Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/27e888d0-7385-317c-a3b0-9454d269d414.roa
File: 27e888d0-7385-317c-a3b0-9454d269d414.roa (raw, json)
Hash identifier: IdQYUbMRH+rqGU+0HLBWZjXNSdcbbYXUkAlJHCJumYE=
Subject key identifier: 0A:F4:78:C4:3A:40:45:93:BA:94:E2:D5:FB:7C:22:26:FF:3E:69:6E
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844C6550B55A8158D7A86845980
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/27e888d0-7385-317c-a3b0-9454d269d414.roa
Signing time: Sun 04 Feb 2024 02:00:25 +0000
ROA not before: Sun 04 Feb 2024 02:00:25 +0000
ROA not after: Sat 04 May 2024 01:00:25 +0000
asID: 55154
IP address blocks: 155.94.236.0/24 maxlen: 24
155.94.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 03:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:c6:55:0b:55:a8:15:8d:7a:86:84:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Feb 4 02:00:25 2024 GMT
Not After : May 4 01:00:25 2024 GMT
Subject: CN=a2bcbb6e-d5c2-4b96-8772-c2d5d6128bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f4:87:e3:e8:aa:16:99:85:27:12:7d:08:4e:
c7:b4:a9:0d:6e:10:67:88:27:64:96:39:ad:23:db:
e1:ed:ad:3c:3a:0f:cd:60:64:38:99:2a:bf:60:30:
9a:2e:0b:fb:2c:e6:4d:52:bd:b4:f4:0c:05:de:27:
2f:b8:81:97:90:6f:43:95:50:f0:c5:8f:08:a2:ee:
6c:04:44:74:9f:ce:dc:cc:8b:81:8c:3f:aa:28:c3:
2c:7d:67:83:b3:21:72:23:79:8e:b0:4c:d5:31:0f:
9a:a5:22:23:a4:b1:ea:46:36:83:7d:d5:cf:78:b0:
a4:fe:08:d3:c3:eb:09:db:21:90:80:f8:7e:48:66:
00:04:df:d0:5f:16:a1:1f:a3:26:c7:3d:e4:3a:d5:
83:a4:6a:2b:ec:6b:16:3f:a3:4f:4c:77:f9:5c:26:
3d:01:de:f2:d0:30:0c:25:65:ef:1a:80:b7:e1:cf:
96:27:2a:e3:47:67:ae:c2:75:37:61:86:a4:da:bf:
ff:b9:a4:35:d3:19:15:b0:0c:f2:5e:cc:e4:d6:df:
d4:ef:41:1c:72:7a:8d:06:24:2c:52:9a:14:7f:08:
df:ff:12:ae:9d:ac:27:bd:f7:f8:ec:a1:50:9d:eb:
12:dc:10:02:72:67:68:25:31:5c:ca:d7:ed:ee:73:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:78:C4:3A:40:45:93:BA:94:E2:D5:FB:7C:22:26:FF:3E:69:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/27e888d0-7385-317c-a3b0-9454d269d414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.202.0/24
155.94.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:12:1f:93:32:b3:75:0d:ec:6a:78:cd:de:e9:d7:51:62:07:
81:ce:d4:23:f0:50:05:74:c0:e8:61:16:45:0e:93:2a:d5:1b:
dc:7e:40:89:5f:8d:58:ea:54:44:c0:72:0d:6e:88:db:0f:ae:
65:9a:ea:9d:02:35:5e:00:11:34:58:f5:87:2d:be:66:17:86:
9f:eb:33:23:8b:7b:d6:50:9c:e6:c4:85:47:70:de:04:f3:5b:
95:96:6e:c4:5f:fc:ad:33:e0:f3:15:f2:a3:54:54:d4:b9:84:
4a:ab:e7:da:b2:dc:25:60:82:44:d0:c5:6f:3a:07:54:94:dd:
c7:84:32:37:23:a6:c2:c0:20:a4:7c:49:10:d6:2a:83:1d:19:
b4:ed:03:5f:1a:bd:62:04:0b:4d:86:ca:91:47:8b:4f:4d:78:
a0:a9:51:cc:c0:74:9b:48:61:be:e5:11:2e:b9:16:c7:0b:2c:
f8:ca:6d:57:47:da:5c:4b:b6:d4:c6:37:d7:7c:f6:46:26:c4:
8f:29:b9:05:6a:50:15:db:0b:42:8f:d7:e2:db:82:e1:5d:d4:
f4:e0:b2:da:4f:7e:93:da:87:30:40:22:1f:b3:82:c8:12:9d:
06:e9:12:42:cf:99:4f:e7:e4:df:08:12:dd:7e:29:40:81:4d:
13:7a:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 05:10:15 2024 by rpki-client on console-fra.rpki-client.org