4:b4:9e:0c:64:6f:18:53:ad:85:26:c4:b7:c8:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4A:55:D1:44:4E:62:41:89:4E:D6:1C:9D:C4:67:EE:2A:0C:F0:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c1:ad:5c:80:2d:c4:d2:99:90:ef:d1:80:4c:f3:e3:90:46:
97:d3:be:eb:c8:c9:e1:2d:61:be:31:d4:2e:ee:f1:33:49:c8:
28:be:d1:41:d3:df:10:c8:a8:85:7f:34:a0:ab:da:60:77:93:
0d:91:dd:57:3b:cc:73:02:90:4a:a7:78:ab:c4:d6:2b:58:cd:
38:65:cb:4a:f0:69:fd:83:c0:56:36:61:07:d8:1b:80:cc:ff:
f3:32:f8:11:02:16:41:d5:a7:81:1f:76:44:3b:10:35:0a:c3:
62:2c:70:0b:e9:c5:c2:c6:b4:68:fe:a4:80:e2:e0:80:0d:49:
54:9f:c8:30:b7:e0:0f:e4:92:6f:47:a9:5d:c7:df:38:12:a8:
e5:5c:72:50:09:d2:d5:90:55:20:be:f4:b3:c3:a5:44:40:e2:
96:c8:1f:d9:98:f9:96:32:82:29:48:a4:91:b0:ff:42:b3:64:
30:3d:83:5e:a3:0c:07:53:8e:c5:ab:5e:b3:7b:6c:e0:cc:62:
fe:dd:94:c6:02:fb:f4:79:c1:00:5f:c2:b9:b9:25:73:a1:40:
87:35:57:a4:e2:0a:53:39:86:31:15:a2:d4:b5:67:81:c8:69:
2e:50:a4:dd:3f:a2:fe:0e:4d:c7:03:40:72:9a:61:33:ee:db:
d3:8f:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org