Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb823c51-f537-3278-9b47-646ee59ae5eb.roa
File: fb823c51-f537-3278-9b47-646ee59ae5eb.roa (raw, json)
Hash identifier: gFKOG7X7eywNgvVfDrGyirXQqRgnnVX0JcNifmxZTc4=
Subject key identifier: 11:A9:BE:6D:F2:EF:A6:16:CB:37:F5:15:EC:97:8F:C8:A8:B9:D0:EC
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F43285843281391EF3F3C2BD6208B5880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb823c51-f537-3278-9b47-646ee59ae5eb.roa
Signing time: Fri 08 Sep 2023 16:43:58 +0000
ROA not before: Fri 08 Sep 2023 16:43:58 +0000
ROA not after: Thu 07 Dec 2023 17:43:58 +0000
asID: 11351
IP address blocks: 45.39.239.0/24 maxlen: 24
45.39.171.0/24 maxlen: 24
45.38.250.0/24 maxlen: 24
45.39.52.0/24 maxlen: 24
45.39.87.0/24 maxlen: 24
45.39.178.0/24 maxlen: 24
45.39.185.0/24 maxlen: 24
45.39.188.0/24 maxlen: 24
104.165.16.0/24 maxlen: 24
104.252.51.0/24 maxlen: 24
104.252.158.0/24 maxlen: 24
104.252.240.0/24 maxlen: 24
104.253.49.0/24 maxlen: 24
107.165.213.0/24 maxlen: 24
107.165.230.0/24 maxlen: 24
107.186.6.0/24 maxlen: 24
107.186.54.0/24 maxlen: 24
107.186.65.0/24 maxlen: 24
107.186.232.0/24 maxlen: 24
107.187.126.0/24 maxlen: 24
136.0.68.0/24 maxlen: 24
136.0.83.0/24 maxlen: 24
136.0.209.0/24 maxlen: 24
142.111.143.0/24 maxlen: 24
142.252.3.0/24 maxlen: 24
142.252.154.0/24 maxlen: 24
166.88.78.0/24 maxlen: 24
172.120.23.0/24 maxlen: 24
205.164.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:28:13:91:ef:3f:3c:2b:d6:20:8b:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 8 16:43:58 2023 GMT
Not After : Dec 7 17:43:58 2023 GMT
Subject: CN=7d8e2459-bf1b-4106-bf55-645bd57a7adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:6a:45:0f:ed:2c:ef:f3:44:12:64:bc:af:
a7:9a:c1:e0:6e:45:77:b5:bf:c4:bd:94:39:1d:c3:
c1:7d:bb:a7:fe:0f:7b:69:c9:7b:1f:ef:44:96:bf:
5a:30:56:6d:05:5e:6c:68:17:1b:1b:54:f7:28:ac:
34:55:bb:f7:b2:b0:27:45:7d:d0:e9:3a:74:e4:be:
3b:e2:7b:5d:73:76:9a:b4:8c:14:87:f5:f3:e1:48:
fd:bb:ab:a6:47:fc:49:bb:79:a2:fd:40:fb:d8:75:
2e:10:63:96:e6:70:31:5a:bb:c1:0c:e9:f8:69:20:
f3:37:d2:bb:c9:5c:f0:d6:25:4f:d4:c3:b7:8e:5c:
b9:ca:9b:f3:ae:b3:64:25:9d:e3:ba:b4:45:06:63:
af:0f:77:d8:df:c6:a0:ef:c9:76:b0:5b:b5:f0:50:
09:dc:e6:f8:23:7d:3a:26:29:74:0a:c8:ef:e9:e2:
c7:86:b8:e9:d8:1c:a1:32:f2:57:fd:71:3f:a1:53:
d4:3c:86:ea:35:a6:34:85:07:6a:aa:27:c4:27:fd:
28:ea:b5:19:d1:60:f6:23:fe:93:79:0b:0d:b6:c1:
89:69:0a:b6:e9:f6:6f:90:b4:88:5c:f9:7b:4f:46:
36:15:b7:8c:91:91:b3:0a:ec:75:93:1a:74:95:7d:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A9:BE:6D:F2:EF:A6:16:CB:37:F5:15:EC:97:8F:C8:A8:B9:D0:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fb823c51-f537-3278-9b47-646ee59ae5eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
45.38.250.0/24
45.39.52.0/24
45.39.87.0/24
45.39.171.0/24
45.39.178.0/24
45.39.185.0/24
45.39.188.0/24
45.39.239.0/24
104.165.16.0/24
104.252.51.0/24
104.252.158.0/24
104.252.240.0/24
104.253.49.0/24
107.165.213.0/24
107.165.230.0/24
107.186.6.0/24
107.186.54.0/24
107.186.65.0/24
107.186.232.0/24
107.187.126.0/24
136.0.68.0/24
136.0.83.0/24
136.0.209.0/24
142.111.143.0/24
142.252.3.0/24
142.252.154.0/24
166.88.78.0/24
172.120.23.0/24
205.164.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:5d:31:f3:00:8b:8b:74:48:5f:d0:2b:19:d4:8a:e8:57:a6:
80:e4:72:e0:4a:00:e1:d9:8f:ef:f2:1b:ae:4b:f2:50:80:5a:
2f:5a:65:c1:de:08:a8:66:c6:d7:71:0c:52:2a:2c:7a:b7:95:
93:c1:be:dd:f0:54:ef:e1:c5:b2:48:51:80:8c:6d:1e:2f:e4:
59:b6:8c:60:56:59:52:4a:7a:33:c9:c2:b7:d6:3a:55:c9:96:
13:53:5f:e1:3d:ca:6f:11:1e:aa:6a:98:0b:7d:02:4e:78:36:
2b:98:b3:e1:02:f7:86:4d:fb:bd:28:d7:9e:9d:48:a7:24:75:
e1:6e:4b:03:0e:79:a5:57:85:a8:cd:69:83:15:f0:d1:9f:fc:
aa:0b:d2:f9:d1:12:69:a5:c9:d1:f6:41:7e:cc:70:2f:db:e7:
64:c3:d9:7d:66:84:21:85:ce:0f:15:9b:97:7c:c4:65:cf:13:
e2:f1:b2:ac:a8:ce:00:77:69:8d:05:10:c0:82:68:aa:3a:47:
38:4b:8b:0d:cb:1a:c0:a8:6b:8c:df:99:73:e2:08:61:49:a8:
a7:4c:63:74:8d:c5:02:25:45:21:6f:81:f3:5a:ba:b8:d6:cf:
a2:35:e8:34:d9:19:81:e9:2a:f1:ec:2f:94:7d:ac:aa:82:02:
01:4c:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 23:56:23 2023 by rpki-client on console-ams.rpki-client.org