Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8541f940-1713-34a1-a14d-6d4f3d07af5f.roa
File: 8541f940-1713-34a1-a14d-6d4f3d07af5f.roa (raw, json)
Hash identifier: UjryMq612zfXxpGx4DjCc0SQ8lv2i0qK+yDs0Vkc444=
Subject key identifier: 45:AC:4F:26:B6:0F:D1:4E:AA:E7:62:4B:73:5D:F9:0A:EA:83:AD:15
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A796F2E2E83CA487BDC00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8541f940-1713-34a1-a14d-6d4f3d07af5f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.140.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:79:6f:2e:2e:83:ca:48:7b:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=85633988-4f61-4fc7-ae07-0a2eaef67ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:c8:f7:7f:bc:46:36:d6:45:e5:de:fd:4e:
ea:10:a5:52:e4:2d:7a:e3:42:b1:a7:c9:9a:fa:4c:
b0:79:6f:5c:c8:e5:1d:92:98:e1:63:8b:a5:eb:54:
06:f0:1c:aa:10:43:1c:55:6b:67:8f:3d:db:3c:d8:
e5:e0:bb:ac:2e:ee:69:07:3d:38:90:1e:df:9a:d3:
57:68:ce:d8:94:77:e4:64:29:d6:49:cc:ea:36:bd:
3f:78:6f:f2:20:1e:23:ba:41:83:86:84:eb:a8:2a:
fe:7a:21:8f:72:bf:55:8f:f7:63:a6:06:2e:9a:72:
f1:d9:1b:8a:93:d6:3e:b1:d8:50:67:33:f1:a4:79:
b1:ac:4f:35:88:49:97:0a:23:a2:1d:37:b3:5d:bf:
54:98:83:f8:56:02:47:0d:ce:09:19:62:2f:90:ea:
04:37:6b:0a:e7:51:25:bd:65:ba:76:f0:b8:3a:4f:
6b:3f:00:cc:35:8f:5e:4b:fa:21:5b:12:1d:60:7f:
58:3b:5c:d7:d3:01:c6:5b:1b:82:13:67:51:67:74:
d5:fb:c3:94:c2:67:11:69:bd:b7:ab:34:ad:06:48:
02:5b:91:7d:50:47:97:7d:ce:7f:f3:14:0b:30:4e:
1c:df:f9:04:8b:9e:08:2d:00:e8:3f:2a:dd:fa:ef:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AC:4F:26:B6:0F:D1:4E:AA:E7:62:4B:73:5D:F9:0A:EA:83:AD:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8541f940-1713-34a1-a14d-6d4f3d07af5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.140.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:5f:32:80:7c:d5:5b:13:0c:32:f4:52:5c:f7:0f:1f:48:de:
62:9a:dd:f5:d4:7b:eb:57:1d:f8:c0:f3:01:7d:74:51:bc:b6:
5f:d9:40:4d:c3:5c:a4:fa:4c:dc:ab:2e:de:2e:b5:9b:5c:23:
a3:d9:3b:34:4a:de:b8:1b:e0:d9:72:b6:3c:a2:cd:7d:f6:01:
56:67:6c:e8:63:f3:3d:37:64:56:dc:a7:04:84:4c:33:dc:7a:
95:37:0b:bf:27:68:c1:41:cd:44:9e:4b:db:e6:98:9c:e1:53:
41:96:80:31:1e:c8:9c:5f:70:b5:ad:2e:00:b8:af:2b:b4:fb:
a2:31:81:44:b0:08:a9:a7:6d:14:05:72:3d:1f:b1:ec:ad:41:
6a:c0:01:b8:29:df:4d:48:1b:7e:dc:65:88:d7:30:9f:f3:ce:
2a:9d:6e:ba:66:e0:fb:68:e0:dc:5a:82:85:ac:21:38:65:70:
03:f4:f0:b9:5f:26:ef:70:e0:3f:88:fc:39:2e:fe:7a:e5:f2:
eb:2a:5a:13:f2:57:7b:d8:39:09:45:6d:0b:f3:b7:62:1b:33:
9d:10:9c:30:72:0d:97:7b:e9:d9:b7:2e:9f:8f:2a:b0:3c:6a:
e9:54:ef:7d:49:3b:b1:b3:69:ce:3d:b8:a2:a0:12:4a:77:4a:
36:b6:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:27 2025 by rpki-client