Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425a8062-b3fc-39b5-8b65-f33db33c4164.roa
File: 425a8062-b3fc-39b5-8b65-f33db33c4164.roa (raw, json)
Hash identifier: oAnOr5/izrfKztB7MUoQ4HfENJdt6YeNNzPIIsjsPqo=
Subject key identifier: E3:EC:81:28:B2:BA:2D:25:09:EE:E3:48:6E:E4:4C:24:41:6C:FA:7D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5A3895C2CC9BBF2357E8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425a8062-b3fc-39b5-8b65-f33db33c4164.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.154.80.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5a:38:95:c2:cc:9b:bf:23:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e95f8cd3-91ba-448d-b587-eb16af797526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:b4:ef:0e:e2:9b:11:af:17:51:84:26:70:
4c:91:c3:c2:8c:dc:6a:4b:a8:f0:de:86:af:60:74:
e9:8f:f8:1c:78:fe:5f:96:e9:9f:7d:f8:87:82:b2:
30:36:6c:e7:fc:61:9c:cd:18:03:af:c2:24:9e:a0:
b8:ca:0d:27:55:b7:45:d3:71:bc:6e:1a:76:4a:4b:
da:ca:08:27:c9:45:2d:71:9c:e7:85:ba:73:89:1b:
65:68:cc:1f:7c:65:78:8a:5f:78:f8:b8:26:08:01:
ae:b8:1e:92:da:52:58:88:6b:1b:11:0c:2b:ff:c9:
72:d0:9c:94:43:0e:38:31:4c:4e:25:df:ad:cd:57:
87:ae:99:ee:4a:81:2b:50:d9:f1:36:3b:db:76:df:
f6:5e:58:5e:59:a4:13:8f:5a:84:94:cb:4c:ea:7a:
15:2e:e1:6d:68:9a:11:f3:03:aa:74:8f:0e:04:99:
2f:55:8a:e1:e9:81:e6:a3:17:d5:70:b3:48:e3:b7:
27:5a:92:7c:34:71:bc:4b:35:e2:a8:0f:22:b7:55:
1e:01:64:1b:8e:aa:3f:3f:f0:fa:a4:2b:ce:d6:2d:
f5:c3:c8:7c:d9:46:7d:c4:37:57:c6:55:a0:7a:9b:
b7:bf:44:be:89:33:75:96:c9:6a:1d:e3:c1:0e:ce:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:81:28:B2:BA:2D:25:09:EE:E3:48:6E:E4:4C:24:41:6C:FA:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/425a8062-b3fc-39b5-8b65-f33db33c4164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:66:16:bb:d6:97:48:6d:e1:80:12:78:56:1a:54:d6:e2:a4:
e9:59:ec:20:c3:ef:1e:bd:0d:c6:9f:41:84:e7:d1:e1:4a:bf:
30:16:de:c5:01:37:36:c7:ea:59:ba:1d:ea:aa:5c:f7:c4:3f:
c2:63:d4:65:7b:17:46:d5:d6:d9:0b:e0:de:d2:b2:31:c0:59:
cb:53:74:f4:a2:49:3d:a1:1b:16:f7:78:02:8e:4d:c7:f4:cc:
89:7d:b0:50:e7:fe:37:00:62:73:f2:27:22:79:a1:84:08:6c:
58:f6:b9:51:ff:82:1f:8d:9e:33:5d:ef:42:f0:6e:47:d7:5b:
cf:3b:9c:6f:ef:a1:58:2a:74:b3:42:a4:b9:13:0a:48:43:b3:
b0:c6:b6:89:11:a3:6d:c1:55:a2:b9:1d:ff:8d:01:57:1a:9b:
7d:6c:38:91:38:20:3a:69:12:5d:cd:2b:e5:46:93:3c:e6:f3:
7c:81:de:96:0c:96:90:a5:f7:28:6b:38:81:92:fe:61:df:90:
64:a3:c1:a6:5c:a9:23:a8:d6:54:19:94:d7:fe:03:21:1b:f5:
bb:01:6d:70:7e:88:7f:e4:1a:96:d5:8a:b0:ff:d2:05:69:22:
87:ee:cf:72:23:c2:5c:ee:02:2c:f3:11:2e:86:91:aa:81:94:
b8:5d:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:57 2025 by rpki-client