Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa
File: 8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa (raw, json)
Hash identifier: JuWU1csWQ8gK4FGWFCeSWSIU/WIG4Hqy5CzsUvF0oRI=
Subject key identifier: 93:F5:EE:42:5A:B3:43:24:7F:44:7F:7F:95:FA:E4:1D:F7:32:00:4B
Certificate issuer: /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial: 010D0C9F432858413FD9DFCA262145C74A286C00
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 16 Feb 2025 05:00:00 +0000
asID: 3223
IP address blocks: 104.161.32.0/19 maxlen: 32
104.161.8.0/21 maxlen: 32
104.161.16.0/20 maxlen: 32
104.161.64.0/18 maxlen: 32
23.226.64.0/20 maxlen: 32
107.167.64.0/19 maxlen: 32
107.178.64.0/18 maxlen: 32
107.189.128.0/18 maxlen: 32
162.213.208.0/22 maxlen: 32
162.218.112.0/21 maxlen: 32
184.164.64.0/19 maxlen: 32
192.30.136.0/22 maxlen: 32
192.110.160.0/21 maxlen: 32
199.231.84.0/22 maxlen: 32
2604:6280::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 04 Apr 2023 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:3f:d9:df:ca:26:21:45:c7:4a:28:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 16 05:00:00 2025 GMT
Subject: CN=19b158fe-d532-4a9d-9745-ca6d6b618901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:ea:f8:e5:51:2f:b2:13:d3:9f:16:8f:02:
4e:06:fc:16:7e:e8:af:c1:2f:a2:b5:dc:8d:d3:3f:
3e:94:a9:40:bd:02:df:1c:79:40:3d:db:a7:c8:70:
03:38:7b:ef:88:ae:e2:90:6f:85:8b:6f:d1:44:ad:
50:e7:06:4a:58:2d:ab:87:98:97:54:fb:d2:f2:74:
55:d1:7c:8e:cd:d0:af:1b:0a:10:33:7a:05:ac:8f:
d7:f8:83:03:16:9c:a5:1c:a6:0d:09:e0:99:a2:53:
b1:ff:98:53:48:f5:30:a0:07:6f:5b:9e:45:96:bf:
1e:ab:6f:7b:ef:ec:a2:67:5d:67:fa:de:a8:ee:aa:
b1:f5:8c:51:ad:af:f1:05:7b:f2:a3:56:30:32:ec:
7b:08:85:fd:3a:6c:a1:aa:78:bb:63:24:aa:c7:ca:
d7:64:e0:d8:a1:af:41:8b:c7:f0:ae:9e:a5:ae:eb:
d7:d2:ec:78:b6:40:eb:e8:30:b5:da:ce:8e:4b:21:
48:88:81:86:64:43:a8:c9:27:be:f6:69:0c:aa:8a:
6b:10:f5:55:fa:35:5f:74:49:3f:56:03:e6:12:76:
5b:65:12:fb:29:01:e9:bf:dd:2a:8e:01:bf:0e:8d:
6f:6a:48:2f:90:d7:6f:bf:fd:f0:7a:a6:c1:5b:47:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:EE:42:5A:B3:43:24:7F:44:7F:7F:95:FA:E4:1D:F7:32:00:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
X509v3 Authority Key Identifier:
keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.64.0/20
104.161.8.0-104.161.127.255
107.167.64.0/19
107.178.64.0/18
107.189.128.0/18
162.213.208.0/22
162.218.112.0/21
184.164.64.0/19
192.30.136.0/22
192.110.160.0/21
199.231.84.0/22
IPv6:
2604:6280::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:7e:91:c3:3a:a2:2e:fc:33:fa:37:cb:8b:e4:79:d7:42:5c:
e9:43:a2:cd:61:f9:ff:ab:92:5b:d2:d8:eb:8e:4e:95:d8:f6:
01:cc:64:d2:0b:96:27:b3:4c:74:63:dd:42:86:28:bb:86:d5:
6e:7b:51:8b:ed:5b:10:4e:70:7e:84:31:23:b7:c7:46:19:e3:
ca:b5:75:f0:f5:bd:91:ee:c2:22:56:fd:d0:b7:24:14:da:f2:
72:ca:61:0f:a2:43:90:e2:b1:14:c7:fb:65:b2:8d:6f:8e:bf:
cf:0d:eb:b4:a6:88:71:ab:79:4d:4a:ec:42:05:84:df:83:63:
32:54:ae:c4:4a:14:a1:4f:f3:1d:d8:44:a0:b8:80:a8:8d:6b:
76:1e:f2:a8:10:05:48:49:51:73:65:21:e2:d8:26:f1:2e:6b:
8f:a8:90:f1:46:c7:c8:0c:a8:7b:9c:83:6e:07:cc:e2:eb:62:
e0:ff:ec:56:d3:ac:13:40:89:3c:1a:b1:3c:0b:f5:e6:25:80:
3f:12:f4:71:be:0b:d1:57:15:0d:73:48:a3:f5:f0:69:fc:31:
f0:04:ea:0a:96:e2:32:ad:17:05:57:15:d9:24:f2:b5:9e:7b:
46:e8:a2:b9:68:64:c1:0d:4f:0e:ad:94:25:65:3a:da:9d:15:
19:1f:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org