Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2638bebc-4a36-355f-a6a9-70eec65e4fd1.roa
File: 2638bebc-4a36-355f-a6a9-70eec65e4fd1.roa (raw, json)
Hash identifier: PXekPXC9Jd72OZhbvG0cai9t4j7AaMn80WhuI8INlMY=
Subject key identifier: DA:30:9A:12:F6:9F:3E:FA:DB:00:3A:6E:9E:E4:E8:4F:24:89:8A:36
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583BDC62FF10C26A81F69B0B9300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2638bebc-4a36-355f-a6a9-70eec65e4fd1.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Sun 11 Feb 2024 05:00:00 +0000
asID: 7922
IP address blocks: 142.111.216.0/24 maxlen: 24
107.186.81.0/24 maxlen: 24
142.111.161.0/24 maxlen: 24
107.165.203.0/24 maxlen: 24
107.164.47.0/24 maxlen: 24
107.164.61.0/24 maxlen: 24
107.164.215.0/24 maxlen: 24
107.186.62.0/24 maxlen: 24
136.0.223.0/24 maxlen: 24
142.111.189.0/24 maxlen: 24
142.111.220.0/24 maxlen: 24
142.111.240.0/24 maxlen: 24
142.111.252.0/24 maxlen: 24
142.252.41.0/24 maxlen: 24
142.252.53.0/24 maxlen: 24
142.252.139.0/24 maxlen: 24
142.252.158.0/24 maxlen: 24
142.252.173.0/24 maxlen: 24
142.252.174.0/24 maxlen: 24
142.252.212.0/24 maxlen: 24
142.252.216.0/24 maxlen: 24
142.252.219.0/24 maxlen: 24
166.88.32.0/24 maxlen: 24
166.88.34.0/24 maxlen: 24
166.88.44.0/24 maxlen: 24
166.88.66.0/24 maxlen: 24
172.121.3.0/24 maxlen: 24
172.121.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 17:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:dc:62:ff:10:c2:6a:81:f6:9b:0b:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Feb 11 05:00:00 2024 GMT
Subject: CN=a60b4fa5-d083-430c-bcfe-bd7360abfb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:03:bf:00:8e:f2:49:23:b1:3b:91:8a:6d:
a7:40:e6:23:fc:1a:82:25:80:65:0c:1d:62:b2:0a:
ac:9c:fe:b1:a8:ab:e5:62:db:ff:3a:0b:01:6a:12:
46:48:f7:6c:ba:c0:09:fd:05:8e:f4:2e:78:8a:4c:
7a:b0:67:57:4b:ae:74:aa:c5:88:1d:0b:02:7d:a9:
ab:d6:30:88:2b:e6:aa:15:43:80:d9:5d:df:7c:c6:
8c:9c:28:d6:4e:4e:d6:dc:68:ac:8b:c2:0a:24:8e:
31:0c:d9:c9:78:95:37:28:94:a3:13:0d:ee:16:50:
39:a5:e1:b0:30:56:4b:dd:ea:c7:bc:ed:e5:1d:29:
5b:8c:3c:8f:65:06:93:4b:94:80:8f:7a:3e:96:bc:
33:04:f4:56:de:97:fc:15:72:20:a4:80:e5:aa:e6:
f6:36:63:d1:19:d0:92:89:3e:5a:58:76:93:25:25:
87:16:2c:fa:e4:c2:76:5b:5a:a8:ea:5f:a3:f5:15:
a4:34:19:d4:36:1f:db:f2:5e:dd:83:31:f6:39:12:
99:17:d2:1c:8b:b1:02:18:3a:22:60:4a:e6:c0:8d:
e8:44:98:ef:e9:af:a3:5e:2f:24:3b:ea:f5:5c:96:
65:2b:56:5a:71:59:a4:b7:60:36:bc:63:61:1d:81:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:9A:12:F6:9F:3E:FA:DB:00:3A:6E:9E:E4:E8:4F:24:89:8A:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2638bebc-4a36-355f-a6a9-70eec65e4fd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.164.47.0/24
107.164.61.0/24
107.164.215.0/24
107.165.203.0/24
107.186.62.0/24
107.186.81.0/24
136.0.223.0/24
142.111.161.0/24
142.111.189.0/24
142.111.216.0/24
142.111.220.0/24
142.111.240.0/24
142.111.252.0/24
142.252.41.0/24
142.252.53.0/24
142.252.139.0/24
142.252.158.0/24
142.252.173.0-142.252.174.255
142.252.212.0/24
142.252.216.0/24
142.252.219.0/24
166.88.32.0/24
166.88.34.0/24
166.88.44.0/24
166.88.66.0/24
172.121.3.0/24
172.121.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:30:53:6d:ea:65:19:9d:99:d5:b2:61:8c:f2:2d:62:0b:4c:
ab:c6:8f:80:ed:fb:28:9e:ed:0f:57:40:54:7d:7d:c9:f1:29:
16:6b:87:c3:0b:80:c2:42:83:9a:68:7b:25:c9:fc:01:20:1b:
37:0a:03:84:0c:76:fd:e6:d8:7f:16:4e:43:5d:03:17:b9:bf:
8e:08:31:43:f6:00:a9:3b:3a:a3:dc:3a:53:d8:88:49:6b:e4:
5a:c7:de:32:e9:4f:c5:94:f7:45:6b:85:77:f2:01:88:b4:ff:
34:8a:22:8f:3f:78:d5:c4:c3:08:bc:82:8c:09:5e:4c:84:40:
1a:40:9a:24:f1:63:ec:8a:25:51:6f:09:5f:28:d9:fd:90:b7:
7c:53:ab:d6:cb:83:e5:74:0e:88:b2:69:72:90:d6:6d:2e:0e:
e1:74:f1:57:0a:af:08:a8:0e:14:08:ac:5a:8e:b8:c0:6c:cc:
b5:43:cf:06:d5:60:39:0b:f9:79:6e:0c:b1:f2:74:d8:5e:5f:
bc:8a:fe:e5:52:6c:40:4d:f8:8b:db:16:7e:47:87:f5:48:ed:
d7:b0:c0:f7:13:43:5e:1d:94:31:1b:35:a1:30:90:b2:22:10:
01:4d:16:e3:55:93:e9:29:f6:93:55:60:74:71:8c:e0:ad:fe:
3b:b1:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:23 2024 by rpki-client on console-ams.rpki-client.org