Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af775817-f972-32bd-a5bc-d761b92bbff1.roa
File: af775817-f972-32bd-a5bc-d761b92bbff1.roa (raw, json)
Hash identifier: 2hZLH0fcJiWjKA0wmlATDNbT660k+A3qLCjs4fdCL0Y=
Subject key identifier: FC:26:57:F9:AA:09:44:23:AF:1D:20:06:2A:72:B2:6C:10:8B:F1:D7
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328583B72E58BF6C5C712D93B3B5EC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af775817-f972-32bd-a5bc-d761b92bbff1.roa
Signing time: Wed 26 Aug 2020 04:00:00 +0000
ROA not before: Wed 26 Aug 2020 04:00:00 +0000
ROA not after: Thu 04 Jan 2024 05:00:00 +0000
asID: 7922
IP address blocks: 104.165.160.0/24 maxlen: 24
104.165.75.0/24 maxlen: 24
104.165.106.0/24 maxlen: 24
104.164.177.0/24 maxlen: 24
50.118.213.0/24 maxlen: 24
104.164.162.0/24 maxlen: 24
104.164.164.0/24 maxlen: 24
104.164.213.0/24 maxlen: 24
104.165.77.0/24 maxlen: 24
104.165.139.0/24 maxlen: 24
104.165.192.0/24 maxlen: 24
104.252.4.0/24 maxlen: 24
104.252.10.0/24 maxlen: 24
104.252.16.0/24 maxlen: 24
104.252.25.0/24 maxlen: 24
104.252.64.0/24 maxlen: 24
104.252.65.0/24 maxlen: 24
104.252.91.0/24 maxlen: 24
104.252.92.0/24 maxlen: 24
104.252.94.0/24 maxlen: 24
104.252.109.0/24 maxlen: 24
104.252.137.0/24 maxlen: 24
104.252.149.0/24 maxlen: 24
104.252.152.0/24 maxlen: 24
104.252.156.0/24 maxlen: 24
104.252.186.0/24 maxlen: 24
104.252.234.0/24 maxlen: 24
104.252.254.0/24 maxlen: 24
104.253.14.0/24 maxlen: 24
104.253.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3b:72:e5:8b:f6:c5:c7:12:d9:3b:3b:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 26 04:00:00 2020 GMT
Not After : Jan 4 05:00:00 2024 GMT
Subject: CN=58d39f96-5505-4dd8-ad71-9fb0db01c796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:a2:cc:ed:8a:35:62:28:a2:c2:eb:40:66:
4b:2a:61:03:b8:24:a0:f5:6d:86:bc:9a:c9:bf:50:
ea:1f:0d:a6:d9:16:9b:1d:61:06:c7:0f:47:b6:ec:
80:2f:58:71:1a:db:96:a0:98:8b:68:cb:43:ed:91:
81:91:a6:f7:79:3d:0b:dd:b8:9f:66:e1:38:17:0b:
b4:94:7c:93:06:ce:a3:ec:2f:ce:2c:98:0d:3a:d7:
f4:16:9c:7c:8c:ab:c2:9b:18:fa:51:55:b8:bf:64:
00:93:26:1d:b1:bb:2c:b8:e3:39:5c:19:cf:fe:70:
30:fa:99:cf:51:e7:7e:95:5f:69:e5:3b:c5:2f:3d:
4a:dd:b8:71:e7:af:d1:56:6a:f7:d2:25:a5:8b:e6:
f5:41:ce:17:94:5c:08:0a:02:63:2f:fe:7e:a6:09:
a4:d2:5a:27:5d:9a:35:2c:d4:28:7b:05:83:b4:4e:
88:1f:71:01:f9:19:08:d3:a7:2a:67:54:4a:16:6b:
ec:7d:19:a8:ff:56:4c:40:ba:95:b4:f7:c6:8f:6c:
32:69:9e:05:f7:50:5c:25:e6:4a:e0:1e:5e:3b:d9:
58:53:e9:3a:05:03:bc:8f:58:ea:f3:9c:1a:50:4f:
75:22:c6:9a:46:a4:01:27:82:a6:eb:dc:90:e2:10:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:57:F9:AA:09:44:23:AF:1D:20:06:2A:72:B2:6C:10:8B:F1:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af775817-f972-32bd-a5bc-d761b92bbff1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
50.118.213.0/24
104.164.162.0/24
104.164.164.0/24
104.164.177.0/24
104.164.213.0/24
104.165.75.0/24
104.165.77.0/24
104.165.106.0/24
104.165.139.0/24
104.165.160.0/24
104.165.192.0/24
104.252.4.0/24
104.252.10.0/24
104.252.16.0/24
104.252.25.0/24
104.252.64.0/23
104.252.91.0-104.252.92.255
104.252.94.0/24
104.252.109.0/24
104.252.137.0/24
104.252.149.0/24
104.252.152.0/24
104.252.156.0/24
104.252.186.0/24
104.252.234.0/24
104.252.254.0/24
104.253.14.0/24
104.253.22.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bb:2c:41:08:bd:f5:00:a7:e1:f4:3e:bc:d5:1d:09:aa:4f:
9d:b1:fa:16:c5:cd:75:22:71:de:96:c1:10:07:07:0f:2e:b8:
f6:f6:e1:b2:4f:be:b0:22:d2:86:3a:4d:60:d0:d8:50:83:4a:
a9:b0:05:66:56:1b:16:d0:cb:08:15:60:0f:1c:eb:00:b0:26:
17:64:8d:7a:30:3a:02:b2:2f:43:31:e2:7c:03:84:dd:f8:e5:
9e:46:7d:9d:f9:bb:4e:15:7e:bf:cc:b6:b5:83:0f:fe:20:85:
46:9b:9e:e5:69:4a:79:99:8e:3d:1b:a6:7a:c9:56:c0:01:4b:
b9:cf:54:cb:09:1c:97:e5:2a:51:9b:4a:ba:33:f8:c2:38:d5:
10:1a:bb:b8:92:e9:6b:6a:d2:6a:9c:c9:75:49:8c:09:d8:17:
f3:ea:5b:dd:b8:1f:32:b8:a9:98:c7:08:05:af:43:cf:9b:5d:
8a:41:02:47:ac:b5:f0:b4:66:f9:65:03:fa:c1:17:62:cc:e9:
55:99:00:d8:a6:f4:36:94:c7:3e:9e:c5:61:df:60:5f:60:3b:
d7:69:11:7d:5a:8a:71:4c:45:85:6a:42:5b:6d:ae:03:23:de:
37:ae:a5:88:44:9f:cf:8f:42:28:2c:3f:d5:87:da:c2:79:b7:
d4:84:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:57 2023 by rpki-client on console-fra.rpki-client.org