Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9105fa49-ac37-314a-a880-100e45a3ae8c.roa
File: 9105fa49-ac37-314a-a880-100e45a3ae8c.roa (raw, json)
Hash identifier: WZSckVvaHhmiGHs3DiiLeRjNeMS0Py36mZBjPXnMBvg=
Subject key identifier: 5A:32:DC:70:C7:27:8D:9A:18:F2:9E:F6:D4:80:C6:3E:C4:A4:43:D8
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285844DFA7839768F41C580411E1C0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9105fa49-ac37-314a-a880-100e45a3ae8c.roa
Signing time: Tue 13 Feb 2024 03:41:55 +0000
ROA not before: Tue 13 Feb 2024 03:41:55 +0000
ROA not after: Mon 13 May 2024 02:41:55 +0000
asID: 55154
IP address blocks: 155.94.202.0/24 maxlen: 24
72.11.138.0/24 maxlen: 24
66.63.170.0/24 maxlen: 24
66.63.165.0/24 maxlen: 24
64.188.29.0/24 maxlen: 24
67.215.248.0/24 maxlen: 24
66.63.182.0/24 maxlen: 24
66.212.21.0/24 maxlen: 24
67.215.228.0/24 maxlen: 24
104.223.64.0/24 maxlen: 24
104.223.39.0/24 maxlen: 24
104.129.28.0/24 maxlen: 24
104.223.3.0/24 maxlen: 24
104.129.51.0/24 maxlen: 24
96.44.169.0/24 maxlen: 24
104.129.23.0/24 maxlen: 24
104.223.12.0/24 maxlen: 24
155.94.221.0/24 maxlen: 24
155.94.237.0/24 maxlen: 24
155.94.246.0/24 maxlen: 24
155.94.152.0/24 maxlen: 24
104.223.66.0/24 maxlen: 24
104.223.70.0/24 maxlen: 24
104.223.124.0/24 maxlen: 24
104.223.117.0/24 maxlen: 24
155.94.191.0/24 maxlen: 24
161.129.69.0/24 maxlen: 24
204.152.209.0/24 maxlen: 24
167.160.165.0/24 maxlen: 24
192.161.63.0/24 maxlen: 24
204.44.104.0/24 maxlen: 24
204.152.205.0/24 maxlen: 24
209.54.98.0/24 maxlen: 24
209.54.99.0/24 maxlen: 24
209.54.108.0/24 maxlen: 24
216.144.227.0/24 maxlen: 24
216.144.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 04:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:df:a7:83:97:68:f4:1c:58:04:11:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Feb 13 03:41:55 2024 GMT
Not After : May 13 02:41:55 2024 GMT
Subject: CN=22e4e5be-5f1f-4d1e-88ef-49c2dde939f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0a:10:a9:bf:42:b6:97:32:4a:7a:e9:bd:24:
d3:e4:db:2f:60:9d:dd:e5:18:38:2f:1a:6c:89:89:
e8:c9:6b:99:5d:70:9b:09:7f:f9:36:93:50:1a:89:
f6:f5:f8:08:19:66:cb:f3:f4:84:c4:df:3e:27:e9:
91:1e:2f:98:1b:15:bb:44:df:a6:95:f2:a4:eb:27:
d5:dc:20:b4:5d:cc:50:42:99:dd:a8:df:be:d3:8d:
d5:77:02:bc:23:ad:1e:1a:7d:07:1d:fe:ee:df:2f:
1b:01:40:74:35:d2:c7:c1:63:98:9c:3b:09:72:dc:
0f:79:d2:71:8d:5e:48:f2:04:00:b3:1c:9b:4a:f0:
46:12:01:23:d2:d5:cb:13:cc:41:30:f1:1c:cf:7a:
aa:ba:46:28:01:5c:a9:0c:a5:b1:46:6d:c4:f2:9d:
eb:ec:4f:d8:62:52:ab:62:39:38:a0:97:9f:36:84:
a7:5d:91:7a:f5:21:19:61:13:8e:e1:ce:6f:c1:3b:
3c:43:bf:19:83:fa:d9:64:05:6f:40:89:ab:c0:9c:
d5:be:c5:e2:0b:4f:a8:b9:72:de:25:dc:c5:b5:e2:
86:70:40:95:f6:0e:f2:c6:45:60:c4:c4:a3:82:03:
a2:6b:a1:2e:b4:2b:fe:15:aa:74:15:fb:ae:17:9f:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:32:DC:70:C7:27:8D:9A:18:F2:9E:F6:D4:80:C6:3E:C4:A4:43:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/9105fa49-ac37-314a-a880-100e45a3ae8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.188.29.0/24
66.63.165.0/24
66.63.170.0/24
66.63.182.0/24
66.212.21.0/24
67.215.228.0/24
67.215.248.0/24
72.11.138.0/24
96.44.169.0/24
104.129.23.0/24
104.129.28.0/24
104.129.51.0/24
104.223.3.0/24
104.223.12.0/24
104.223.39.0/24
104.223.64.0/24
104.223.66.0/24
104.223.70.0/24
104.223.117.0/24
104.223.124.0/24
155.94.152.0/24
155.94.191.0/24
155.94.202.0/24
155.94.221.0/24
155.94.237.0/24
155.94.246.0/24
161.129.69.0/24
167.160.165.0/24
192.161.63.0/24
204.44.104.0/24
204.152.205.0/24
204.152.209.0/24
209.54.98.0/23
209.54.108.0/24
216.144.227.0/24
216.144.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d0:ca:51:56:18:b4:8d:73:67:de:e7:72:5b:e5:c6:6b:af:
e0:2f:1c:fe:6a:74:02:37:85:dc:e2:d7:e5:e0:2f:9b:20:3e:
63:1a:34:19:91:29:67:1a:4a:69:c3:e2:83:f4:1f:07:45:db:
83:9e:b0:d9:51:54:d5:7d:22:56:92:8a:95:e1:b4:19:e5:de:
2e:95:4b:a0:b4:af:5c:52:32:b5:80:66:9e:06:fc:3e:0f:4c:
08:1a:21:5d:02:fa:30:9a:93:05:9b:0d:b5:54:8b:76:0e:e1:
3d:84:55:5a:94:76:e8:78:08:30:3f:11:24:98:48:0d:60:c8:
ba:a0:3a:12:ef:5e:4f:9f:97:fc:c6:7c:26:4f:21:bb:a1:fb:
3d:92:3c:2f:b1:a5:71:93:08:af:cd:0a:39:ac:2e:24:f6:a6:
fd:cf:16:42:12:09:f7:27:c0:65:cd:81:98:1a:b1:40:19:29:
88:52:b4:34:46:e4:37:72:7b:dc:37:46:e0:31:8c:f8:60:68:
38:08:47:85:94:bc:36:47:ab:16:6a:55:64:ff:80:75:e9:40:
d3:c8:08:ef:0f:67:4d:b7:a3:73:9a:ed:37:1b:0a:43:ab:a0:
ec:e2:70:2c:d8:de:cf:23:bd:63:7f:97:bc:95:91:c6:c3:5d:
8f:57:89:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 12 08:44:19 2024 by rpki-client on console-fra.rpki-client.org