Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/73863542-a8f4-3047-ab51-e4267943129a.roa
File: 73863542-a8f4-3047-ab51-e4267943129a.roa (raw, json)
Hash identifier: b4cOZSh/Xlqwd8JsZTWyPhS/6yvyrhURr+v91nIrcmk=
Subject key identifier: E9:C2:48:F8:25:AD:F1:42:F6:3A:C2:D8:9C:5E:EF:48:D3:2D:B7:42
Certificate issuer: /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial: 010D0C9F4328584596DDCB5C3711B499C6086580
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/73863542-a8f4-3047-ab51-e4267943129a.roa
Signing time: Thu 18 Apr 2024 18:44:13 +0000
ROA not before: Thu 18 Apr 2024 18:44:13 +0000
ROA not after: Wed 17 Jul 2024 18:44:13 +0000
asID: 19905
IP address blocks: 167.153.8.0/24 maxlen: 24
167.153.240.0/23 maxlen: 23
167.153.246.0/23 maxlen: 23
167.153.245.0/24 maxlen: 24
167.153.242.0/23 maxlen: 23
167.153.232.0/21 maxlen: 21
167.153.17.0/24 maxlen: 24
167.153.128.0/18 maxlen: 18
167.153.11.0/24 maxlen: 24
161.185.8.0/24 maxlen: 24
161.185.4.0/23 maxlen: 23
161.185.2.0/23 maxlen: 23
161.185.1.0/24 maxlen: 24
157.188.212.0/23 maxlen: 23
157.188.210.0/23 maxlen: 23
157.188.208.0/23 maxlen: 23
157.188.207.0/24 maxlen: 24
157.188.200.0/22 maxlen: 22
157.188.198.0/24 maxlen: 24
157.188.196.0/23 maxlen: 23
157.188.194.0/23 maxlen: 23
157.188.192.0/24 maxlen: 24
157.188.164.0/24 maxlen: 24
157.188.162.0/23 maxlen: 23
157.188.159.0/24 maxlen: 24
157.188.132.0/24 maxlen: 24
157.188.128.0/22 maxlen: 22
157.188.80.0/23 maxlen: 23
157.188.76.0/22 maxlen: 22
157.188.74.0/23 maxlen: 23
157.188.12.0/22 maxlen: 22
157.188.10.0/23 maxlen: 23
161.185.50.0/24 maxlen: 24
161.185.130.0/24 maxlen: 24
161.185.195.0/24 maxlen: 24
161.185.182.0/24 maxlen: 24
161.185.32.0/22 maxlen: 22
161.185.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Apr 2024 13:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:96:dd:cb:5c:37:11:b4:99:c6:08:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Validity
Not Before: Apr 18 18:44:13 2024 GMT
Not After : Jul 17 18:44:13 2024 GMT
Subject: CN=3739ea54-b529-45f8-b210-ffd2279cbcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:79:a9:a1:e6:98:73:61:18:16:fb:1e:d4:
83:b0:83:74:0d:a5:f8:a3:41:4e:b6:01:c2:69:01:
b0:8b:45:cd:19:08:73:52:d2:2c:04:43:41:0d:dc:
89:96:3d:f7:3c:29:de:c0:4c:f4:23:c9:66:14:43:
dc:0d:e8:d1:a8:67:61:f2:cf:0f:48:53:4e:aa:9f:
37:c6:4d:fa:b6:d6:ed:28:a4:54:b3:c0:b9:1e:99:
65:08:f1:2e:c9:59:ef:f4:8d:4b:b5:da:3e:8d:cd:
8a:d1:15:b3:bd:4f:1d:fc:8c:c6:9c:1c:26:a1:b6:
6b:bb:62:3b:e9:f0:ab:93:0e:b8:0e:d4:99:80:ed:
72:a8:de:76:c9:59:68:88:0f:c9:0f:ec:a7:4e:fd:
b5:b8:b9:f1:e0:2f:81:f2:41:aa:4a:9b:86:01:bc:
6e:22:87:3e:8c:2a:11:ce:26:21:ee:52:f3:bb:56:
30:03:2c:6b:55:46:7a:0c:42:79:b3:69:f3:42:6e:
28:d8:9e:be:4e:71:58:fe:aa:af:21:4f:e7:8f:95:
53:8f:f1:40:6c:6d:15:ee:ad:8b:38:56:3a:4f:e9:
be:9c:28:0d:85:5d:ce:83:2f:5e:b5:95:33:4a:00:
60:84:41:19:c4:df:72:d3:84:b3:57:da:ca:2c:fe:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:48:F8:25:AD:F1:42:F6:3A:C2:D8:9C:5E:EF:48:D3:2D:B7:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/73863542-a8f4-3047-ab51-e4267943129a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
X509v3 Authority Key Identifier:
keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
sbgp-ipAddrBlock: critical
IPv4:
157.188.10.0-157.188.15.255
157.188.74.0-157.188.81.255
157.188.128.0-157.188.132.255
157.188.159.0/24
157.188.162.0-157.188.164.255
157.188.192.0/24
157.188.194.0-157.188.198.255
157.188.200.0/22
157.188.207.0-157.188.213.255
161.185.1.0-161.185.5.255
161.185.8.0/24
161.185.30.0-161.185.35.255
161.185.50.0/24
161.185.130.0/24
161.185.182.0/24
161.185.195.0/24
167.153.8.0/24
167.153.11.0/24
167.153.17.0/24
167.153.128.0/18
167.153.232.0-167.153.243.255
167.153.245.0-167.153.247.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:1e:85:31:bd:db:42:da:37:a5:63:13:44:de:07:7d:91:7f:
c0:5f:b0:24:49:93:f0:64:35:ca:89:62:d7:ce:56:82:18:27:
4f:83:e7:3e:c7:df:d3:3c:f9:1a:ab:e4:42:ad:66:aa:47:e3:
39:37:76:ee:2b:ba:3b:a4:99:32:a3:4d:32:60:7d:76:64:db:
3f:01:66:73:71:41:fb:6f:a4:51:22:eb:50:38:e0:df:dd:6b:
f4:a2:e2:82:6a:6b:a5:06:3b:a5:2f:fa:53:7e:4a:d4:e5:b8:
b7:77:8e:e0:6c:6b:90:21:3d:f9:d0:fd:cd:c9:0b:09:89:e0:
2e:91:f1:05:91:76:4d:1b:23:ce:42:6c:e5:4b:d0:ea:e0:b6:
6b:6d:18:dc:74:d3:23:7e:e2:1a:39:c1:ea:0b:9c:6f:d1:cd:
ab:17:b9:b8:96:40:a2:35:0c:f4:58:2f:6b:e2:4f:8c:7a:a0:
0f:0e:d8:c3:65:04:9b:38:5c:24:55:43:f7:09:85:85:61:81:
0e:26:bc:b3:f6:ea:2e:24:ce:01:9b:01:71:b6:e6:03:e5:a8:
6c:65:a3:15:a7:83:4a:75:d5:32:20:96:db:cb:1c:ca:a3:c5:
01:09:75:e9:ca:db:52:71:a7:31:12:4f:89:22:8c:fc:f0:ae:
ae:81:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 17:07:22 2024 by rpki-client on console-fra.rpki-client.org