Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f4089d51-f5db-31ac-9738-ded2d465d328.roa
File: f4089d51-f5db-31ac-9738-ded2d465d328.roa (raw, json)
Hash identifier: gQC8MU/364roSg9x4xbQhL8wzrWzHFka/Elr3C8mxK8=
Subject key identifier: 18:3F:AD:1A:97:C4:CD:79:D1:AA:4A:5C:E2:B4:70:29:F1:28:45:8C
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285847AE36A55A70E359B985345F40
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f4089d51-f5db-31ac-9738-ded2d465d328.roa
Signing time: Sun 27 Oct 2024 13:00:41 +0000
ROA not before: Sun 27 Oct 2024 13:00:41 +0000
ROA not after: Sat 25 Jan 2025 14:00:41 +0000
asID: 400866
IP address blocks: 107.151.208.0/24 maxlen: 24
107.151.209.0/24 maxlen: 24
107.151.214.0/24 maxlen: 24
107.151.215.0/24 maxlen: 24
107.151.218.0/24 maxlen: 24
107.151.219.0/24 maxlen: 24
107.151.222.0/24 maxlen: 24
107.151.223.0/24 maxlen: 24
198.44.161.0/24 maxlen: 24
198.44.162.0/24 maxlen: 24
198.44.188.0/24 maxlen: 24
198.44.189.0/24 maxlen: 24
198.44.190.0/24 maxlen: 24
198.44.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 10:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ae:36:a5:5a:70:e3:59:b9:85:34:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Oct 27 13:00:41 2024 GMT
Not After : Jan 25 14:00:41 2025 GMT
Subject: CN=e83b5b50-8501-4643-b184-e33554455ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:41:ff:cf:b1:a0:86:ac:55:b5:1a:aa:fb:
de:d8:92:a1:4f:ce:7a:94:7c:db:0e:e8:20:c8:dd:
cc:5a:f5:1d:6b:1e:c4:6b:42:68:3d:2c:ff:22:8b:
91:b0:95:d1:f9:89:21:2f:81:0a:a1:47:b1:d1:24:
17:e6:63:25:b9:d3:a8:53:76:0f:dc:44:e4:dc:c5:
6a:0f:be:8c:00:a0:02:7e:2c:d2:83:7f:fe:03:c7:
ef:78:dc:16:5a:92:e1:4a:de:3d:13:f7:0e:a9:62:
60:c1:54:bd:8b:6c:8c:61:57:f5:56:b1:a8:e8:82:
07:b2:84:5b:d3:86:0c:1c:4c:4a:a6:92:7f:8a:14:
27:43:3a:fe:ab:a3:bd:03:ff:cd:91:d3:5f:3c:37:
40:07:ed:cc:2f:94:18:ab:1d:fd:ab:f9:0d:71:42:
be:ef:d5:ab:94:3b:a8:72:e6:36:f9:85:86:18:22:
6c:ad:ab:09:62:d5:ec:15:e4:8d:7d:82:b2:a4:13:
cf:bc:b1:19:09:f4:70:39:45:2d:ad:c0:3d:9c:c1:
09:a7:1b:08:db:69:59:1b:6e:4c:aa:9e:40:82:e3:
51:11:8b:d4:e6:84:bc:c6:de:57:05:cd:67:9f:c9:
24:ad:a8:4b:41:8f:ad:5a:ee:de:d7:a8:06:1f:e6:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3F:AD:1A:97:C4:CD:79:D1:AA:4A:5C:E2:B4:70:29:F1:28:45:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/f4089d51-f5db-31ac-9738-ded2d465d328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
107.151.208.0/23
107.151.214.0/23
107.151.218.0/23
107.151.222.0/23
198.44.161.0-198.44.162.255
198.44.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:80:62:c2:d4:a8:ed:20:2d:90:95:d4:eb:27:a0:f7:09:26:
83:e8:63:bd:be:25:3b:db:ed:83:6b:dd:88:e9:5b:09:bb:1d:
43:92:28:db:ef:ed:f4:2e:9b:e9:ee:57:26:7b:9d:cd:28:37:
0b:2c:0f:98:99:62:4a:fe:6a:7c:c4:9f:7a:8b:e7:56:41:a5:
8b:84:9f:3d:11:c1:73:08:b0:8c:0a:3c:a1:5c:0b:df:29:c2:
95:15:63:71:64:41:03:85:22:81:36:4d:79:e5:f5:c8:6c:18:
58:c9:f7:e2:79:84:af:f0:49:6c:cf:02:9c:7f:6a:81:d6:dc:
1c:a8:0b:56:23:94:a5:ee:8c:1d:7e:31:f5:12:a2:cc:b6:dd:
95:7b:d3:da:4f:18:ea:81:d6:98:cc:4c:7d:22:0d:b2:59:c8:
31:2d:78:ac:cc:c8:05:b7:80:f1:3c:d9:04:6c:0c:c8:ab:91:
61:bf:db:be:a5:9e:d4:1f:50:eb:72:03:41:17:4c:2c:88:c9:
43:35:59:76:10:c8:fd:6d:ad:2c:98:5f:ae:4f:05:78:73:c4:
fd:75:20:6a:f2:00:9b:ad:ce:e1:1d:99:8b:43:5c:f2:c8:6d:
d3:10:97:57:ea:6a:ae:29:cc:57:8d:47:29:46:a5:da:ed:ef:
5a:3f:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 14:14:25 2024 by rpki-client on console-fra.rpki-client.org