Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae7f856-1eee-3635-ad9a-7ebf578a3a3c.roa
File: 4ae7f856-1eee-3635-ad9a-7ebf578a3a3c.roa (raw, json)
Hash identifier: Sf2hTiPOz2LG6CiBZryY59krknIuUjvNuOsA7+UOeco=
Subject key identifier: 48:D0:EA:4D:02:AC:E7:41:48:CA:34:20:CA:F9:E8:9D:2E:27:3F:99
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7427B1E6F66FAFA6BBFA
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae7f856-1eee-3635-ad9a-7ebf578a3a3c.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.242.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:27:b1:e6:f6:6f:af:a6:bb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=8207df7a-ca03-4ed5-affd-92dc221d0cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:6f:33:e6:31:e9:cf:80:15:ec:73:3e:da:
04:0a:69:3d:8e:fe:3b:22:64:c3:1f:d8:ca:19:cc:
92:e1:f3:b8:f1:49:3b:2c:02:65:ef:4d:69:bb:61:
26:d2:f3:20:1b:7b:bb:06:d4:73:94:b9:03:c1:c1:
41:0b:1e:e6:a2:91:ba:9f:f0:ec:8d:a3:b2:a6:c3:
d2:e5:bc:35:a2:0f:46:6f:1b:9e:f7:45:15:59:9b:
5d:df:76:0d:cb:26:fa:bc:0d:31:27:d0:79:e7:ff:
fc:6a:4d:37:5c:ad:c4:b4:b8:bf:b3:b1:84:11:82:
2d:66:61:bb:0c:35:6b:c1:c1:54:9d:41:46:4a:c9:
f0:46:6f:9a:5f:8e:82:f4:c2:73:e9:74:b9:92:82:
b3:67:d9:3c:ba:0b:ed:22:6f:40:bc:d2:03:ac:13:
7d:9f:11:43:42:c5:5e:bd:cb:82:12:62:c8:c4:8d:
36:c9:22:f7:8f:03:9e:08:22:56:0e:4d:9e:b8:48:
c0:aa:0a:65:3e:a4:7d:f7:5b:f8:b4:ce:b2:de:1e:
b4:cf:7b:32:99:b5:5e:56:de:9e:29:a1:b3:9f:b9:
6a:36:4a:62:04:55:3d:84:ec:4c:ba:d2:76:ee:97:
64:e6:d8:ce:b7:1b:5b:ac:71:28:e3:de:d7:2f:d7:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D0:EA:4D:02:AC:E7:41:48:CA:34:20:CA:F9:E8:9D:2E:27:3F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ae7f856-1eee-3635-ad9a-7ebf578a3a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.242.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ee:9c:e3:00:bf:62:d7:12:d0:0c:ba:71:84:8a:b3:9d:d4:
39:40:3f:9a:e4:28:20:55:ea:f6:c9:7b:fa:46:7c:31:b2:46:
7a:94:cb:7a:33:5e:0a:bc:06:67:1b:43:46:e9:ab:4c:79:34:
5a:6f:ae:5e:e5:58:e6:36:f9:8d:6b:d6:40:36:91:12:b0:e2:
9e:27:3f:71:20:2f:0a:03:45:f0:10:10:63:ad:ba:b0:45:a4:
99:6d:93:7f:2b:fa:3a:f6:23:98:3d:33:57:54:e9:fa:91:d6:
54:45:24:28:d8:c7:27:13:7d:1e:9a:0c:d0:01:ad:e0:a9:c9:
0f:36:f0:f1:4c:40:b3:86:bc:0a:33:73:2c:da:df:a3:e3:2b:
79:85:4e:9c:75:5f:8b:3d:52:f6:14:95:fd:ed:b4:a2:9f:8f:
aa:2d:d2:48:63:84:65:46:f1:b6:ff:87:03:5d:27:80:d0:a2:
e7:d7:52:6e:e5:b5:78:e4:fb:dc:79:fb:c6:8d:8f:bf:ea:21:
27:a8:9c:7a:e6:f7:9f:ab:80:38:53:98:df:91:00:7c:5a:db:
03:58:f6:e2:25:e7:99:ef:9a:eb:6f:ad:51:9c:a6:69:16:06:
31:4f:68:31:58:81:93:2c:5d:c0:f9:cb:ca:65:54:72:17:2e:
4b:ff:7f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:50 2025 by rpki-client