Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/35a9cca9-0d85-3122-9a88-9653690329c9.roa
File: 35a9cca9-0d85-3122-9a88-9653690329c9.roa (raw, json)
Hash identifier: mcDwBPuyEU4J4DOrPvTwImi1njMWqqtCA4nU5yh3N7M=
Subject key identifier: AB:6D:3A:CE:7A:81:8A:A9:DE:45:21:78:1B:F8:FA:42:CA:37:90:86
Certificate issuer: /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial: 010D0C9F43285844914A0BA3F257D50489741EC0
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/35a9cca9-0d85-3122-9a88-9653690329c9.roa
Signing time: Tue 16 Jan 2024 02:00:26 +0000
ROA not before: Tue 16 Jan 2024 02:00:26 +0000
ROA not after: Mon 15 Apr 2024 01:00:26 +0000
asID: 14618
IP address blocks: 148.5.81.0/24 maxlen: 24
148.5.68.0/24 maxlen: 24
148.5.84.0/24 maxlen: 24
148.5.69.0/24 maxlen: 24
148.5.85.0/24 maxlen: 24
148.5.89.0/24 maxlen: 24
148.5.70.0/24 maxlen: 24
148.5.86.0/24 maxlen: 24
148.5.88.0/24 maxlen: 24
148.5.90.0/24 maxlen: 24
148.5.93.0/24 maxlen: 24
148.5.75.0/24 maxlen: 24
148.5.94.0/24 maxlen: 24
148.5.71.0/24 maxlen: 24
148.5.76.0/24 maxlen: 24
148.5.73.0/24 maxlen: 24
148.5.74.0/24 maxlen: 24
148.5.87.0/24 maxlen: 24
148.5.83.0/24 maxlen: 24
148.5.66.0/24 maxlen: 24
148.5.91.0/24 maxlen: 24
148.5.82.0/24 maxlen: 24
148.5.92.0/24 maxlen: 24
148.5.72.0/24 maxlen: 24
148.5.95.0/24 maxlen: 24
148.5.80.0/24 maxlen: 24
148.5.67.0/24 maxlen: 24
148.5.79.0/24 maxlen: 24
148.5.77.0/24 maxlen: 24
148.5.64.0/24 maxlen: 24
148.5.78.0/24 maxlen: 24
148.5.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 14:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:91:4a:0b:a3:f2:57:d5:04:89:74:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Validity
Not Before: Jan 16 02:00:26 2024 GMT
Not After : Apr 15 01:00:26 2024 GMT
Subject: CN=6981075d-1e3f-43b2-a9e5-943dab1970a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:1f:d0:02:12:a1:b3:15:35:51:48:41:f2:
5d:d5:81:4b:f4:4f:6a:6a:16:50:8b:f3:01:55:6a:
2e:12:06:4e:a2:fb:34:92:82:dc:39:9e:7e:ba:2a:
0b:43:64:f8:bd:24:5d:61:ee:96:ce:aa:d9:89:da:
30:49:cc:fe:32:7e:4d:61:35:a9:de:f0:d2:2c:96:
2d:e0:ab:14:a1:86:2a:5f:07:4b:c6:cc:68:48:3c:
a0:a4:b2:89:0f:75:2b:3e:c4:a4:b5:5c:89:d4:e1:
0c:2f:fd:39:59:37:95:b3:6c:1b:45:0b:70:fe:ff:
a3:bb:28:28:ba:e2:92:57:59:1a:95:b3:88:da:e1:
82:21:6b:b3:a9:ec:84:34:84:4d:8c:cf:a2:6f:a9:
ce:42:72:f1:a8:13:11:3d:af:78:98:9f:70:46:2a:
1e:65:83:65:93:1e:be:ef:96:db:c0:7c:a1:d1:ed:
82:63:63:3f:b2:12:af:ec:ec:71:63:2a:f4:70:4b:
db:f0:85:54:ed:e9:27:aa:30:d7:cc:97:0b:44:91:
9f:21:88:31:ba:82:2c:d4:19:88:61:64:fe:9d:fd:
e3:f0:91:77:dd:12:ad:fd:83:9d:70:31:4c:2d:12:
d7:ef:09:68:f8:dd:39:c5:59:4b:91:18:5c:16:b3:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:3A:CE:7A:81:8A:A9:DE:45:21:78:1B:F8:FA:42:CA:37:90:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/35a9cca9-0d85-3122-9a88-9653690329c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
X509v3 Authority Key Identifier:
keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
sbgp-ipAddrBlock: critical
IPv4:
148.5.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:67:00:75:c6:2f:aa:3c:8b:8a:d8:d7:dd:89:45:85:73:39:
3e:dd:97:15:5f:d7:5b:25:84:d8:d0:1d:d5:ef:e4:ec:3e:8a:
1e:e9:3b:b4:1b:cb:ca:05:a0:63:70:82:f0:21:e0:c2:a2:26:
8e:80:e4:3c:26:c9:36:9d:7d:de:63:40:61:38:36:76:ed:74:
74:d6:46:c3:40:44:0b:31:8b:e6:45:e0:b8:ab:d7:45:8f:e0:
a7:a1:49:b1:df:e7:00:c2:89:64:a0:9b:94:bb:97:5e:77:67:
ff:08:d5:87:3a:ce:b6:b4:11:a2:08:9e:a8:e9:c3:cf:d0:4b:
4b:28:89:8c:04:20:9d:eb:2a:76:a9:4d:42:dd:85:1e:01:0f:
eb:88:c8:19:a5:69:5a:6b:6c:44:7b:15:b6:40:5e:38:93:43:
76:15:8c:aa:5e:7b:5f:54:9a:ed:56:a0:f1:13:5d:cc:86:25:
b0:1d:5b:e9:ed:bd:f2:50:2d:9d:4b:c0:28:8a:18:40:54:30:
40:c8:44:4b:e4:98:d6:c6:d3:88:24:e2:84:b6:0a:1e:06:09:
b9:1c:10:5c:d2:54:c6:bf:a5:d0:94:fa:d0:89:57:38:0f:ef:
50:d5:6f:52:6f:47:8e:7a:6e:f1:84:16:ac:7e:0e:82:33:4e:
6f:15:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 17:35:24 2024 by rpki-client on console-fra.rpki-client.org