Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f971868-a218-3ca7-9b34-47a451b8132f.roa
File: 6f971868-a218-3ca7-9b34-47a451b8132f.roa (raw, json)
Hash identifier: O7XscHHS4dzJIsa4gVrWLlSgKAtSZs/mqt9cofLtLiw=
Subject key identifier: 21:86:AC:BA:D8:29:36:EE:C1:B3:06:28:BB:93:04:AD:AB:AA:EE:51
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7949C38038DD65F13800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f971868-a218-3ca7-9b34-47a451b8132f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 104.154.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:79:49:c3:80:38:dd:65:f1:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=b9d01ed2-1e5c-46d0-b1e3-203fc7ae54ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:dc:21:8d:b5:c6:c6:ef:fa:b2:ee:0e:4f:
5e:72:f1:9c:34:62:af:08:dd:d9:66:65:2c:dc:c5:
3e:b5:b8:77:08:2e:84:dc:e1:7e:5f:a6:25:32:05:
f9:57:60:50:e5:3c:3f:0f:5f:bc:8e:d0:2f:f2:af:
8d:0d:78:99:f8:79:95:15:73:9a:ff:76:56:5a:cd:
85:73:74:6e:d0:a9:a4:c1:5c:e9:31:43:12:bd:d8:
5d:a7:33:27:21:dd:dc:74:d7:d7:a5:b2:a6:ad:4e:
f6:e3:d4:ce:90:10:e3:0b:ae:90:53:f5:75:e6:bd:
72:fd:c7:cf:b9:ed:b2:ff:4d:82:2e:b0:e9:03:ae:
75:f8:32:6a:52:fb:5e:33:1a:fb:3b:f7:91:0f:73:
c4:ec:86:9f:d1:41:07:29:15:17:5b:8b:2e:87:28:
2b:51:79:58:82:79:7b:de:e0:a9:a9:c9:d9:9c:6f:
20:be:8b:c7:00:6f:f3:6a:1a:7f:f0:70:b6:38:30:
c7:1a:94:15:0f:2a:cc:ba:c9:f9:0b:5d:ee:10:86:
f3:8d:1e:59:9f:74:1e:2b:12:90:0a:04:1f:b1:b4:
67:45:56:53:aa:e7:96:ae:37:4b:ce:7f:5b:e9:44:
51:d6:2a:17:b2:58:9f:ba:1a:27:68:42:1a:3d:1a:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:AC:BA:D8:29:36:EE:C1:B3:06:28:BB:93:04:AD:AB:AA:EE:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6f971868-a218-3ca7-9b34-47a451b8132f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.154.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:74:bb:94:5b:63:4d:8c:bf:78:2f:19:c5:e2:18:ac:76:c6:
8e:66:b9:11:cd:0a:e8:d6:a5:9d:12:44:4b:4f:8d:1c:a0:df:
6b:5f:63:89:d1:47:af:b4:70:98:11:d8:75:9c:50:1b:68:1e:
29:09:ec:b4:dc:c5:4e:f6:6b:35:ca:68:f7:df:0d:20:58:16:
6b:ae:59:3a:ef:9e:64:28:b6:98:38:3f:18:61:d3:fd:81:9f:
57:5c:67:b6:fc:4e:3c:b1:16:e5:8d:32:1c:82:30:5e:c3:45:
8c:4b:01:1b:32:d7:e6:51:5c:d8:d9:87:90:1e:74:eb:9f:a7:
41:9b:88:2b:a7:41:01:bf:ac:45:cc:4b:57:b4:56:69:3d:e2:
67:bb:b1:7e:3a:8e:f5:f2:45:28:97:d1:71:6f:78:ac:e7:d4:
85:cf:45:18:53:0d:fd:a3:ad:d3:c4:0d:56:1e:45:00:dc:f2:
0c:0d:2b:57:60:e2:02:17:dd:e7:67:72:62:50:23:30:51:ce:
d3:6d:30:27:50:58:51:10:98:19:68:40:b1:86:3d:e0:aa:e8:
b2:d1:a4:70:55:94:23:83:12:0e:5a:c8:aa:22:91:b6:f0:bd:
a5:f5:3f:cd:6f:a3:ec:71:bc:98:29:b0:78:56:32:8d:9e:68:
5d:70:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:53 2025 by rpki-client