Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa
File: f8396403-aa57-3dc9-82af-4922429dc61a.roa (raw, json)
Hash identifier: gtrXB17m5t97ina/TNJw6PjpS6USph/AUaV11UTZcrE=
Subject key identifier: 6D:3C:7D:46:66:68:1A:DF:B3:E2:C3:40:67:6F:9C:A1:2A:2A:7F:A2
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F43285845C8EC2D6A13C11E1257E36400
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa
Signing time: Mon 06 May 2024 17:03:37 +0000
ROA not before: Mon 06 May 2024 17:03:37 +0000
ROA not after: Sun 04 Aug 2024 17:03:37 +0000
asID: 55154
IP address blocks: 96.44.169.0/24 maxlen: 24
66.63.182.0/24 maxlen: 24
64.188.29.0/24 maxlen: 24
66.63.165.0/24 maxlen: 24
66.63.170.0/24 maxlen: 24
67.215.228.0/24 maxlen: 24
67.215.248.0/24 maxlen: 24
72.11.138.0/24 maxlen: 24
104.129.23.0/24 maxlen: 24
155.94.191.0/24 maxlen: 24
155.94.202.0/24 maxlen: 24
155.94.221.0/24 maxlen: 24
155.94.237.0/24 maxlen: 24
155.94.246.0/24 maxlen: 24
161.129.69.0/24 maxlen: 24
167.160.165.0/24 maxlen: 24
192.161.63.0/24 maxlen: 24
204.44.104.0/24 maxlen: 24
204.152.205.0/24 maxlen: 24
204.152.209.0/24 maxlen: 24
209.54.98.0/24 maxlen: 24
209.54.99.0/24 maxlen: 24
209.54.108.0/24 maxlen: 24
216.144.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 22:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:c8:ec:2d:6a:13:c1:1e:12:57:e3:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: May 6 17:03:37 2024 GMT
Not After : Aug 4 17:03:37 2024 GMT
Subject: CN=6e301ef2-844f-4230-86f5-6aec7256da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:60:47:42:0a:53:9c:ea:ad:49:8c:a1:cd:
c6:8e:dd:97:98:6a:dc:41:09:3a:b9:90:76:0c:6d:
65:c7:0d:d9:a2:88:59:f6:95:f2:c3:ba:64:54:fc:
23:9b:9d:6e:b4:16:76:fb:b1:16:2e:65:60:e8:e7:
29:f3:f7:b7:71:c8:a0:9c:c1:5e:50:21:bf:19:5a:
3b:3b:f2:82:93:d9:32:df:54:23:83:b6:c1:00:f0:
2e:b7:c6:ce:b9:54:5f:c4:3d:0f:6b:16:d7:07:7f:
0e:84:57:f2:b6:9d:76:88:dc:0d:53:ed:da:aa:a7:
42:bd:f5:fe:7d:0f:39:f2:7e:98:e5:6c:2b:e9:66:
df:7f:eb:a2:5e:89:78:42:c2:76:68:a6:8c:47:4a:
dd:ad:0f:eb:c5:f4:a3:81:5d:02:1d:3e:dd:93:52:
56:7e:5f:96:e5:65:58:f1:73:bf:6e:26:aa:a8:92:
87:ca:35:9c:2a:67:b1:d6:ad:c2:50:49:4d:51:15:
5e:2a:f0:6e:0d:42:09:61:bc:60:fa:83:c3:56:92:
8f:06:c2:88:00:ee:fd:85:f3:bc:ad:ab:41:a1:5d:
cb:9d:79:32:99:c5:5e:a0:5e:cb:42:85:1f:b5:08:
19:3e:ff:ea:72:14:25:42:96:c8:98:43:c8:6e:77:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:7D:46:66:68:1A:DF:B3:E2:C3:40:67:6F:9C:A1:2A:2A:7F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f8396403-aa57-3dc9-82af-4922429dc61a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
64.188.29.0/24
66.63.165.0/24
66.63.170.0/24
66.63.182.0/24
67.215.228.0/24
