Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa
File: 598f423f-1caf-32ed-bd7e-127455fdf126.roa (raw, json)
Hash identifier: 8jSoMbArLAmcBYUkEd2cLFiX7aoZ2j/6RaRl4uD2nGg=
Subject key identifier: 45:97:FB:9B:95:F8:22:95:03:FF:D1:28:77:8B:BB:F0:01:B7:69:15
Certificate issuer: /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial: 010D0C9F43285846CEE00C164DF4E62CC558D640
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa
Signing time: Thu 08 Aug 2024 13:00:38 +0000
ROA not before: Thu 08 Aug 2024 13:00:38 +0000
ROA not after: Wed 06 Nov 2024 14:00:38 +0000
asID: 3842
IP address blocks: 23.226.224.0/21 maxlen: 21
107.161.16.0/22 maxlen: 24
107.161.24.0/22 maxlen: 22
107.191.104.0/22 maxlen: 22
107.191.116.0/22 maxlen: 22
167.88.112.0/22 maxlen: 22
167.88.124.0/23 maxlen: 23
168.235.112.0/24 maxlen: 24
192.184.88.0/21 maxlen: 24
192.249.60.0/22 maxlen: 22
2604:180:1::/48 maxlen: 48
2604:180:f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Aug 2024 14:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:ce:e0:0c:16:4d:f4:e6:2c:c5:58:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Validity
Not Before: Aug 8 13:00:38 2024 GMT
Not After : Nov 6 14:00:38 2024 GMT
Subject: CN=4fe99e07-fbfd-409f-8667-25371bc1a18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:54:a8:86:6c:f7:a9:1a:a5:7a:b1:74:18:
cd:4d:cf:5d:b0:6c:2f:38:d0:0e:7f:2a:91:4f:09:
a9:61:b0:bb:e0:d9:9c:30:1b:7d:97:2b:99:ae:1a:
58:19:34:95:bd:25:05:28:2d:bd:6f:98:85:a1:28:
24:13:70:95:b4:9c:d2:3e:7a:0c:66:55:e9:93:11:
fb:65:25:fb:a7:0e:6d:4f:67:b7:2a:74:90:a3:a7:
30:01:f2:c5:96:5e:0b:33:68:26:1d:a8:ec:97:8c:
3c:e9:86:97:78:b6:8f:a5:72:08:50:ee:ef:bc:f3:
6c:0d:18:bd:c0:c3:9a:99:72:e4:75:e9:d3:0f:5e:
9a:0f:a1:3f:82:9f:ae:88:70:2b:b1:b1:73:1f:35:
d7:17:71:b3:b1:47:e0:0e:2e:21:5d:45:1c:12:ff:
07:1d:1f:17:3a:52:10:76:b7:58:71:dc:4e:b6:5c:
9b:15:db:eb:82:de:a2:ec:62:be:ba:19:de:70:72:
d9:66:30:45:63:c8:3c:82:3c:8d:a5:72:7f:02:18:
f0:fb:e4:f5:8d:7d:e6:ce:ec:18:a1:dc:60:4b:92:
9e:ce:9a:91:a0:05:68:33:55:35:a8:1f:01:35:12:
7c:6d:9d:a4:87:f1:0e:4b:b7:14:ad:3e:2d:23:73:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:FB:9B:95:F8:22:95:03:FF:D1:28:77:8B:BB:F0:01:B7:69:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/598f423f-1caf-32ed-bd7e-127455fdf126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
X509v3 Authority Key Identifier:
keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.224.0/21
107.161.16.0/22
107.161.24.0/22
107.191.104.0/22
107.191.116.0/22
167.88.112.0/22
167.88.124.0/23
168.235.112.0/24
192.184.88.0/21
192.249.60.0/22
IPv6:
2604:180:1::/48
2604:180:f2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:61:0d:f2:f7:c1:d0:a0:44:db:9e:bb:5c:f7:98:d8:72:4e:
6a:cd:a6:46:f3:2a:04:9f:2d:f9:36:4a:59:b4:48:58:6f:5c:
cc:78:cf:93:ac:43:ff:c5:fb:af:a3:c3:00:48:bf:66:bd:ac:
49:3c:f5:26:f8:08:f9:04:9c:ef:10:9e:63:91:51:03:6a:f4:
fa:ee:08:f0:18:80:be:0c:a4:b6:78:b3:28:3a:88:d4:4f:af:
ed:b0:02:bb:47:f6:6e:5d:c1:e4:4b:ba:42:8a:44:57:a4:59:
8f:05:a9:19:de:19:dd:d8:8b:ad:c1:26:dc:b2:7c:cb:23:e9:
3c:44:81:a3:cd:1f:e5:95:d3:03:72:82:b4:7c:eb:3c:62:5a:
47:79:63:90:20:26:3c:81:c6:ae:e0:a9:34:04:68:a7:0f:17:
aa:98:af:49:d6:32:29:9d:af:0f:cf:84:9f:e8:d2:63:50:2e:
8a:92:fb:a1:1c:ac:12:2b:cf:d5:57:cb:2d:bb:1a:2c:8f:2d:
48:57:6a:32:f2:38:3d:fa:f2:91:96:2f:eb:09:a9:54:63:b9:
30:a2:e5:e5:85:bb:41:79:a4:26:62:9e:c5:15:50:0a:09:ba:
e3:91:0b:8c:7c:06:f9:93:02:fe:c4:83:c7:b7:e7:57:77:cf:
8c:5d:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 20:10:35 2024 by rpki-client on console-ams.rpki-client.org