Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d5bbad3-eaa5-36b4-b89d-8cc7ea7988ed.roa
File: 3d5bbad3-eaa5-36b4-b89d-8cc7ea7988ed.roa (raw, json)
Hash identifier: lOesCAwpRlGdejndYVPH0OxvSXqsmjDZplrW9kyHqQU=
Subject key identifier: E2:D8:CD:8B:6E:1C:51:9D:5A:9A:E9:FD:5F:21:AC:F6:4F:70:15:77
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5C913B479D44BE7DD49C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d5bbad3-eaa5-36b4-b89d-8cc7ea7988ed.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.137.96.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5c:91:3b:47:9d:44:be:7d:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=969c6859-fbee-4411-b622-8a69c00216f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:15:27:0f:f6:10:85:8a:c7:55:82:b0:aa:
90:2f:c2:69:08:22:35:e5:b0:92:33:96:de:bc:ca:
ec:a1:a7:12:9f:d0:0a:59:bb:5d:ac:f5:09:ad:74:
41:82:87:48:90:a4:ad:15:6d:81:56:7c:2c:d2:bc:
dc:64:d0:90:81:df:5b:20:10:f2:8f:80:81:0a:c4:
4f:90:32:73:c2:7e:50:1d:13:10:69:59:90:8c:57:
36:2f:e8:c6:91:b2:e7:82:fb:d1:67:02:72:fc:ba:
74:30:0b:55:84:e0:14:dc:03:32:34:f0:f8:67:2f:
6c:16:29:37:c4:c6:74:34:fc:58:36:31:be:b6:4e:
b0:bf:7e:a0:b8:bb:73:97:ca:82:f2:46:72:80:c3:
1d:e9:5b:fc:df:61:5b:0b:d2:93:e1:e8:9b:cf:f9:
5f:17:0a:73:1c:7c:4a:3c:af:ac:b0:37:27:20:b9:
16:b2:06:47:0a:01:0c:5e:f5:77:fa:02:82:7b:99:
c4:f6:49:5f:88:2b:74:7c:55:27:d3:6b:4d:5a:bb:
c3:7a:8a:13:f9:00:ec:ae:0f:ad:85:55:72:3e:28:
d8:64:cf:7b:47:c3:ce:27:0f:95:7b:4f:5f:3c:01:
11:58:21:a9:35:cf:86:1a:b7:9a:ec:54:08:3b:3c:
e9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:CD:8B:6E:1C:51:9D:5A:9A:E9:FD:5F:21:AC:F6:4F:70:15:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3d5bbad3-eaa5-36b4-b89d-8cc7ea7988ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:ab:54:75:0f:50:8f:c7:1c:59:b9:84:ea:71:57:16:b9:37:
75:14:38:42:b8:31:d6:82:d7:32:51:33:ad:6b:86:b8:35:13:
d8:d3:a2:6a:ad:2a:43:2b:45:c2:fb:d4:dc:52:3a:70:80:0d:
97:66:bc:f0:c7:5b:cf:62:86:33:9c:81:61:64:5a:15:a0:d6:
26:9a:4b:31:53:c0:a5:c2:c3:ba:41:e4:c9:d0:73:de:0a:1e:
ce:74:67:41:ae:f4:f0:be:25:7e:bc:8e:4d:97:87:1c:6b:25:
6e:23:fe:f0:51:c5:aa:b6:fc:93:e7:bb:7a:fe:a1:fc:35:8a:
44:89:67:62:ee:b6:a3:a2:d4:2a:b3:b4:fd:76:4a:39:d9:89:
f4:73:e4:ee:9b:9c:55:41:33:0b:b0:92:14:08:98:68:77:55:
23:7c:eb:55:08:2c:05:97:82:7f:1b:c3:b9:1d:72:a2:d5:9e:
91:27:74:69:2f:ff:74:7b:a2:f3:d5:d8:68:48:10:02:d1:a0:
ab:61:c2:35:39:51:a2:3f:e8:5c:8c:e8:17:b4:16:06:c6:ef:
87:d0:35:83:92:3a:13:2a:96:77:9f:6e:85:0f:17:69:71:be:
57:5c:b1:f0:77:1f:97:9d:bd:38:84:6d:27:77:df:27:c1:fd:
a0:14:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:40 2025 by rpki-client