Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/aab3772b-1d18-3e8d-b488-8e0a48279ec1.roa
File: aab3772b-1d18-3e8d-b488-8e0a48279ec1.roa (raw, json)
Hash identifier: tcwEOYK/neJ9MO8U8ld/uIyZvKWF0aGcwlNE58TjGUI=
Subject key identifier: 6E:B4:2C:16:78:02:BC:88:8D:52:29:76:04:6A:5A:4B:59:9D:10:FB
Certificate issuer: /CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Certificate serial: 010D0C9F4328583DCD0D40FC5048F3437B8D0940
Authority key identifier: C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/aab3772b-1d18-3e8d-b488-8e0a48279ec1.roa
Signing time: Wed 15 Jul 2020 19:17:04 +0000
ROA not before: Wed 15 Jul 2020 19:17:04 +0000
ROA not after: Mon 15 Jul 2030 04:00:00 +0000
asID: 27364
IP address blocks: 24.144.160.0/19 maxlen: 19
24.101.224.0/19 maxlen: 19
24.101.96.0/19 maxlen: 19
24.129.245.0/24 maxlen: 24
24.144.128.0/19 maxlen: 19
24.144.192.0/19 maxlen: 19
24.144.224.0/19 maxlen: 19
24.154.0.0/19 maxlen: 19
24.154.32.0/19 maxlen: 19
24.154.64.0/19 maxlen: 19
24.154.96.0/19 maxlen: 19
24.154.128.0/19 maxlen: 19
24.154.160.0/19 maxlen: 19
24.154.192.0/19 maxlen: 19
24.154.224.0/19 maxlen: 19
24.239.32.0/19 maxlen: 19
24.239.64.0/19 maxlen: 19
24.239.96.0/19 maxlen: 19
24.239.192.0/19 maxlen: 19
24.239.224.0/19 maxlen: 19
69.84.48.0/20 maxlen: 20
72.23.0.0/19 maxlen: 19
72.23.32.0/19 maxlen: 19
72.23.64.0/19 maxlen: 19
72.23.96.0/19 maxlen: 19
72.23.128.0/19 maxlen: 19
72.23.160.0/19 maxlen: 19
72.23.192.0/19 maxlen: 19
72.23.224.0/19 maxlen: 19
104.219.216.0/22 maxlen: 22
192.161.130.0/23 maxlen: 23
24.129.240.0/20 maxlen: 20
24.112.192.0/19 maxlen: 19
24.112.224.0/19 maxlen: 19
24.112.128.0/19 maxlen: 19
24.112.160.0/19 maxlen: 19
24.101.184.0/21 maxlen: 21
24.101.0.0/19 maxlen: 19
24.101.32.0/19 maxlen: 19
24.101.64.0/19 maxlen: 19
24.101.128.0/19 maxlen: 19
24.101.160.0/20 maxlen: 20
24.101.176.0/21 maxlen: 21
24.101.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 12 Dec 2022 18:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cd:0d:40:fc:50:48:f3:43:7b:8d:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044f7659-113e-4b3c-be9d-200821bc9a5b
Validity
Not Before: Jul 15 19:17:04 2020 GMT
Not After : Jul 15 04:00:00 2030 GMT
Subject: CN=307e18ba-8912-459a-9c93-53bd92f3f5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:d2:c7:3e:4d:00:61:b6:c2:c7:22:b9:71:
75:2a:de:0f:87:b9:62:89:13:c0:8e:66:eb:89:8e:
3e:87:23:35:b4:3e:a4:c3:75:de:b6:92:39:93:e5:
02:42:48:09:35:bf:e1:28:d4:a3:2e:1d:dc:a1:8c:
b3:79:6e:56:a5:89:d7:29:24:45:dd:e6:43:98:94:
b8:4b:6d:87:d8:cf:82:ab:c2:74:9d:81:f2:1e:53:
f6:7f:12:77:c0:64:c9:a4:20:03:95:35:ea:93:68:
ac:6f:38:8f:90:a0:ac:17:15:c0:57:ca:1f:02:e4:
d1:10:c1:00:9a:1b:d9:ae:e1:9b:7b:74:74:41:d0:
f3:79:c4:a8:56:68:0c:11:f6:c6:cb:88:15:fc:55:
dc:48:35:7e:43:bc:02:4a:8d:77:6a:0b:62:df:0d:
fb:14:7a:a6:e0:20:d3:d6:af:18:2d:1c:1a:49:11:
24:0d:0e:83:43:f0:82:fc:74:45:f7:e2:23:30:bd:
0b:69:64:7f:e1:6b:4b:80:02:ba:84:93:32:8d:b6:
16:60:a8:f5:24:7d:2a:1b:33:9d:6e:79:fc:82:85:
60:81:7e:36:81:3d:b5:b7:b7:69:5d:23:51:40:51:
f6:b3:13:35:02:af:a0:82:72:8f:ba:5d:05:f2:61:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:2C:16:78:02:BC:88:8D:52:29:76:04:6A:5A:4B:59:9D:10:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/aab3772b-1d18-3e8d-b488-8e0a48279ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b/044f7659-113e-4b3c-be9d-200821bc9a5b.crl
X509v3 Authority Key Identifier:
keyid:C3:BA:39:75:1F:4D:8D:EF:11:5F:FD:E1:17:3D:7E:EC:A6:81:80:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/044f7659-113e-4b3c-be9d-200821bc9a5b.cer
sbgp-ipAddrBlock: critical
IPv4:
24.101.0.0/16
24.112.128.0/17
24.129.240.0/20
24.144.128.0/17
24.154.0.0/16
24.239.32.0-24.239.127.255
24.239.192.0/18
69.84.48.0/20
72.23.0.0/16
104.219.216.0/22
192.161.130.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:9a:91:2a:8a:3f:a6:d5:61:2a:6d:4d:c0:e4:e7:9a:ad:eb:
a1:18:8b:2d:04:d9:59:48:2f:58:97:48:4b:f0:67:7b:50:4c:
92:03:33:b3:88:00:de:c2:ce:a7:66:05:c1:2e:23:81:1d:79:
88:d8:91:69:16:4d:22:fd:8c:3f:11:f0:46:40:fe:88:00:74:
56:84:2e:de:5e:29:b3:7f:dc:07:89:42:8e:c1:11:2f:c2:04:
f0:51:99:f8:6e:b1:c3:78:d4:36:bc:e4:34:61:b3:79:ff:3f:
6d:0f:03:0c:91:ef:d3:f2:cf:1c:18:83:0f:ac:15:c4:2d:10:
cc:e8:07:5a:b5:53:46:a9:0f:12:a9:cb:39:e6:82:45:03:6a:
46:5a:b1:c5:aa:3f:8e:6f:6b:27:2a:4f:1e:ea:93:99:0d:8b:
7d:9e:75:cb:a9:26:1b:68:a9:03:87:91:59:ba:1b:af:17:96:
71:a8:1d:55:ff:25:fe:c7:bb:96:1b:19:fd:68:82:99:36:0a:
68:b0:55:7c:fc:07:9f:20:34:41:c5:40:a6:d1:ab:9e:3c:5c:
a3:55:91:bd:94:69:4b:73:35:00:e2:62:33:e5:4e:93:1d:91:
1b:26:06:86:59:4d:05:0f:f4:a2:33:71:5b:02:6e:23:ec:e6:
b3:1e:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org