Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9db02d58-b7b3-3346-9867-48fa027355b8.roa
File: 9db02d58-b7b3-3346-9867-48fa027355b8.roa (raw, json)
Hash identifier: RN9BaHGiPFLPzbVB0fP3tv3NIKulN7g3D+AFi6WPQJs=
Subject key identifier: 75:0B:4D:B8:97:5C:B1:95:03:8A:42:F0:AB:BD:43:E7:1E:CF:84:A8
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F432858475A7CB2D3BEDB2CE6952F1180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9db02d58-b7b3-3346-9867-48fa027355b8.roa
Signing time: Fri 27 Sep 2024 13:13:57 +0000
ROA not before: Fri 27 Sep 2024 13:13:57 +0000
ROA not after: Thu 26 Dec 2024 14:13:57 +0000
asID: 5650
IP address blocks: 23.230.215.0/24 maxlen: 24
45.38.250.0/24 maxlen: 24
45.39.52.0/24 maxlen: 24
45.39.87.0/24 maxlen: 24
45.39.171.0/24 maxlen: 24
45.39.178.0/24 maxlen: 24
45.39.185.0/24 maxlen: 24
45.39.188.0/24 maxlen: 24
45.39.239.0/24 maxlen: 24
104.165.16.0/24 maxlen: 24
104.165.67.0/24 maxlen: 24
104.252.51.0/24 maxlen: 24
104.252.158.0/24 maxlen: 24
104.252.240.0/24 maxlen: 24
142.252.3.0/24 maxlen: 24
142.252.154.0/24 maxlen: 24
172.120.23.0/24 maxlen: 24
172.252.230.0/24 maxlen: 24
205.164.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:5a:7c:b2:d3:be:db:2c:e6:95:2f:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 27 13:13:57 2024 GMT
Not After : Dec 26 14:13:57 2024 GMT
Subject: CN=38c292af-8680-40ac-bd9f-d7c5b2588679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:a1:a0:d2:7e:4a:3f:3b:48:7a:3f:aa:00:
e4:de:81:83:bd:d2:94:7f:69:b8:e2:51:30:1a:34:
17:99:32:37:f5:27:78:b3:5e:a4:b0:b8:6d:93:76:
11:ff:4c:b8:ee:ee:9d:66:ef:e5:63:4c:05:39:0f:
fc:f7:59:f9:f7:3e:5b:cb:71:ef:bc:d0:bd:b8:eb:
fb:7a:f8:a4:ec:3c:43:c2:2e:66:3d:fd:45:34:ea:
65:56:f0:6a:fe:63:ad:dc:69:ed:95:5c:5b:33:fd:
d6:54:6a:2e:43:c4:f2:bf:2f:8d:8f:6a:dd:0e:06:
5b:d6:65:7f:fb:4e:45:42:de:9f:12:82:4a:5e:6f:
a6:4c:df:fe:72:c8:22:84:a0:33:c6:8f:54:af:88:
98:4a:ca:f6:11:52:08:d3:a1:08:a0:56:1e:15:68:
cb:60:c0:1f:e0:ae:e7:43:db:a5:a7:fe:82:0d:ae:
f9:71:94:b2:c1:a6:e7:08:0a:b9:88:b2:97:95:a6:
e0:57:bc:33:d4:50:81:a1:39:c0:dc:28:91:cf:7a:
62:0b:61:bf:71:cb:39:89:b9:41:30:0b:20:fc:49:
7b:23:d3:fb:cd:e7:4f:e5:3c:7b:ef:5f:2d:f8:d1:
15:37:69:fa:1d:a8:3b:08:70:4f:10:a2:1d:21:02:
7f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:4D:B8:97:5C:B1:95:03:8A:42:F0:AB:BD:43:E7:1E:CF:84:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9db02d58-b7b3-3346-9867-48fa027355b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.215.0/24
45.38.250.0/24
45.39.52.0/24
45.39.87.0/24
45.39.171.0/24
45.39.178.0/24
45.39.185.0/24
45.39.188.0/24
45.39.239.0/24
104.165.16.0/24
104.165.67.0/24
104.252.51.0/24
104.252.158.0/24
104.252.240.0/24
142.252.3.0/24
142.252.154.0/24
172.120.23.0/24
172.252.230.0/24
205.164.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:64:6f:7e:48:84:2d:f7:1f:87:0e:73:b1:e1:50:db:a0:91:
e5:fe:91:b3:02:4d:a4:7e:17:0e:cb:30:c1:e0:0f:5c:42:dd:
91:e7:95:b0:a2:d5:21:1d:04:15:ff:cd:ec:12:0f:1b:99:ad:
0f:21:0f:00:4d:34:6b:ba:bd:c7:71:9d:fe:61:bb:be:25:c2:
2b:9e:73:23:e9:c9:89:d3:6c:81:cb:d1:e0:2b:d3:52:bc:fa:
ea:ce:5d:5a:a9:b5:5b:1e:31:68:11:6f:dd:e3:97:d5:d4:3b:
da:b4:d0:bb:da:5e:4e:28:37:18:f6:ed:a1:31:ba:39:27:c0:
df:85:50:67:2b:d7:b8:f7:ad:d1:2a:91:32:a2:3d:a3:c7:b6:
b5:d8:d4:a7:b1:e1:86:65:87:4d:61:7d:b2:2c:98:bc:d3:79:
27:5f:da:74:f8:81:91:aa:24:9c:0b:3b:f4:64:2a:b6:43:3d:
a4:35:e5:c3:4c:19:54:01:f1:01:c9:27:3a:92:54:85:06:ca:
36:78:79:31:85:c1:b8:5a:2d:24:b4:28:f7:47:f2:69:cf:e6:
94:fa:eb:ae:19:13:23:83:36:61:aa:d7:68:b9:e5:c9:0e:6d:
b4:25:7d:ce:ab:7c:80:22:ad:89:bd:d3:69:e1:ec:c7:31:98:
90:50:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:09 2024 by rpki-client on console-ams.rpki-client.org