67.215.248.0/24
72.11.138.0/24
96.44.169.0/24
104.129.23.0/24
155.94.191.0/24
155.94.202.0/24
155.94.221.0/24
155.94.237.0/24
155.94.246.0/24
161.129.69.0/24
167.160.165.0/24
192.161.63.0/24
204.44.104.0/24
204.152.205.0/24
204.152.209.0/24
209.54.98.0/23
209.54.108.0/24
216.144.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:fa:ba:90:90:d9:39:59:7a:c6:3d:e5:59:ed:d9:dc:1c:46:
c8:31:43:82:24:ed:cf:95:2e:f1:7d:d6:81:b5:d2:7c:da:84:
e1:55:1d:c2:60:c0:72:d0:3a:d3:3a:12:e5:ef:a1:c3:84:40:
01:1d:72:47:76:1a:e0:53:9a:47:90:8c:71:a3:14:af:d5:81:
43:1b:72:c7:be:fb:cd:81:f7:23:fe:2d:3e:c9:3c:fe:50:06:
48:61:63:12:8b:56:14:45:22:4d:31:61:44:fc:a6:75:cd:d6:
ca:20:3b:bd:d1:56:f7:bf:3c:68:e6:a1:44:09:65:05:9d:89:
9f:08:f0:c5:f0:19:a9:8e:15:38:b3:b6:9f:ff:3d:89:f4:0a:
c2:8e:26:c0:e7:ef:92:f3:e3:94:d6:8b:fd:68:70:52:9d:95:
7d:40:38:be:35:74:57:55:01:c1:6f:af:6a:47:4b:b0:d9:3f:
6f:6b:6f:d0:73:6e:20:66:c7:98:fd:12:be:37:19:f2:9b:16:
21:46:75:4c:cf:88:f9:ea:2a:6e:9c:c8:45:81:eb:8c:18:06:
b2:05:93:e1:f9:42:a2:65:6a:fe:c6:06:9a:cf:25:68:03:1b:
9e:4f:68:26:6c:5b:87:d3:36:c2:66:64:ea:47:74:f7:cb:ce:
6d:3c:34:5f
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWEXI7C1qE8EeElfjZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTI0MDUwNjE3MDMzN1oXDTI0MDgwNDE3MDMzN1owLzEtMCsGA1UEAxMk
NmUzMDFlZjItODQ0Zi00MjMwLTg2ZjUtNmFlYzcyNTZkYTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvxgR0IKU5zqrUmMoc3Gjt2XmGrcQQk6uZB2
DG1lxw3ZoohZ9pXyw7pkVPwjm51utBZ2+7EWLmVg6Ocp8/e3ccignMFeUCG/GVo7
O/KCk9ky31Qjg7bBAPAut8bOuVRfxD0PaxbXB38OhFfytp12iNwNU+3aqqdCvfX+
fQ858n6Y5Wwr6Wbff+uiXol4QsJ2aKaMR0rdrQ/rxfSjgV0CHT7dk1JWfl+W5WVY
8XO/biaqqJKHyjWcKmex1q3CUElNURVeKvBuDUIJYbxg+oPDVpKPBsKIAO79hfO8
ratBoV3LnXkymcVeoF7LQoUftQgZPv/qchQlQpbImEPIbnel5wIDAQABo4ID3jCC
A9owHQYDVR0OBBYEFG08fUZmaBrfs+LDQGdvnKEqKn+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvZjgzOTY0MDMtYWE1Ny0z
ZGM5LTgyYWYtNDkyMjQyOWRjNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBABA
vB0DBABCP6UDBABCP6oDBABCP7YDBABD1+QDBABD1/gDBABIC4oDBABgLKkDBABo
gRcDBACbXr8DBACbXsoDBACbXt0DBACbXu0DBACbXvYDBAChgUUDBACnoKUDBADA
oT8DBADMLGgDBADMmM0DBADMmNEDBAHRNmIDBADRNmwDBADYkOcwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
bPq6kJDZOVl6xj3lWe3Z3BxGyDFDgiTtz5Uu8X3WgbXSfNqE4VUdwmDActA60zoS
5e+hw4RAAR1yR3Ya4FOaR5CMcaMUr9WBQxtyx777zYH3I/4tPsk8/lAGSGFjEotW
FEUiTTFhRPymdc3WyiA7vdFW9788aOahRAllBZ2JnwjwxfAZqY4VOLO2n/89ifQK
wo4mwOfvkvPjlNaL/WhwUp2VfUA4vjV0V1UBwW+vakdLsNk/b2tv0HNuIGbHmP0S
vjcZ8psWIUZ1TM+I+eoqbpzIRYHrjBgGsgWT4flComVq/sYGms8laAMbnk9oJmxb
h9M2wmZk6kd098vObTw0Xw==
-----END CERTIFICATE-----
Generated at Sat Jul 20 00:02:56 2024 by rpki-client on console-ams.rpki-client.org