Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87b60eb6-54b6-307f-a493-972f95dff28c.roa
File: 87b60eb6-54b6-307f-a493-972f95dff28c.roa (raw, json)
Hash identifier: uCicxM2oLQYSkuNrhQ+XkWgbEJjAhuD/NjyjoNbgw/Q=
Subject key identifier: 28:E9:9F:A1:54:9B:09:F5:B7:F6:41:A3:B2:DA:8E:06:11:F8:E1:0F
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584586B47447B8397733335C2D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87b60eb6-54b6-307f-a493-972f95dff28c.roa
Signing time: Fri 12 Apr 2024 23:47:59 +0000
ROA not before: Fri 12 Apr 2024 23:47:59 +0000
ROA not after: Thu 11 Jul 2024 23:47:59 +0000
asID: 212238
IP address blocks: 172.120.18.0/24 maxlen: 24
104.164.172.0/24 maxlen: 24
104.164.120.0/24 maxlen: 24
104.164.44.0/24 maxlen: 24
172.121.96.0/24 maxlen: 24
172.121.15.0/24 maxlen: 24
172.121.2.0/24 maxlen: 24
172.121.22.0/24 maxlen: 24
172.121.29.0/24 maxlen: 24
172.121.31.0/24 maxlen: 24
172.121.26.0/24 maxlen: 24
172.120.1.0/24 maxlen: 24
172.120.7.0/24 maxlen: 24
172.120.10.0/24 maxlen: 24
104.165.13.0/24 maxlen: 24
104.165.20.0/24 maxlen: 24
172.120.0.0/24 maxlen: 24
172.121.132.0/24 maxlen: 24
172.121.128.0/24 maxlen: 24
172.121.157.0/24 maxlen: 24
172.121.151.0/24 maxlen: 24
172.121.145.0/24 maxlen: 24
172.121.242.0/24 maxlen: 24
172.252.5.0/24 maxlen: 24
172.121.250.0/24 maxlen: 24
172.121.14.0/24 maxlen: 24
172.121.8.0/24 maxlen: 24
104.164.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Apr 2024 22:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:86:b4:74:47:b8:39:77:33:33:5c:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Apr 12 23:47:59 2024 GMT
Not After : Jul 11 23:47:59 2024 GMT
Subject: CN=702bfa8c-8ddc-4990-9f65-2d0ee0bcda10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:4b:0d:11:b4:d5:a9:96:8b:b2:37:15:af:
25:b3:24:39:5f:1a:2b:04:48:6c:90:98:60:01:93:
77:aa:71:db:f6:d4:f9:86:2b:b9:66:b2:10:6d:26:
83:65:a1:5d:05:d4:e5:6f:2f:23:89:c1:31:5b:be:
b7:0a:6e:4f:a2:a6:20:3e:a5:69:de:97:5e:5c:29:
85:0b:1b:95:fe:3a:8d:90:9b:53:42:80:28:f0:67:
4f:f9:b6:0c:18:9d:8f:1c:21:39:ee:9c:2d:63:17:
ec:dd:d5:ef:41:e7:0f:b4:30:c8:12:1e:90:a5:55:
73:13:ea:14:41:fa:04:fa:a4:ce:c2:8f:f7:3d:d8:
6b:8f:70:dd:75:5a:00:b5:e5:5a:71:21:df:b1:d5:
5b:ee:3b:f2:0b:02:ed:29:96:48:ac:3e:cf:4e:81:
32:68:fe:45:d8:d7:ac:33:40:51:eb:b9:a8:a7:f6:
9c:45:03:67:ae:d8:12:78:4b:d6:42:c5:84:13:0f:
72:eb:5d:50:d4:85:34:d8:72:d1:8b:cb:ea:8b:3e:
ec:d0:b8:9f:db:ca:41:9d:ce:5b:a4:93:97:31:39:
f0:ac:18:6d:53:05:38:ea:99:74:93:b1:26:2f:82:
fb:48:7d:8d:bd:e7:fe:76:87:f1:87:a0:2b:85:00:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E9:9F:A1:54:9B:09:F5:B7:F6:41:A3:B2:DA:8E:06:11:F8:E1:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/87b60eb6-54b6-307f-a493-972f95dff28c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.164.44.0/24
104.164.120.0/24
104.164.171.0-104.164.172.255
104.165.13.0/24
104.165.20.0/24
172.120.0.0/23
172.120.7.0/24
172.120.10.0/24
172.120.18.0/24
172.121.2.0/24
172.121.8.0/24
172.121.14.0/23
172.121.22.0/24
172.121.26.0/24
172.121.29.0/24
172.121.31.0/24
172.121.96.0/24
172.121.128.0/24
172.121.132.0/24
172.121.145.0/24
172.121.151.0/24
172.121.157.0/24
172.121.242.0/24
172.121.250.0/24
172.252.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:6c:2f:ca:db:a4:d3:d3:79:58:3a:35:af:38:7e:2b:d5:45:
74:cc:68:11:b9:f5:f2:f5:fd:d8:55:48:b4:4e:23:75:d5:3d:
5b:2a:76:07:69:ee:b8:f6:47:85:64:fb:e9:7a:67:97:76:fb:
0a:37:9e:e1:c8:c7:24:ce:dd:ca:58:df:9e:52:6a:ea:28:d0:
6b:29:b1:28:0f:5e:e6:58:73:0c:5c:e6:e4:32:11:f9:dd:56:
e0:03:32:a0:8b:e5:38:4f:be:2f:5f:3d:75:16:79:20:98:8f:
33:5f:70:62:7e:e4:3f:5a:1e:85:ee:c8:1d:17:70:c7:9a:59:
73:4b:5f:dd:80:0f:8c:4e:54:0a:61:d7:18:72:1f:68:b9:79:
67:6b:26:a9:1b:c4:1f:18:2c:7f:06:4f:fa:ea:fb:77:c8:7d:
07:a7:00:7f:82:fe:ec:58:e7:03:aa:b5:85:1a:71:0b:37:b1:
e1:77:6b:d7:00:4a:db:79:be:39:4c:31:e5:78:13:65:31:c4:
0d:84:3c:97:e2:fe:bb:9f:6e:51:f9:f6:1e:e6:ff:2a:65:1f:
d8:27:9e:c0:03:a1:15:90:40:77:4a:ff:c7:40:43:bf:d8:d2:
4d:dd:7b:90:e3:0f:d3:4c:3a:5b:6f:66:99:31:ca:51:1f:09:
9a:f0:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:52:03 2024 by rpki-client on console-ams.rpki-client.org