Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21fb1f76-2a84-3d99-8769-57a740950980.roa
File: 21fb1f76-2a84-3d99-8769-57a740950980.roa (raw, json)
Hash identifier: 50D13bdemUa5l4biDwZGisYDcIZrlZGJH9RKgL3oZcM=
Subject key identifier: 80:B9:46:F5:89:AF:37:1A:3B:CE:8F:EA:85:2E:42:CA:D2:19:23:C9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A62463508B7487FA828A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21fb1f76-2a84-3d99-8769-57a740950980.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.174.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:62:46:35:08:b7:48:7f:a8:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f3587d49-0fd7-4cc1-af26-7225f962e2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:4b:7a:7d:47:f7:21:92:87:da:be:a2:73:
9a:6a:19:80:9f:3b:8a:ad:45:5c:c8:75:01:25:21:
00:aa:a2:b6:e2:5f:50:70:2a:06:10:1c:fa:2e:09:
76:d1:0e:03:69:e9:0c:fe:b3:96:72:f3:0f:13:60:
55:71:05:40:8c:83:a6:b6:2b:7d:cc:95:26:81:8b:
7a:bc:ef:89:9b:c9:f6:76:32:82:2c:d2:6c:c6:1a:
7e:d1:35:15:2e:51:73:23:fb:67:a9:12:c2:74:05:
82:27:7b:ba:59:41:89:9c:91:04:5f:c8:bf:f0:d0:
49:6e:dd:dd:2a:df:5a:76:11:12:ef:10:e8:bb:77:
0e:d5:f5:e4:d3:4f:7c:f3:c8:01:c8:27:37:a4:c0:
31:db:20:10:39:05:59:a1:a7:42:ac:f7:13:c1:b3:
ae:8d:14:47:d8:af:61:7e:31:0b:30:e9:53:47:bd:
33:18:f2:73:bb:59:4f:dd:0f:2b:32:d9:53:42:ad:
f6:f7:a9:0c:90:63:ab:7a:27:c8:fa:e0:62:48:9e:
21:35:0f:e9:3a:78:7a:a5:5e:3c:6c:9e:9a:94:e7:
fd:9b:1d:d6:17:dc:48:4e:2d:9a:6f:3d:b6:71:12:
00:a2:2b:d9:72:2c:d8:6c:44:d7:e4:c3:62:6a:2c:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:46:F5:89:AF:37:1A:3B:CE:8F:EA:85:2E:42:CA:D2:19:23:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21fb1f76-2a84-3d99-8769-57a740950980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:17:4a:99:b6:3f:e9:e2:3b:9d:c2:e1:2a:27:87:be:10:72:
79:53:b5:05:4c:3d:2f:19:0c:05:67:9a:04:23:7a:64:9f:3e:
7b:37:b3:4f:d7:99:2f:d9:30:90:24:18:aa:d5:2c:79:2c:b0:
dd:c2:a2:39:5e:27:c5:c9:f0:ea:9d:36:9a:48:e8:70:28:1b:
1b:a6:ac:69:b5:12:a7:b2:03:8f:e6:9e:8d:de:91:05:f9:68:
61:18:63:0c:4a:12:01:98:4d:ad:13:bf:14:35:a7:30:7d:8a:
b9:55:b3:e4:8d:04:c5:9f:d4:86:4b:fa:4e:56:2f:8f:d7:c0:
ee:34:b7:8e:3b:ea:8b:8e:46:b0:b9:57:a6:ae:75:cf:69:d8:
e3:90:f3:b8:94:a2:9e:90:bf:e1:8b:57:24:1c:1a:2c:27:7a:
2d:80:af:c2:b6:1a:84:dc:d0:33:ab:2f:5f:0e:c6:5c:44:56:
79:44:a6:eb:46:28:b9:06:28:5c:41:fc:c5:83:75:f5:7c:8f:
d4:d0:0b:9d:a5:e3:d5:c0:84:1a:30:ea:da:30:27:6e:cb:a9:
37:fa:bb:52:d4:59:4a:45:71:cc:b2:2c:d5:16:af:05:fa:d7:
42:d7:a7:6b:3c:83:cc:53:bd:0e:e5:0e:70:91:72:df:60:9c:
00:3a:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:08 2025 by rpki-client