Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa
File: b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa (raw, json)
Hash identifier: aoqsGWwD5CMvpvN3sBe7kXWxduPYkSMpE+lEALS7Vt0=
Subject key identifier: 62:17:93:14:86:A6:2B:DF:08:E2:1B:71:19:26:7C:5D:52:93:2F:39
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285845410D4DE5902648EBA970F200
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa
Signing time: Tue 19 Mar 2024 01:00:24 +0000
ROA not before: Tue 19 Mar 2024 01:00:24 +0000
ROA not after: Mon 17 Jun 2024 01:00:24 +0000
asID: 30092
IP address blocks: 72.11.153.0/24 maxlen: 24
66.212.24.0/24 maxlen: 24
66.212.18.0/24 maxlen: 24
167.160.169.0/24 maxlen: 24
216.144.226.0/24 maxlen: 24
167.160.164.0/24 maxlen: 24
216.144.225.0/24 maxlen: 24
155.94.213.0/24 maxlen: 24
216.144.231.0/24 maxlen: 24
104.223.114.0/24 maxlen: 24
216.144.229.0/24 maxlen: 24
104.223.65.0/24 maxlen: 24
192.161.185.0/24 maxlen: 24
104.129.23.0/24 maxlen: 24
209.54.107.0/24 maxlen: 24
204.44.69.0/24 maxlen: 24
216.144.235.0/24 maxlen: 24
216.144.233.0/24 maxlen: 24
66.63.187.0/24 maxlen: 24
66.63.175.0/24 maxlen: 24
23.226.139.0/24 maxlen: 24
23.226.136.0/24 maxlen: 24
66.63.180.0/24 maxlen: 24
66.212.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 20:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:41:0d:4d:e5:90:26:48:eb:a9:70:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Mar 19 01:00:24 2024 GMT
Not After : Jun 17 01:00:24 2024 GMT
Subject: CN=9ceccb61-e296-46e2-8399-0659ffd20698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:c3:75:df:99:5a:72:89:89:08:69:4d:3c:
61:dc:dc:fc:7b:b8:ff:bf:65:4a:ea:15:ee:32:71:
b4:49:89:81:4d:65:3b:cd:8a:87:a3:37:e0:af:40:
3f:15:66:88:6c:5c:1e:24:42:f4:ec:0e:f1:17:a9:
61:a3:13:eb:ec:dc:c3:3e:06:87:41:b3:8d:c8:7d:
5d:e7:5a:7c:4a:d1:d5:4d:1b:41:31:ec:24:74:77:
90:71:5c:0f:24:02:76:db:83:9b:a2:ab:86:c8:de:
94:4d:b5:51:7f:ea:c9:64:e5:b5:50:d1:84:a6:82:
9f:a7:fe:2a:f8:50:51:52:2a:be:68:d6:a3:9b:df:
5d:75:a9:ef:1b:32:f5:1b:21:ad:7b:30:26:3d:58:
3c:0a:e3:f4:3c:20:50:23:27:ae:b9:30:f1:26:bf:
ce:c1:b7:3b:ef:9f:7e:f6:5b:c9:82:86:8e:75:19:
80:36:89:28:2a:c6:c9:0d:6e:0e:e7:72:c7:27:84:
51:22:bc:b4:a7:3d:9b:2c:b7:5e:87:1a:0d:48:20:
bd:ea:e0:78:4e:0a:b0:04:d7:85:8e:d2:5e:2a:c8:
f4:e0:9b:55:be:74:c2:2e:77:e7:c9:0b:d5:fe:d5:
c4:b2:5f:13:ed:04:91:0b:aa:b0:c6:81:df:82:0c:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:93:14:86:A6:2B:DF:08:E2:1B:71:19:26:7C:5D:52:93:2F:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b31dcde6-43e2-3f25-ad8e-8c8fc1183d7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.136.0/24
23.226.139.0/24
66.63.175.0/24
66.63.180.0/24
66.63.187.0/24
66.212.18.0/24
66.212.24.0/23
72.11.153.0/24
104.129.23.0/24
104.223.65.0/24
104.223.114.0/24
155.94.213.0/24
167.160.164.0/24
167.160.169.0/24
192.161.185.0/24
204.44.69.0/24
209.54.107.0/24
216.144.225.0-216.144.226.255
216.144.229.0/24
216.144.231.0/24
216.144.233.0/24
216.144.235.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c2:6f:bc:1c:7c:7b:ad:e2:93:a6:9f:a3:0b:61:54:62:8b:
75:a7:a3:21:13:68:ba:12:cd:d2:19:4b:80:aa:8a:4d:95:39:
5f:56:9b:a5:62:e8:79:d9:3b:b3:6a:e8:2f:6c:12:74:2d:13:
9c:48:ac:cc:40:c8:68:7f:61:47:4f:29:ca:a6:0f:b5:45:c2:
fc:c9:38:fc:e2:58:67:65:56:31:58:ac:73:0b:bc:3c:c8:71:
13:40:fe:f7:b7:96:8f:ee:2b:eb:68:04:08:bc:37:3c:52:6c:
d2:88:b8:66:db:24:7c:33:ac:07:58:6c:45:ad:eb:7f:4f:72:
19:18:6f:10:fd:7e:89:4f:1d:25:f0:87:aa:20:3d:0b:19:77:
0c:6f:fd:d1:69:cb:ed:d4:aa:91:d9:c2:f9:c9:20:e9:bf:de:
73:a3:b4:7f:bb:f1:ed:82:4c:ca:3f:b5:91:6f:fb:24:96:c5:
01:47:c5:46:03:ad:37:e6:37:2a:38:0a:bc:d9:00:67:d5:6e:
d3:9a:0c:b8:bf:8c:c0:f8:ce:22:5a:bb:96:11:0f:fc:98:31:
74:7b:eb:10:4f:7b:7c:fe:f8:11:5f:62:48:e0:3c:4e:55:99:
b7:95:dc:89:c5:cf:d1:f5:eb:4e:f3:4c:ae:ab:30:66:0f:2b:
8b:0d:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org