Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48c43f8b-b790-326e-bb67-5d3524073a71.roa
File: 48c43f8b-b790-326e-bb67-5d3524073a71.roa (raw, json)
Hash identifier: 7571V0Fzfvk12i4UIKWVVg0SiP25FNviPmpLI/DK65I=
Subject key identifier: D6:63:F5:DF:0B:60:BD:29:2C:BD:AF:2A:5F:2E:88:85:A5:2C:56:DE
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A75E6704FB39770067280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48c43f8b-b790-326e-bb67-5d3524073a71.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.203.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:75:e6:70:4f:b3:97:70:06:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3c9ea92a-5ef7-4270-9e59-6fd1a4500995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:1f:5b:16:c9:41:20:e0:d6:47:79:69:fa:
2a:94:d8:8d:a3:0c:bd:f1:b6:e8:18:c3:78:a6:67:
10:9a:eb:de:4a:7e:7a:50:bc:00:06:85:30:15:cc:
79:1d:24:35:b0:6b:49:08:ac:f9:b1:d8:63:49:ba:
83:54:49:cd:c4:db:85:ad:0c:15:48:0b:62:6b:26:
1b:93:ba:d9:a7:31:85:79:af:18:cc:5b:e1:6d:d6:
fc:de:ca:a5:3b:31:9b:2b:5d:08:0a:97:b8:eb:41:
d5:96:bd:dc:21:3a:0c:1e:ac:10:98:43:93:4e:52:
f5:7e:fe:8f:77:fe:69:17:36:86:d1:85:42:52:98:
08:89:68:38:65:60:20:a5:ca:e5:2b:cd:da:78:45:
39:a8:9c:1a:6c:5d:83:83:23:47:42:b4:f4:38:87:
f0:b9:0b:70:d3:f9:98:f0:dd:cb:74:06:47:cb:77:
9a:f4:a0:be:1e:93:11:1c:43:f9:dc:b5:f4:8d:0d:
f1:63:0a:8a:ad:51:6f:6f:b1:99:8c:6b:53:2c:6c:
c5:0d:0a:0d:a8:81:d3:c7:f8:43:df:e8:5d:6a:5f:
d9:35:e6:cb:fb:11:dc:2c:31:4e:fe:0a:8a:dc:42:
95:30:d0:06:2c:d9:d3:db:d4:d3:e7:b0:cf:f3:96:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:F5:DF:0B:60:BD:29:2C:BD:AF:2A:5F:2E:88:85:A5:2C:56:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/48c43f8b-b790-326e-bb67-5d3524073a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:bb:17:52:a4:3f:80:0d:31:51:40:17:4c:60:f6:34:6d:2b:
dc:d4:d1:a4:74:bd:f4:f7:e7:2b:34:ec:5b:8a:bb:1e:ba:d4:
a6:dd:16:8e:0c:5d:90:ad:56:e6:c5:df:49:cb:7b:49:b5:2d:
81:f6:2e:7e:9d:d2:c7:0a:93:c4:92:83:2b:44:9d:44:60:fa:
28:ba:3d:86:a2:6c:35:93:88:b0:cf:9a:a9:12:44:3f:11:11:
15:71:bf:29:60:49:38:47:4f:27:0f:71:da:48:ba:dc:a3:70:
b4:09:6f:49:84:1a:08:ef:07:42:cf:bd:c3:db:c6:a0:75:19:
69:0b:7c:80:e0:67:cf:1b:93:df:56:2e:f9:63:2d:25:a3:d3:
ae:0a:2f:86:7d:54:9a:26:55:66:9c:7c:f8:b2:65:7a:91:31:
fb:1c:46:98:5b:c5:49:e6:18:23:f2:f9:b8:d2:54:b8:f1:72:
64:76:eb:b4:7f:e7:e3:a3:ba:62:e7:5b:61:09:00:63:84:15:
9a:33:d0:2a:55:bf:6b:dd:f3:7b:8d:f4:c2:25:e9:6d:06:60:
63:ea:d2:2a:b2:73:7f:bc:18:6f:0d:b0:89:d0:02:24:be:a6:
0c:9c:fe:a9:41:73:92:10:bc:c2:da:a8:19:31:81:d6:89:c0:
f3:8c:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:28 2025 by rpki-client