Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e97e3f2-ba57-3158-a05c-f040034f20b7.roa
File: 0e97e3f2-ba57-3158-a05c-f040034f20b7.roa (raw, json)
Hash identifier: Lsdc6+jiS7zsmS5cGOJUnoWd60x/BGb1des3XyA6bRQ=
Subject key identifier: 5B:91:7D:BF:D1:2F:E0:AD:84:68:E8:21:34:40:38:BC:2A:AF:54:CB
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6E9A536E175D45273700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e97e3f2-ba57-3158-a05c-f040034f20b7.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.165.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6e:9a:53:6e:17:5d:45:27:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a879a3f7-3bbc-4fd8-be4a-0e8d94d91cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:0f:dd:3d:bf:4e:93:20:0e:57:49:0a:6e:
dc:03:32:e6:28:e2:0a:59:f2:72:46:e5:bf:86:00:
bb:b5:a1:17:ff:35:78:00:08:6c:f9:38:01:cd:40:
04:04:3c:5b:3e:e1:71:63:dd:9c:59:4c:71:25:2e:
fc:7c:fd:61:8d:5c:ca:74:ea:31:52:10:5e:64:5d:
68:4d:26:1f:5a:b0:7c:32:b4:37:b5:c7:81:3f:b4:
68:09:8d:2b:d6:48:91:f0:9e:42:73:e3:b2:37:e5:
23:35:23:23:d0:a2:53:98:80:4b:be:4f:08:c3:a1:
ed:02:a5:c7:66:74:07:8e:41:01:d6:ad:4e:0d:11:
cf:71:73:77:1e:ed:48:68:01:cc:77:15:e3:df:b5:
cf:a5:a9:f2:2c:c2:cd:ef:15:79:35:1c:83:fe:ac:
83:23:f5:1b:3c:cc:e7:d1:13:09:b1:47:ab:51:62:
23:7b:5f:53:dc:e3:af:ac:4b:1a:46:2f:c9:08:b9:
ce:7b:44:3d:85:20:b8:ba:54:e1:c7:33:e6:84:18:
40:d3:ac:11:47:b8:2c:7c:18:e3:b9:dc:0f:0b:35:
0d:63:a9:0b:16:22:d5:86:09:90:d4:79:73:f8:16:
23:65:65:8a:a8:e2:d7:50:16:95:83:5b:d1:73:02:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:7D:BF:D1:2F:E0:AD:84:68:E8:21:34:40:38:BC:2A:AF:54:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0e97e3f2-ba57-3158-a05c-f040034f20b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:d8:dd:92:ca:78:ba:e4:02:a1:60:7d:73:bb:9e:11:84:b4:
2c:a1:bf:06:98:ee:c9:cc:0b:04:08:ac:8d:19:ae:d4:6e:ea:
7e:e5:3c:6e:c2:a9:d8:d2:e0:26:6c:d3:d3:63:b2:8d:f9:7b:
6e:99:c7:76:16:31:c4:9d:94:2d:3d:8f:41:f9:6b:d8:43:2f:
6b:c0:0e:fe:7e:8f:23:e8:86:6c:22:5f:bc:aa:0c:e5:cc:13:
cb:fe:ec:42:e5:a9:aa:05:0d:f1:e2:af:b7:0a:98:1a:fe:6b:
30:a2:8a:67:4f:ac:df:6b:b3:e0:5e:a9:87:07:7c:39:ec:a6:
57:7b:67:bc:0e:7a:3a:f8:27:57:1e:0f:73:c6:ee:35:ac:df:
4e:44:b7:11:a4:ef:f5:8a:9d:3f:e9:bb:9d:a2:41:65:5c:79:
63:cf:4a:03:6a:13:9f:9b:5a:6b:ee:ce:2b:03:26:ec:80:86:
7d:db:9f:f5:dd:80:3e:05:9b:ad:f6:e9:4c:43:1b:35:5f:f4:
db:aa:b0:82:d7:96:9f:fc:66:a5:b4:77:50:fa:29:f8:68:78:
a4:ff:27:48:8d:51:f1:17:18:09:42:ef:0b:4c:f5:76:b5:19:
37:e6:83:9e:14:fe:f7:26:9f:a8:37:de:17:6a:07:69:62:6b:
ff:44:de:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:01 2025 by rpki-client