Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a0c44d2-1724-3bbd-86e2-af1fe138e8c6.roa
File: 8a0c44d2-1724-3bbd-86e2-af1fe138e8c6.roa (raw, json)
Hash identifier: f/mJgMylhIUOAeUksq5u478RwV2rEgH/o4cvOfmzbbw=
Subject key identifier: AA:B1:71:68:3A:F2:44:AF:3D:00:72:0A:79:2F:A7:21:31:61:2E:F8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285844851901CE993C811A2371CD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a0c44d2-1724-3bbd-86e2-af1fe138e8c6.roa
Signing time: Thu 11 Jan 2024 17:12:02 +0000
ROA not before: Thu 11 Jan 2024 17:12:02 +0000
ROA not after: Wed 10 Apr 2024 16:12:02 +0000
asID: 7299
IP address blocks: 142.111.161.0/24 maxlen: 24
107.165.203.0/24 maxlen: 24
107.164.47.0/24 maxlen: 24
107.164.61.0/24 maxlen: 24
107.164.215.0/24 maxlen: 24
107.186.62.0/24 maxlen: 24
107.186.81.0/24 maxlen: 24
136.0.223.0/24 maxlen: 24
142.111.189.0/24 maxlen: 24
142.111.216.0/24 maxlen: 24
142.111.220.0/24 maxlen: 24
142.111.240.0/24 maxlen: 24
142.111.252.0/24 maxlen: 24
142.252.41.0/24 maxlen: 24
142.252.53.0/24 maxlen: 24
142.252.139.0/24 maxlen: 24
142.252.158.0/24 maxlen: 24
142.252.173.0/24 maxlen: 24
142.252.174.0/24 maxlen: 24
142.252.212.0/24 maxlen: 24
142.252.216.0/24 maxlen: 24
142.252.219.0/24 maxlen: 24
166.88.32.0/24 maxlen: 24
166.88.34.0/24 maxlen: 24
166.88.44.0/24 maxlen: 24
166.88.66.0/24 maxlen: 24
172.121.3.0/24 maxlen: 24
172.121.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 20:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:85:19:01:ce:99:3c:81:1a:23:71:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jan 11 17:12:02 2024 GMT
Not After : Apr 10 16:12:02 2024 GMT
Subject: CN=9cd02e8a-3ebe-4296-a0e5-a0c368ca146e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f8:77:e3:23:70:c8:a9:0e:8c:67:1a:fa:c5:
3b:a3:ce:5d:e3:be:af:b4:e1:ff:16:ec:ab:fd:a0:
b2:75:2a:ae:f7:9d:2e:71:5f:48:e3:8c:da:07:75:
5a:09:4f:b9:6e:ff:b5:3a:83:f2:8a:d6:13:7b:5d:
d0:1e:d7:92:b1:94:0e:ac:74:c9:1a:54:a7:3f:e2:
7c:55:f7:52:79:de:aa:a6:ab:07:98:bd:96:ef:ab:
5c:f5:de:18:7c:ff:d5:65:03:61:fb:9d:3d:64:40:
11:4e:31:e9:98:40:b6:15:48:de:a7:38:ac:2b:76:
f4:f6:44:c1:3e:cb:79:2a:cd:bc:81:23:88:29:9c:
29:f2:6b:f2:58:8a:11:20:e2:b4:64:f9:c2:e6:00:
f5:cd:e4:83:d5:fd:48:7c:d5:85:20:af:a4:d7:7b:
78:b5:2d:5f:31:05:6d:19:0c:83:d2:43:ed:44:23:
ff:87:6e:d8:ca:33:f5:ba:2b:d8:bb:67:40:dc:7a:
99:da:ad:c5:57:d7:45:a1:ab:c2:ba:c1:e2:ff:31:
c9:b4:ac:71:78:2a:1e:8f:29:0d:14:bb:5b:a8:a9:
9a:c7:3a:b6:01:9d:a4:ea:9a:2d:b3:d3:b2:53:6d:
64:aa:19:68:8c:58:7f:41:ca:00:2d:02:cf:1f:3e:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:71:68:3A:F2:44:AF:3D:00:72:0A:79:2F:A7:21:31:61:2E:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a0c44d2-1724-3bbd-86e2-af1fe138e8c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
107.164.47.0/24
107.164.61.0/24
107.164.215.0/24
107.165.203.0/24
107.186.62.0/24
107.186.81.0/24
136.0.223.0/24
142.111.161.0/24
142.111.189.0/24
142.111.216.0/24
142.111.220.0/24
142.111.240.0/24
142.111.252.0/24
142.252.41.0/24
142.252.53.0/24
142.252.139.0/24
142.252.158.0/24
142.252.173.0-142.252.174.255
142.252.212.0/24
142.252.216.0/24
142.252.219.0/24
166.88.32.0/24
166.88.34.0/24
166.88.44.0/24
166.88.66.0/24
172.121.3.0/24
172.121.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:62:56:b8:e7:59:0f:47:86:10:ac:73:f8:96:fb:c8:3d:46:
3c:41:7e:21:9f:db:d5:c7:1c:6f:62:9e:9e:ce:14:cb:31:1f:
5b:cf:db:b4:ee:54:84:f9:af:16:e6:73:81:14:5f:4d:fd:76:
a8:44:de:8f:f7:17:cd:a6:e6:86:4c:63:9a:78:ee:4a:2a:f4:
57:71:dc:16:e0:9a:c3:1f:c4:e9:c3:bc:f5:52:80:31:68:00:
27:b5:98:f5:5f:a2:6b:69:bd:c2:6b:4e:84:10:85:b3:d5:94:
9b:89:cf:6d:a0:a5:f8:f1:3d:22:de:b1:70:94:90:db:14:47:
39:59:cb:2b:79:c1:31:1b:cb:a5:2c:80:15:43:77:81:eb:33:
b0:e4:60:a8:43:2b:7a:8f:48:10:e5:b6:96:01:bd:64:49:cb:
34:db:37:33:4f:5b:99:c8:c1:51:ad:6f:a3:fb:bc:78:e6:15:
5d:c2:f3:b6:09:54:5d:eb:61:5d:d8:b5:cd:16:78:25:f9:4d:
23:7c:3f:96:eb:4a:da:4f:ec:68:06:7d:1b:df:6c:45:f9:b1:
09:dc:e1:ab:79:f5:74:fd:37:4d:d2:94:5a:fd:a4:9f:5a:bb:
66:8c:08:6d:d5:6c:a7:a9:81:1b:57:5b:0e:02:aa:cf:91:7b:
3a:bb:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:51:24 2024 by rpki-client on console-fra.rpki-client.org