Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a3e7655-1ec4-34de-8e24-ac8fd96d240d.roa
File: 4a3e7655-1ec4-34de-8e24-ac8fd96d240d.roa (raw, json)
Hash identifier: M13Nu0M2hCWEtWYLnuxk4rPkBLBrahXXz7dNnwEB04Y=
Subject key identifier: 48:01:3B:12:41:D8:F7:DE:F3:F5:A0:29:7B:43:4A:8C:FB:D4:0D:5C
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A76AC42BFC5AA866A24C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a3e7655-1ec4-34de-8e24-ac8fd96d240d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.141.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:76:ac:42:bf:c5:aa:86:6a:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=515c7541-6281-45b3-adba-0050f5edc719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:66:16:e9:f9:11:e4:7d:f2:b6:99:48:6c:
3b:08:b4:f0:f6:81:0d:4c:d7:20:c5:a0:d1:4d:ec:
2b:50:fa:77:c1:b8:37:0d:5e:81:7b:4f:1e:8c:5e:
73:8b:a6:c7:01:02:9c:b4:c4:e4:9b:74:38:f4:10:
8e:81:81:7d:4f:7e:b1:1e:4b:94:f9:51:14:35:86:
59:42:e5:1f:5b:30:7a:70:f5:30:74:f7:b1:b5:b4:
97:a2:7a:2e:6d:6d:89:21:a4:72:16:b1:d2:af:87:
e9:f3:5a:f3:09:8e:b6:fd:72:ed:2a:ae:b9:ff:50:
bf:7f:2c:07:c4:64:99:6f:46:1a:7b:3b:a6:7f:54:
6a:eb:04:6f:52:88:31:dc:f7:2f:0f:d6:7e:fa:12:
56:c4:a0:be:0f:2e:6d:2e:05:f4:43:f9:e7:81:7f:
38:ef:bc:48:06:01:90:e7:73:f7:46:65:dc:59:5d:
0a:6a:16:db:3f:ce:8f:45:90:02:72:d0:c6:b5:bc:
10:6b:2f:d8:28:90:46:2e:12:b8:4a:f1:b0:e2:16:
b8:ed:23:67:8b:f8:23:e5:5d:78:c2:db:86:7e:55:
70:9b:18:5f:e2:bf:49:19:f4:ab:45:e7:30:17:a0:
5f:0c:85:55:df:7c:54:dc:14:65:9c:15:76:50:42:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:3B:12:41:D8:F7:DE:F3:F5:A0:29:7B:43:4A:8C:FB:D4:0D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4a3e7655-1ec4-34de-8e24-ac8fd96d240d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.141.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:70:95:d9:c2:eb:33:43:f2:cc:17:5c:da:f3:d8:cd:bb:7c:
27:20:4a:55:f6:93:17:38:85:03:42:a1:a4:8c:74:fa:e4:19:
6f:20:d7:4f:b9:c1:1c:21:8e:27:d9:82:42:95:de:19:d3:d9:
b1:69:24:5f:b6:1b:5b:88:6b:d6:e2:ab:2f:2f:69:db:32:ad:
52:de:73:01:3a:32:80:f7:b4:99:1e:58:dd:44:fd:46:42:5c:
54:4c:6b:99:07:08:26:0f:83:9e:fd:0d:df:8a:b8:e3:ee:86:
d7:eb:45:c8:86:8a:17:84:4e:dc:75:21:80:cb:2f:56:68:f3:
23:63:44:13:b5:6c:e1:d4:e6:07:d7:6f:93:1c:a5:91:11:c0:
7d:ad:a2:b3:c9:b4:66:3b:9b:ed:58:85:e8:b4:c3:7b:61:b1:
e6:1a:7d:00:b7:c5:3b:02:5f:46:17:35:93:ba:f4:74:9c:1a:
39:28:4d:44:52:be:6b:23:29:fe:07:29:57:15:e1:1f:3a:a1:
29:1e:d7:cb:5b:3b:3f:14:a0:11:ae:0b:de:6d:ea:4f:74:ec:
ba:48:7e:ce:44:26:b2:82:81:28:47:43:55:62:be:cf:7d:bc:
f4:a5:f3:2e:de:b8:5c:46:b9:39:4a:c9:43:d1:e4:4b:34:a6:
18:4b:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:58 2025 by rpki-client