Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88cf44ca-3351-3653-b8cc-70ed7dae1e99.roa
File: 88cf44ca-3351-3653-b8cc-70ed7dae1e99.roa (raw, json)
Hash identifier: 4nNy1Ug+JJWdWKHUWuysXwlJjlEPEaBQzB4KYIP72Vc=
Subject key identifier: 09:02:7A:C3:3A:A7:DF:83:B8:67:27:80:60:93:27:AB:BF:E8:5A:3A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A588A33A6622534FA5D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88cf44ca-3351-3653-b8cc-70ed7dae1e99.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 34.72.0.0/14 maxlen: 14
Validation: Failed, certificate revoked on Thu 23 Jan 2025 02:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:58:8a:33:a6:62:25:34:fa:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=9f96f4ce-a34d-4582-b9c8-a0a843cb321a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:23:01:4e:da:0a:82:47:e3:15:2d:5e:75:b7:
5a:fa:5b:7c:49:8f:75:a1:0a:64:5c:34:8e:ce:30:
d8:b8:bb:86:8e:82:e8:aa:ff:c9:3e:5c:69:39:84:
f6:56:69:0b:cd:5f:a1:75:4e:d6:5b:39:75:35:d6:
de:a9:6b:50:61:fb:0b:3c:fb:ad:61:2b:0f:2d:f3:
6c:40:bb:63:39:1e:44:c9:4a:c9:f6:58:a6:22:28:
63:92:3f:92:a9:9c:45:4a:ec:6f:41:74:d3:7e:58:
14:20:44:ba:1d:99:c4:a0:0a:4b:ea:7b:54:33:10:
b1:07:ce:17:4c:51:6b:d4:a2:e0:3f:98:be:9b:fa:
c3:be:2f:a4:25:c4:1a:cd:d2:de:9f:e5:11:8e:a8:
f1:c0:bc:76:1d:39:5e:01:4f:2a:05:86:c3:3d:39:
89:eb:f8:45:6a:03:0a:d1:39:01:7a:48:65:4a:98:
22:f5:74:30:ff:06:5d:69:91:26:23:7f:41:48:8b:
4e:fe:08:45:4a:5c:e6:37:3c:e0:9e:85:fe:22:89:
53:c3:75:dd:d3:b2:76:0d:c8:df:4e:d5:22:cd:0a:
b9:ed:15:7f:ff:3f:e9:9f:12:1a:10:88:d4:ab:d5:
a7:3d:2f:77:03:bc:22:59:aa:d1:c9:f6:d5:93:07:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:02:7A:C3:3A:A7:DF:83:B8:67:27:80:60:93:27:AB:BF:E8:5A:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/88cf44ca-3351-3653-b8cc-70ed7dae1e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.72.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:ef:c1:c2:e4:66:2e:90:f5:b2:8a:2d:b3:a8:24:e0:94:9c:
aa:d7:b2:d6:d9:e6:20:29:80:dc:62:f3:6b:dd:10:99:9f:6d:
4a:04:ff:73:12:1b:ee:72:e3:56:63:29:4e:68:55:70:8d:cf:
a6:cf:87:1b:37:ed:9e:0f:69:ec:52:40:e5:c7:f9:63:b8:23:
a9:25:55:0b:6c:21:0b:56:68:6a:c1:9f:30:32:11:98:0f:12:
79:aa:2a:32:91:46:be:cd:5b:d9:9c:6f:78:01:a6:d6:3f:b6:
2d:9c:03:5f:53:bf:b4:f6:74:ab:ae:9d:ff:52:0d:6f:b7:dc:
a4:f5:86:42:d4:58:76:a5:14:7b:40:a9:0c:65:18:ea:ac:3d:
8b:c5:a9:cf:6c:42:08:3d:7b:d3:00:21:2a:0b:91:51:03:97:
32:0d:04:b2:8b:b6:1f:86:70:91:23:4e:9a:52:d4:12:40:75:
2d:c2:d6:2e:bc:f0:65:c3:8b:d6:24:67:4a:7e:5c:72:e3:73:
a6:94:db:97:4e:b8:30:6c:46:82:f2:97:5e:70:0e:f5:08:12:
2a:5c:39:93:f6:c3:59:04:fc:2f:fd:c1:68:3d:bd:db:02:bb:
2d:18:07:86:5c:68:57:48:fe:5b:f9:25:b8:88:03:3d:f2:ec:
80:8b:23:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:32 2025 by rpki-client