Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda28c1e-a346-33b0-8a11-9ba8fdf8b4a3.roa
File: fda28c1e-a346-33b0-8a11-9ba8fdf8b4a3.roa (raw, json)
Hash identifier: L5Aqp63mlTNL231C6Q3koEHSRC6TYMLz+wwRm0nbz84=
Subject key identifier: 97:FB:CA:FE:84:64:C1:D8:91:08:C5:31:1F:10:AF:B5:65:20:90:85
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F43285847292D0B0C9662D2F434938C80
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda28c1e-a346-33b0-8a11-9ba8fdf8b4a3.roa
Signing time: Mon 09 Sep 2024 21:18:51 +0000
ROA not before: Mon 09 Sep 2024 21:18:51 +0000
ROA not after: Sun 08 Dec 2024 22:18:51 +0000
asID: 63023
IP address blocks: 67.220.72.0/24 maxlen: 24
67.220.73.0/24 maxlen: 24
67.220.74.0/24 maxlen: 24
67.220.80.0/24 maxlen: 24
67.220.82.0/24 maxlen: 24
67.220.85.0/24 maxlen: 24
67.220.86.0/24 maxlen: 24
67.220.87.0/24 maxlen: 24
67.220.88.0/24 maxlen: 24
67.220.89.0/24 maxlen: 24
67.220.95.0/24 maxlen: 24
68.168.31.0/24 maxlen: 24
69.42.209.0/24 maxlen: 24
186.190.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 13:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:29:2d:0b:0c:96:62:d2:f4:34:93:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Sep 9 21:18:51 2024 GMT
Not After : Dec 8 22:18:51 2024 GMT
Subject: CN=1fb24718-6827-4f29-9fa5-e0e79342327e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:12:9e:97:3d:41:a4:49:3f:80:5e:21:49:
9f:78:57:ca:a6:bf:84:86:a3:08:d2:0c:a8:68:88:
69:5d:7e:7e:40:66:93:cf:92:e3:29:7a:56:9d:03:
4a:c5:b5:01:c1:80:82:38:16:18:c0:54:21:78:bd:
d6:11:f1:a4:1e:48:ae:bc:41:69:0c:9a:f2:68:e1:
db:8a:3d:e5:7a:02:4d:31:ac:ac:8c:d1:4a:88:16:
a3:78:98:7e:d8:68:a3:57:bf:36:f9:bd:0f:4b:a6:
c7:ec:1a:a9:81:41:67:b3:8f:19:15:c0:02:c2:69:
64:e6:76:0d:06:ef:7c:b6:58:35:92:bf:2c:c7:51:
71:5d:30:53:59:62:a5:62:6e:c6:85:cd:72:98:8e:
87:f6:9f:ca:18:3d:59:7d:88:9b:e0:6e:8d:9a:6e:
a5:79:4e:08:9e:55:fb:04:a3:77:85:a7:5f:d0:d9:
0c:99:77:a8:ea:6a:c8:1f:04:39:70:dc:3b:72:35:
06:28:98:bd:ed:b3:fc:4f:79:95:41:75:dd:72:f9:
e2:12:44:4a:ef:f7:bf:57:62:f7:0b:ab:00:83:f7:
c3:16:ce:93:0a:9d:f5:56:87:13:11:85:78:65:44:
be:7a:b7:5f:9f:01:64:75:4d:c3:aa:74:fc:05:5e:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:CA:FE:84:64:C1:D8:91:08:C5:31:1F:10:AF:B5:65:20:90:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/fda28c1e-a346-33b0-8a11-9ba8fdf8b4a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.72.0-67.220.74.255
67.220.80.0/24
67.220.82.0/24
67.220.85.0-67.220.89.255
67.220.95.0/24
68.168.31.0/24
69.42.209.0/24
186.190.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:7a:1c:43:de:c8:09:36:45:03:55:13:2b:e2:50:fe:ad:98:
f6:b3:66:33:e9:7a:54:70:a5:82:6f:52:5c:59:50:1c:5f:56:
0a:9c:ff:e5:ff:90:23:36:fa:ec:4e:25:bc:f5:58:48:f0:15:
6f:3c:b6:45:94:99:c0:f2:9c:3e:fa:9c:ca:c0:f7:84:f8:c9:
cb:f6:f8:02:79:a7:e4:da:68:cd:5c:31:5a:54:93:7a:a9:c5:
e3:18:d6:49:d6:87:ec:c4:74:b9:4d:25:5e:f9:12:43:06:05:
7b:d6:3a:41:08:c4:5f:58:74:d9:35:05:c4:23:55:f2:c5:55:
0e:53:ca:f5:43:17:a7:77:46:a7:a0:4e:e5:0a:c2:05:ea:14:
34:32:6f:5f:9f:33:7c:0e:ff:62:4d:6e:6e:35:b1:0b:4b:01:
60:90:a7:84:df:a9:7a:a5:22:82:12:15:8a:13:21:ef:b1:cd:
a8:64:85:70:00:c9:a9:bd:52:74:5d:da:61:0e:ae:7b:d5:01:
d7:84:66:0a:2d:06:a7:a8:e6:2c:5a:ad:7f:6c:37:0d:eb:69:
17:0d:7f:c6:fb:d5:71:d3:ec:a8:c1:45:8d:1b:1d:96:a7:f9:
5c:60:ff:38:c5:fb:fe:d5:ab:dc:69:32:fc:f8:91:93:7a:cc:
29:3e:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 16:22:55 2024 by rpki-client on console-fra.rpki-client.org