Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa
File: 1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa (raw, json)
Hash identifier: oEEmToysZ8QiZtJbK46co3/3i6VYjJo+fk9JtV8vRLQ=
Subject key identifier: 81:42:9F:16:85:68:6E:F6:C8:38:C5:89:91:A4:8C:B1:1F:24:D0:D7
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F432858472B1001C136594B9F54DB7360
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa
Signing time: Tue 10 Sep 2024 13:31:58 +0000
ROA not before: Tue 10 Sep 2024 13:31:58 +0000
ROA not after: Mon 09 Dec 2024 14:31:58 +0000
asID: 63023
IP address blocks: 67.220.72.0/23 maxlen: 24
67.220.74.0/24 maxlen: 24
67.220.80.0/24 maxlen: 24
67.220.82.0/24 maxlen: 24
67.220.85.0/24 maxlen: 24
67.220.86.0/23 maxlen: 24
67.220.88.0/23 maxlen: 24
67.220.95.0/24 maxlen: 24
68.168.31.0/24 maxlen: 24
69.42.209.0/24 maxlen: 24
186.190.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 19:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:2b:10:01:c1:36:59:4b:9f:54:db:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Sep 10 13:31:58 2024 GMT
Not After : Dec 9 14:31:58 2024 GMT
Subject: CN=e20720e2-f14d-4476-b5e0-2097bee50c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:68:d4:70:5d:e1:03:8e:f3:ea:68:43:92:
25:04:f9:43:af:bc:bd:a4:a3:f5:50:f4:b1:2f:2f:
3b:50:d2:f8:06:12:d9:6c:e0:23:86:1a:f5:ff:ae:
d0:91:97:f8:60:08:e6:1f:4d:b7:d9:cb:63:b7:9f:
41:f7:52:31:de:54:57:e6:0c:20:14:d9:52:ed:b8:
75:c9:ea:17:66:49:eb:1f:4f:cc:ab:cc:58:8c:6f:
5e:45:9f:f1:41:0a:a7:bd:f3:8d:b0:2c:59:6d:8f:
c8:e4:87:e1:0b:d6:04:f1:82:30:52:de:4c:61:cb:
36:df:dc:c3:58:4b:57:79:04:c6:d4:ce:d4:b9:f4:
db:fe:63:5c:3a:dc:1f:c0:d7:73:ff:1f:13:64:a7:
8e:e4:90:80:9a:4f:3a:96:46:50:fe:79:9b:04:73:
f2:66:9d:bf:71:c5:53:87:b4:9a:9f:4b:0a:7c:d8:
c8:a0:8b:48:54:d4:27:de:3f:dd:51:2c:dd:e4:65:
9b:d5:4e:09:b5:c5:03:7d:2a:b1:b3:95:56:89:26:
6a:9c:10:80:19:1c:eb:03:d1:ee:8e:40:c6:17:e1:
6b:60:95:d3:40:73:7d:88:6e:70:bb:45:59:55:46:
b4:d5:88:eb:f1:78:0c:54:9a:77:3e:c4:52:c9:d8:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:42:9F:16:85:68:6E:F6:C8:38:C5:89:91:A4:8C:B1:1F:24:D0:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/1f70bb99-44f1-3ddb-9429-2e89407ff6dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.72.0-67.220.74.255
67.220.80.0/24
67.220.82.0/24
67.220.85.0-67.220.89.255
67.220.95.0/24
68.168.31.0/24
69.42.209.0/24
186.190.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:23:c5:46:13:72:c5:53:bd:09:c6:b3:b9:81:0b:d2:6b:44:
c2:30:a4:e9:19:20:d3:63:d6:14:4f:42:95:dd:9a:be:cb:d6:
24:e5:4c:f0:82:38:7f:e3:fc:b5:a0:08:a8:87:d3:da:5f:b1:
2e:69:86:eb:c2:f5:e6:7c:8e:a2:3a:c7:dd:7a:a9:fa:b7:74:
a7:58:bb:68:e8:db:00:18:4e:25:0a:2b:02:e6:07:49:09:dc:
97:df:e0:18:7e:6d:8b:cd:ae:ee:90:5a:a7:63:08:b2:b5:6e:
13:ac:ac:c3:cc:0a:5b:75:70:e0:f1:58:71:06:60:80:b1:a4:
20:e7:b9:72:dd:85:02:67:8e:69:fc:30:73:ff:0d:b5:29:4b:
0c:83:6e:86:7b:39:a1:93:c9:f3:83:d0:20:c5:56:38:d2:4c:
e8:66:64:bc:b9:48:25:68:c6:10:ee:52:94:1a:0a:a4:60:d7:
7d:51:ee:3f:a7:f9:5f:2e:64:06:92:29:8f:db:eb:0b:f7:ac:
26:87:92:ee:6f:95:5f:9c:f8:d3:67:fe:1c:93:b9:e4:6d:04:
54:67:61:28:2b:97:4a:fa:38:2a:ed:73:a9:2d:a5:05:ba:b9:
6d:84:12:c1:51:27:13:ee:49:ed:81:f5:ca:6f:f6:40:d6:8b:
d5:4d:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:22:30 2024 by rpki-client on console-ams.rpki-client.org