Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/4875b6c5-29cd-3c35-808c-87505540023b.roa
File: 4875b6c5-29cd-3c35-808c-87505540023b.roa (raw, json)
Hash identifier: vqTbd/i72UILwxc6bQn4BGML05QzsyUzbguOA9EU4QU=
Subject key identifier: 4C:DB:4C:90:82:31:85:2F:5D:85:45:DE:D8:57:35:94:8F:DA:AA:A3
Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial: 010D0C9F4328584695A4DA9E770D87CE9EA10C80
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/4875b6c5-29cd-3c35-808c-87505540023b.roa
Signing time: Fri 19 Jul 2024 01:00:25 +0000
ROA not before: Fri 19 Jul 2024 01:00:25 +0000
ROA not after: Thu 17 Oct 2024 01:00:25 +0000
asID: 19905
IP address blocks: 157.188.74.0/23 maxlen: 24
157.188.76.0/22 maxlen: 24
157.188.80.0/23 maxlen: 24
157.188.207.0/24 maxlen: 24
157.188.208.0/23 maxlen: 24
157.188.210.0/23 maxlen: 24
157.188.212.0/23 maxlen: 24
161.185.1.0/24 maxlen: 24
161.185.2.0/23 maxlen: 24
161.185.4.0/23 maxlen: 24
161.185.8.0/24 maxlen: 24
161.185.30.0/23 maxlen: 24
161.185.32.0/22 maxlen: 24
161.185.50.0/24 maxlen: 24
161.185.130.0/24 maxlen: 24
161.185.182.0/24 maxlen: 24
161.185.195.0/24 maxlen: 24
167.153.8.0/24 maxlen: 24
167.153.11.0/24 maxlen: 24
167.153.17.0/24 maxlen: 24
167.153.128.0/18 maxlen: 24
167.153.232.0/21 maxlen: 24
167.153.240.0/23 maxlen: 24
167.153.242.0/23 maxlen: 24
167.153.245.0/24 maxlen: 24
167.153.246.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 18:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:95:a4:da:9e:77:0d:87:ce:9e:a1:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Validity
Not Before: Jul 19 01:00:25 2024 GMT
Not After : Oct 17 01:00:25 2024 GMT
Subject: CN=090ae816-704c-42bd-962c-5af881d780db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:20:c3:96:58:80:3c:63:fc:2e:39:b0:98:
09:27:78:8c:10:40:58:a4:6d:2c:69:ba:a6:f5:0b:
d1:7b:67:47:09:e2:31:a0:b6:55:b4:23:1e:67:eb:
bc:a5:28:e8:67:84:a6:02:f4:f1:a8:38:e4:44:24:
07:9b:1a:d5:87:d9:bf:1e:b2:86:a8:47:5b:5b:2d:
0d:72:83:ca:41:ee:43:32:2f:6c:30:4f:1d:04:a1:
34:96:72:5d:45:bc:ff:61:25:74:6e:b3:58:4f:f0:
6f:5d:f7:22:e1:ae:24:93:97:2a:bb:a6:fc:72:c4:
6a:50:0e:23:a6:9d:cd:29:9b:0a:ba:70:48:f3:30:
1a:de:ff:e0:b4:81:8b:4a:f3:16:91:b8:60:43:3e:
64:01:77:db:ca:44:07:96:22:a9:2d:06:7c:5f:2c:
79:1a:44:e0:f9:db:af:4e:bc:a3:77:4f:ef:b9:d8:
be:86:d6:99:04:ac:1e:0c:c3:76:37:19:8b:e6:74:
a0:9b:2f:e2:61:ba:6c:ec:19:0b:98:b5:d0:7c:f5:
b2:5d:53:5e:b0:79:87:fe:ae:95:07:f3:1b:49:bb:
99:59:02:4f:7a:dc:c8:e9:c5:3c:b9:b8:8a:b0:07:
07:7c:72:6e:e5:72:89:06:26:1d:4f:08:c9:eb:6c:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DB:4C:90:82:31:85:2F:5D:85:45:DE:D8:57:35:94:8F:DA:AA:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/4875b6c5-29cd-3c35-808c-87505540023b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
X509v3 Authority Key Identifier:
keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.188.74.0-157.188.81.255
157.188.207.0-157.188.213.255
161.185.1.0-161.185.5.255
161.185.8.0/24
161.185.30.0-161.185.35.255
161.185.50.0/24
161.185.130.0/24
161.185.182.0/24
161.185.195.0/24
167.153.8.0/24
167.153.11.0/24
167.153.17.0/24
167.153.128.0/18
167.153.232.0-167.153.243.255
167.153.245.0-167.153.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:56:11:e2:75:06:b7:7f:d3:4b:38:7f:a3:81:65:a6:0e:9f:
ea:b9:1b:78:af:85:c0:4d:61:79:3c:51:28:98:68:e1:77:25:
b1:59:c2:34:84:1a:4b:33:c3:e6:0d:fb:5e:66:df:f1:98:a0:
7e:51:88:de:a2:9b:f5:2d:a4:c2:ac:d8:a5:b9:3d:52:2a:99:
3a:ab:67:89:2a:fe:b2:6b:82:2c:e1:f6:18:44:be:e6:8d:d8:
b0:02:22:b6:3c:45:d6:6e:78:4c:54:0d:46:7a:a6:02:c2:4c:
b6:a1:69:fe:1a:a4:db:89:47:b4:2c:68:f1:ea:26:c7:8a:69:
69:24:c0:33:27:e6:4f:7c:03:68:64:c4:bf:5a:9e:42:60:38:
6e:7b:ee:9a:a6:82:e1:dc:ee:a3:e2:12:23:66:2d:85:b1:c7:
7a:25:ea:f6:29:18:8c:a4:f4:ed:85:07:a2:ce:80:f2:1f:a3:
e6:95:db:27:56:e2:10:24:42:76:67:30:5d:c3:02:70:6b:82:
08:1b:8e:2a:52:48:17:c0:c6:44:d2:77:30:ba:9c:fb:ff:ba:
23:af:69:28:6c:62:01:2a:ee:dc:2f:f6:3b:45:71:54:54:d1:
4c:c2:96:d0:52:9a:ee:cf:9b:45:13:f3:5a:22:d6:09:eb:46:
f0:0b:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 19:40:04 2024 by rpki-client on console-fra.rpki-client.org