Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8e560800-8067-3349-b6ec-2ab23cefea63.roa
File: 8e560800-8067-3349-b6ec-2ab23cefea63.roa (raw, json)
Hash identifier: SoNygxtXJNlmHbp41hO88nkgVrpAEZVgJ9Ae5z0NlyU=
Subject key identifier: FA:A9:08:A6:4A:57:9F:1B:9B:45:1E:98:33:96:C6:92:77:D0:74:EA
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858448784B718D0F5036E9DFD1EC0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8e560800-8067-3349-b6ec-2ab23cefea63.roa
Signing time: Fri 12 Jan 2024 14:00:28 +0000
ROA not before: Fri 12 Jan 2024 14:00:28 +0000
ROA not after: Thu 11 Apr 2024 13:00:28 +0000
asID: 11232
IP address blocks: 24.124.0.0/17 maxlen: 17
24.143.32.0/19 maxlen: 19
64.33.64.0/18 maxlen: 18
163.123.0.0/17 maxlen: 17
216.71.0.0/18 maxlen: 18
24.220.0.0/16 maxlen: 16
2001:48f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Feb 2024 16:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:87:84:b7:18:d0:f5:03:6e:9d:fd:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 12 14:00:28 2024 GMT
Not After : Apr 11 13:00:28 2024 GMT
Subject: CN=471e43f7-45f9-4cfa-bedf-96dc99bf71fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:c7:87:5d:b5:34:62:aa:91:37:d6:e4:9c:
f0:51:75:e0:8c:77:22:bd:41:94:0e:35:14:d4:9f:
36:c2:7d:4b:b7:69:4f:86:f9:af:86:bf:df:29:53:
f2:af:9f:e8:80:cf:5c:df:8a:ff:76:f9:d6:05:82:
d7:27:02:b6:a3:84:44:46:38:89:da:a1:c3:95:3b:
18:7d:12:b3:d5:cb:d7:81:cc:c1:4a:0f:1e:a5:33:
89:9c:ba:6a:fd:ca:cd:a6:a9:43:ee:a5:ab:33:b2:
eb:d1:b3:0d:77:25:8f:95:ad:1b:c1:a9:fe:73:05:
ec:7e:51:9d:9e:6e:17:83:22:0b:d0:94:73:52:4e:
64:c6:e4:b8:ec:f0:86:2b:e2:a3:98:fd:ea:08:82:
47:13:b2:52:51:ba:43:bc:5d:88:6d:90:a8:58:49:
77:5c:2c:a0:ab:96:e1:9e:00:21:31:b6:e9:fa:98:
9d:87:4a:a9:a6:83:8a:13:54:fd:aa:c4:81:d3:df:
9c:3b:bf:2a:0d:dc:9f:a3:02:8a:00:cc:49:e8:eb:
e4:4f:f6:19:d9:6a:65:9c:30:e6:f9:ff:6e:01:02:
a5:b9:5e:fb:34:cc:da:a3:71:e3:48:88:9e:31:a4:
1c:79:d4:03:81:94:26:65:a0:ad:ef:6d:ca:0b:5d:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:08:A6:4A:57:9F:1B:9B:45:1E:98:33:96:C6:92:77:D0:74:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8e560800-8067-3349-b6ec-2ab23cefea63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.0.0/17
24.143.32.0/19
24.220.0.0/16
64.33.64.0/18
163.123.0.0/17
216.71.0.0/18
IPv6:
2001:48f8::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:0b:9e:e7:3a:fa:5d:5f:c9:c4:fc:03:1b:a0:b5:c4:1e:b5:
c7:f5:86:ee:c3:d0:c1:80:ea:58:0f:89:7a:bf:c0:5b:45:c0:
a6:d3:5a:ad:44:da:4d:eb:db:e5:df:bb:da:a5:d4:9f:5a:0d:
8c:43:09:16:94:d9:d0:ca:b9:bd:6f:80:0e:1b:d0:87:b8:4d:
25:53:2e:d6:50:46:d1:63:c6:6b:c3:6d:46:c8:3b:11:0c:98:
51:4f:23:1c:16:26:10:78:b7:73:9f:7d:07:96:56:9d:20:7e:
bb:7e:9a:56:9b:ad:19:c8:9b:8b:af:68:6f:cc:41:2d:64:20:
c7:82:91:2a:d5:91:a7:11:c9:1b:cf:55:a7:1f:80:b4:b5:a5:
13:e1:e4:3f:39:ed:d9:fd:06:71:ae:c6:66:1d:35:92:f7:34:
08:9f:05:4d:74:d7:85:e5:81:35:0b:bd:0a:80:04:fb:b7:eb:
af:31:89:36:e4:0d:27:98:78:67:3e:9d:24:9d:69:4d:a7:bb:
64:0c:68:e4:59:58:9a:d3:5c:01:59:28:29:d0:1a:1f:ac:aa:
28:7b:4d:f4:9f:12:f3:eb:4b:15:84:5d:d4:a4:17:8a:41:65:
7a:7c:5a:e0:c8:59:af:17:95:79:cb:ff:80:8c:90:e7:fb:24:
9a:11:eb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 22 20:07:05 2024 by rpki-client on console-ams.rpki-client.org