Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa
File: 3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa (raw, json)
Hash identifier: VIDZjsHIuJzRIkC+Jwf6oqxmrZHgDEHU46118iNZFeg=
Subject key identifier: A2:79:EE:1C:BC:08:01:E0:51:38:76:31:3E:99:19:EF:EF:EE:C5:FD
Certificate issuer: /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial: 010D0C9F43285844E31E05A77B03427DEC54BB00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa
Signing time: Wed 14 Feb 2024 09:28:07 +0000
ROA not before: Wed 14 Feb 2024 09:28:07 +0000
ROA not after: Tue 14 May 2024 08:28:07 +0000
asID: 3356
IP address blocks: 45.117.52.0/24 maxlen: 24
45.117.53.0/24 maxlen: 24
45.117.55.0/24 maxlen: 24
45.123.145.0/24 maxlen: 24
45.123.146.0/24 maxlen: 24
45.123.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 09:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:e3:1e:05:a7:7b:03:42:7d:ec:54:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Validity
Not Before: Feb 14 09:28:07 2024 GMT
Not After : May 14 08:28:07 2024 GMT
Subject: CN=30a4986c-baa1-4672-9203-5e30e9a10cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:0f:a5:31:a7:ac:35:58:94:1a:2d:29:79:
6d:ca:ef:a2:a6:68:d9:ad:08:64:d2:42:aa:7e:ef:
6a:57:52:6c:cd:e5:b3:93:b6:87:92:d0:39:a1:b8:
2f:74:c0:d9:7e:02:b7:1d:6a:ae:35:9d:d4:b0:93:
26:07:7a:ff:1a:92:93:80:6d:9d:87:a3:21:42:6d:
f9:34:63:1d:62:5f:07:55:25:5c:63:4b:27:0a:78:
23:c1:27:ca:e8:8b:59:d6:2c:be:74:eb:d0:82:1e:
06:8b:c6:81:66:b8:45:05:2e:9d:71:49:89:fa:7c:
15:22:dc:5f:26:6b:5f:e0:13:11:5a:2f:64:81:52:
51:97:49:e1:e4:64:0a:db:b2:ab:89:16:7d:d8:50:
da:45:c6:1e:16:c4:4f:16:08:89:b6:b2:e4:1c:16:
dc:e1:12:5e:3f:9f:2c:c0:09:29:c7:d9:04:a4:96:
b9:da:21:2a:0b:e9:8f:f0:00:cf:9e:25:21:d5:57:
4d:3f:9a:89:5d:87:2e:3b:24:ab:db:33:a4:24:03:
14:0b:e4:61:28:31:6a:72:18:d2:cb:19:c4:96:86:
b0:74:4c:f9:6b:a3:0e:d7:00:2e:5b:62:fb:a1:3e:
e0:f1:d9:50:36:61:33:ff:82:04:7e:97:11:f0:d6:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:EE:1C:BC:08:01:E0:51:38:76:31:3E:99:19:EF:EF:EE:C5:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
X509v3 Authority Key Identifier:
keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
sbgp-ipAddrBlock: critical
IPv4:
45.117.52.0/23
45.117.55.0/24
45.123.145.0-45.123.147.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:aa:d4:02:00:0a:11:30:f3:9d:1b:61:05:10:b2:ca:79:83:
bd:4a:8d:b7:ff:3d:94:05:3a:b9:0e:32:1a:41:e7:17:6b:a3:
9a:52:9a:32:25:a0:92:38:74:e2:12:36:e9:ab:51:f2:67:23:
0f:64:84:a7:59:32:a4:19:7d:86:74:5b:13:d2:a0:f5:03:66:
0c:29:b8:39:3e:60:41:eb:84:61:b7:5e:67:b4:0b:f1:49:b9:
26:15:5a:a5:78:39:97:b6:d5:03:b8:67:ff:66:77:cc:bd:38:
56:ca:c6:fd:8d:c0:db:67:c5:41:f0:29:38:49:06:e9:49:b4:
72:80:c7:b5:31:c3:54:aa:81:b5:b3:14:99:04:c7:35:f5:e6:
d8:51:dc:a6:79:41:f8:08:6a:77:91:2c:b8:4a:72:18:f2:27:
66:cb:3b:9d:50:b8:3a:30:94:ce:66:d7:84:89:d4:c1:e6:f8:
c9:75:8d:f2:9c:de:c6:74:8f:f9:81:34:76:7e:09:b7:65:61:
49:87:81:36:13:4a:39:ae:08:80:23:de:5f:19:e3:ba:d0:5f:
d9:95:80:09:78:30:00:2c:8d:ea:09:47:d5:99:a7:62:8e:f5:
54:83:da:67:1c:fb:2f:ff:b6:92:30:3f:9b:09:c1:49:96:e7:
84:66:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:41:44 2024 by rpki-client on console-fra.rpki-client.org