Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/400eb0ae-d075-305d-9e79-016afa60309a.roa
File: 400eb0ae-d075-305d-9e79-016afa60309a.roa (raw, json)
Hash identifier: +mm4XOG+RMUXzRjFjd4bI4UcrfiaMjG6d4CMe8JY31U=
Subject key identifier: 4D:7F:3F:1B:42:24:1A:9E:80:35:3A:67:A4:82:DB:A0:DA:29:1C:34
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584586B21874A4252BD025C4B81C
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/400eb0ae-d075-305d-9e79-016afa60309a.roa
Signing time: Fri 12 Apr 2024 23:43:14 +0000
ROA not before: Fri 12 Apr 2024 23:43:14 +0000
ROA not after: Thu 11 Jul 2024 23:43:14 +0000
asID: 3257
IP address blocks: 107.165.188.0/24 maxlen: 24
142.252.117.0/24 maxlen: 24
142.252.138.0/24 maxlen: 24
142.252.148.0/22 maxlen: 24
142.252.60.0/22 maxlen: 24
142.252.38.0/24 maxlen: 24
107.187.125.0/24 maxlen: 24
142.252.89.0/24 maxlen: 24
68.68.107.0/24 maxlen: 24
68.68.96.0/24 maxlen: 24
68.68.108.0/24 maxlen: 24
104.165.199.0/24 maxlen: 24
104.165.105.0/24 maxlen: 24
142.252.192.0/22 maxlen: 24
172.121.236.0/22 maxlen: 24
172.121.192.0/19 maxlen: 24
172.121.160.0/20 maxlen: 24
172.121.232.0/24 maxlen: 24
107.165.152.0/24 maxlen: 24
107.165.204.0/24 maxlen: 24
107.165.191.0/24 maxlen: 24
107.165.225.0/24 maxlen: 24
107.186.144.0/24 maxlen: 24
107.165.207.0/24 maxlen: 24
107.187.33.0/24 maxlen: 24
172.121.156.0/24 maxlen: 24
107.165.183.0/24 maxlen: 24
107.165.166.0/24 maxlen: 24
172.121.109.0/24 maxlen: 24
172.121.141.0/24 maxlen: 24
142.252.209.0/24 maxlen: 24
172.120.26.0/24 maxlen: 24
107.165.128.0/24 maxlen: 24
107.165.143.0/24 maxlen: 24
107.165.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 21:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:86:b2:18:74:a4:25:2b:d0:25:c4:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 12 23:43:14 2024 GMT
Not After : Jul 11 23:43:14 2024 GMT
Subject: CN=4b720e7d-9302-4a67-8f7c-d576200e03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:48:db:87:0e:75:8c:68:76:9a:49:94:d5:
03:e2:c7:51:c2:7f:46:d6:4d:59:d9:13:c3:c7:96:
47:9b:2c:fe:4c:05:b3:64:ae:09:41:17:b0:c7:31:
77:1b:fc:62:2b:28:82:42:2d:a2:a9:9b:77:b4:5b:
7b:26:bd:1f:c3:8c:e6:db:8d:13:11:46:7e:44:35:
60:81:d0:48:05:64:53:d4:83:82:56:65:de:98:7d:
8a:de:2a:e2:ee:90:f4:f8:c5:3d:16:ae:9c:12:39:
34:bf:08:94:07:9a:32:7f:0b:b5:0b:10:09:d1:a4:
c6:53:22:9e:e0:35:0e:18:99:87:46:ef:fe:e0:27:
d8:47:56:a7:aa:44:6b:c0:0f:74:41:65:96:ee:ee:
6e:c4:bb:e5:f2:da:2d:ea:ac:24:22:36:cd:11:1a:
de:78:e7:ef:5f:e9:62:92:dd:66:6b:68:7f:11:21:
50:b2:ef:86:bb:16:a8:00:b3:f5:25:3e:15:b3:f0:
f1:c2:91:eb:1a:75:b7:6a:7c:e6:a9:25:fe:11:85:
fe:22:78:98:7f:c2:15:13:a6:a4:57:67:89:13:2d:
7c:4b:b9:cc:ea:72:80:93:53:58:89:2f:fc:1c:c9:
77:3b:c6:41:ce:a3:92:89:4f:e9:cf:e1:e9:03:32:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7F:3F:1B:42:24:1A:9E:80:35:3A:67:A4:82:DB:A0:DA:29:1C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/400eb0ae-d075-305d-9e79-016afa60309a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.96.0/24
68.68.107.0-68.68.108.255
104.165.105.0/24
104.165.199.0/24
107.165.128.0/24
107.165.134.0/24
107.165.143.0/24
107.165.152.0/24
107.165.166.0/24
107.165.183.0/24
107.165.188.0/24
107.165.191.0/24
107.165.204.0/24
107.165.207.0/24
107.165.225.0/24
107.186.144.0/24
107.187.33.0/24
107.187.125.0/24
142.252.38.0/24
142.252.60.0/22
142.252.89.0/24
142.252.117.0/24
142.252.138.0/24
142.252.148.0/22
142.252.192.0/22
142.252.209.0/24
172.120.26.0/24
172.121.109.0/24
172.121.141.0/24
172.121.156.0/24
172.121.160.0/20
172.121.192.0/19
172.121.232.0/24
172.121.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:7b:70:05:cf:e9:53:f9:f1:25:e0:bf:57:9c:9b:ea:2e:b1:
66:04:5f:9d:01:bb:0a:aa:7d:4f:00:8f:12:bb:36:ec:b5:58:
0e:df:26:db:b4:f1:b2:4e:13:48:99:1e:19:cd:2d:31:bc:ec:
3b:a7:a9:30:de:b8:18:de:1e:ac:f5:5e:6f:17:59:37:fc:8d:
3a:23:4a:1d:1c:ba:8f:89:a0:e0:e1:0d:d7:d4:9e:53:b3:7c:
97:92:33:0a:2d:4e:75:95:a8:ae:6d:99:23:c5:45:30:2a:75:
bb:2c:a3:c2:d0:59:96:44:cf:73:97:0d:98:6b:e2:8e:8d:7c:
eb:07:d0:60:b3:32:d4:bf:ee:3a:ba:95:66:a3:9b:56:bf:f1:
5e:9d:5e:f1:c1:7e:fd:e8:b0:97:41:69:30:55:08:42:20:af:
7f:c6:4a:12:8a:6e:6c:c3:75:aa:28:17:0a:6a:45:82:bd:11:
52:ed:8e:e3:ba:55:7e:c7:00:fd:2f:cc:bb:80:09:e5:b3:c9:
80:07:69:af:ea:90:69:9e:0e:68:3b:67:a6:63:47:98:05:39:
63:bd:78:e0:f1:c9:d7:e8:27:06:50:15:7a:41:18:45:a0:fd:
cf:1a:83:44:d2:b8:24:e6:b9:04:35:9a:53:52:50:c7:c4:8a:
fd:09:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:12:02 2024 by rpki-client on console-fra.rpki-client.org