Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7877a698-6c7e-3065-8bea-c3e5cf706ecc.roa
File: 7877a698-6c7e-3065-8bea-c3e5cf706ecc.roa (raw, json)
Hash identifier: +e6FIWIOuKN3JBnIqE4bXojNwhWCR33MKvb8xNWGfaU=
Subject key identifier: 79:1E:6D:47:14:51:B5:37:D9:FF:B2:DD:98:10:48:BE:EA:A4:03:8D
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7501A5170CE7FD0C43C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7877a698-6c7e-3065-8bea-c3e5cf706ecc.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 35.205.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:75:01:a5:17:0c:e7:fd:0c:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=c21f4311-febe-4754-bf69-6e791a9f0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:aa:e3:a9:af:a4:d6:1a:82:aa:58:f2:45:
8f:b4:e1:64:9a:ae:16:7b:cd:c2:c9:f2:5d:c5:24:
a4:d5:d8:f1:dd:77:09:e1:7c:3a:5f:b4:1b:3c:1e:
9d:f8:0c:5c:b4:e0:3e:53:a3:22:37:07:24:9d:76:
46:6b:4c:11:b8:6f:b2:7c:f0:9f:27:a6:d8:31:cf:
90:97:6a:a9:34:20:31:9c:46:71:05:97:49:4d:d4:
e3:8c:2e:2e:3d:b9:08:b8:37:ed:f4:15:6c:96:0b:
43:37:83:74:3a:12:51:ce:4a:b7:f6:ec:60:87:b3:
30:e4:06:d5:db:52:56:7a:93:58:28:68:3b:8c:da:
d6:8c:e4:50:3b:27:da:3b:84:ce:f6:34:cc:3b:5d:
63:40:25:bc:8b:90:65:b3:b6:f6:f7:d4:39:69:68:
a8:aa:f9:16:89:14:43:93:56:62:7a:cd:3f:77:58:
43:ef:d5:94:3d:5a:14:12:0c:de:82:0e:b0:08:a8:
10:e5:fd:3b:0c:c3:73:c5:e0:c4:3a:c9:d0:58:01:
f9:e7:3b:52:9d:ea:18:0a:c5:61:54:10:69:3d:c6:
fd:02:47:2d:38:20:47:94:37:97:31:98:c1:af:c8:
2e:b3:f7:d3:64:f9:eb:08:3f:98:0b:92:bb:d2:94:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:6D:47:14:51:B5:37:D9:FF:B2:DD:98:10:48:BE:EA:A4:03:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7877a698-6c7e-3065-8bea-c3e5cf706ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.205.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:72:b4:26:9d:1c:bd:f7:59:0c:0c:27:b2:c5:27:65:28:14:
2b:f5:62:70:9e:19:4c:16:b1:c6:a4:b0:38:f8:66:c2:27:33:
11:91:e2:fd:86:fd:e5:40:78:16:06:de:4f:bc:51:b3:5d:1e:
1d:b8:54:83:bb:1e:ab:de:b5:f5:3c:d3:a1:95:4d:28:be:04:
cc:80:ae:d4:40:8a:1e:2b:0c:cc:2a:c2:eb:8e:15:ef:3a:7d:
8b:60:0d:19:a8:b9:94:59:dd:02:5d:e0:fa:88:7d:5a:e2:4e:
40:0f:f5:f1:10:bb:49:f4:b6:eb:31:3b:e9:5c:f9:7a:71:1e:
d2:29:76:41:37:97:fc:1f:69:38:4f:40:21:23:fc:8b:bf:70:
e3:76:24:d6:48:31:40:79:6d:34:24:b4:c9:bb:c7:3a:f4:13:
31:5b:a3:6d:1f:9c:83:b8:42:5c:b4:55:54:0a:cf:d9:b2:4a:
48:00:f1:d0:01:50:e4:02:bc:6a:06:cf:09:56:0c:fd:3f:54:
cb:b1:0d:64:d4:53:16:5f:b4:87:c2:b1:33:63:c6:49:45:2a:
00:31:53:e3:e8:78:fe:4e:25:f8:12:08:dd:f4:52:61:8c:0c:
52:3e:71:4c:b4:23:9c:94:d2:1f:48:9d:d4:be:65:a5:df:ad:
40:a3:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:37 2025 by rpki-client