Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/b2e352a9-5301-3ceb-bdc3-b7cde110ef86.roa
File: b2e352a9-5301-3ceb-bdc3-b7cde110ef86.roa (raw, json)
Hash identifier: 0MWJkG2aKm5Tq+yFSMThFpc0fJ42ZDS5JnvIjyYxt3E=
Subject key identifier: D5:39:38:26:F0:9E:C7:46:F8:22:62:9B:DB:4D:13:3D:0A:56:BB:DD
Certificate issuer: /CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Certificate serial: 010D0C9F43285840B4232B229C1662157AF8CC68
Authority key identifier: FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/b2e352a9-5301-3ceb-bdc3-b7cde110ef86.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Fri 26 Apr 2030 04:00:00 +0000
asID: 19108
IP address blocks: 24.121.0.0/16 maxlen: 24
24.75.113.0/24 maxlen: 24
24.75.124.0/24 maxlen: 24
24.54.114.0/24 maxlen: 24
24.31.17.0/24 maxlen: 24
24.49.194.0/24 maxlen: 24
24.49.200.0/24 maxlen: 24
24.54.116.0/22 maxlen: 24
24.75.123.0/24 maxlen: 24
24.75.126.0/24 maxlen: 24
24.156.0.0/17 maxlen: 24
24.223.81.0/24 maxlen: 24
24.245.68.0/23 maxlen: 24
47.208.0.0/12 maxlen: 24
50.24.0.0/14 maxlen: 24
64.139.227.0/24 maxlen: 24
64.139.229.0/24 maxlen: 24
64.139.234.0/24 maxlen: 24
64.139.246.0/24 maxlen: 24
64.234.1.0/24 maxlen: 24
66.76.0.0/16 maxlen: 24
69.59.100.0/24 maxlen: 24
74.192.0.0/14 maxlen: 24
74.196.0.0/15 maxlen: 24
75.108.0.0/14 maxlen: 24
173.80.0.0/15 maxlen: 24
173.216.0.0/15 maxlen: 24
207.192.192.0/18 maxlen: 24
208.180.0.0/16 maxlen: 24
209.207.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 05:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b4:23:2b:22:9c:16:62:15:7a:f8:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7abeff-feac-4cc9-9077-866f0bb1b8cc
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Apr 26 04:00:00 2030 GMT
Subject: CN=e0ea54c0-0016-4ecd-ac4c-942ae4e4cda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:62:29:68:84:cf:c7:c1:05:11:67:4a:37:
cd:52:e1:cd:3c:54:df:b3:70:ce:c9:41:7b:6d:51:
52:9d:05:5b:e6:76:b2:58:ff:df:81:a7:23:a4:ea:
b5:5a:b1:f8:4a:b2:cc:d7:5b:13:94:d2:1a:e4:fc:
9e:10:95:b2:1c:23:a2:6b:82:87:39:2e:e4:ff:ca:
25:90:56:d2:29:48:7f:83:01:33:96:8a:bb:a2:e4:
dd:8b:de:c2:a1:80:64:9f:82:ce:09:4c:5e:59:9e:
95:d7:79:64:f9:2a:d4:f2:75:b8:9c:c5:94:30:c9:
36:e8:c3:88:11:11:1d:99:92:ca:e3:71:08:54:49:
30:d1:87:db:27:04:bc:59:b1:88:94:ae:95:83:b2:
8f:9b:d4:51:2c:bf:b7:46:4a:e6:a4:02:a5:da:2d:
94:5d:bf:29:8b:1e:b8:82:b1:dc:79:f2:cf:f1:9e:
bc:ad:e6:89:0c:9f:ad:47:1a:19:dc:ac:c9:79:76:
7e:01:fd:7c:36:8f:6c:6c:63:08:49:80:01:82:2d:
61:ae:5e:e7:cf:bf:ef:dd:e2:1d:06:b5:1f:c4:bf:
f7:17:2d:e7:b1:6c:35:f4:23:e8:a5:0d:34:cf:85:
3b:76:ad:37:be:8b:a8:ff:44:14:cf:9a:a5:83:7f:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:38:26:F0:9E:C7:46:F8:22:62:9B:DB:4D:13:3D:0A:56:BB:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/b2e352a9-5301-3ceb-bdc3-b7cde110ef86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.crl
X509v3 Authority Key Identifier:
keyid:FB:BF:7E:3A:E5:BD:B2:6B:C2:DD:40:13:1B:AE:F1:45:BE:AC:12:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a7abeff-feac-4cc9-9077-866f0bb1b8cc.cer
sbgp-ipAddrBlock: critical
IPv4:
24.31.17.0/24
24.49.194.0/24
24.49.200.0/24
24.54.114.0/24
24.54.116.0/22
24.75.113.0/24
24.75.123.0-24.75.124.255
24.75.126.0/24
24.121.0.0/16
24.156.0.0/17
24.223.81.0/24
24.245.68.0/23
47.208.0.0/12
50.24.0.0/14
64.139.227.0/24
64.139.229.0/24
64.139.234.0/24
64.139.246.0/24
64.234.1.0/24
66.76.0.0/16
69.59.100.0/24
74.192.0.0-74.197.255.255
75.108.0.0/14
173.80.0.0/15
173.216.0.0/15
207.192.192.0/18
208.180.0.0/16
209.207.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d0:d4:99:e6:5d:0b:97:0a:1b:30:6c:2e:53:ae:37:f0:64:
fd:3d:64:78:ce:9b:ab:7d:a5:78:3c:2a:90:a3:62:f8:9a:40:
a4:27:2d:5d:c7:71:16:5b:fd:fd:e2:e7:ab:be:82:97:f0:17:
65:cd:d5:5a:f2:e2:a0:9d:b0:d7:73:b9:65:a0:62:08:e3:80:
04:82:97:69:ef:1e:7e:3f:99:cc:89:92:8a:63:fc:e5:08:b7:
a7:7c:b0:10:6d:6b:94:ee:f8:d3:f0:b6:8c:b3:f4:3e:7d:b5:
1b:fe:df:89:54:32:5b:a6:9f:a5:72:58:f3:a6:09:8a:92:24:
e6:ab:3c:41:e4:52:18:5d:87:aa:09:04:23:2e:21:ac:93:76:
7f:7a:9d:09:8b:7f:10:64:b8:07:b4:2f:46:b9:30:f5:b7:8a:
db:1e:43:ca:8b:d3:11:55:34:ca:2b:f9:15:dc:7e:49:89:75:
50:76:65:d4:6d:17:1b:a3:63:1a:c6:06:45:a6:15:a5:f7:4a:
08:b4:66:ec:ba:81:50:e4:d9:8c:e3:9e:13:36:fa:a6:5d:3b:
e9:5c:30:c7:7b:58:6e:60:13:37:06:cd:62:be:86:85:81:ae:
7c:12:18:17:c8:66:b5:53:3b:7e:a0:93:a4:fd:de:d4:99:e1:
83:80:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:49 2024 by rpki-client on console-ams.rpki-client.org