Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/917dd73c-af8a-3419-965f-145ce7ddef29.roa
File: 917dd73c-af8a-3419-965f-145ce7ddef29.roa (raw, json)
Hash identifier: aXNuvaFw6PkVaZ4GAzUfLVtCbibKm5DdRkn7q75vQ3I=
Subject key identifier: 93:6F:F8:C1:63:FA:3E:5D:5C:83:8E:21:D0:49:A2:C6:D2:66:76:F8
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A56E60F9BA15C8FBF2B00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/917dd73c-af8a-3419-965f-145ce7ddef29.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.150.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:56:e6:0f:9b:a1:5c:8f:bf:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=97bdd7ff-b682-4e5f-9488-ab5eb8c63acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:55:e7:bd:36:17:f4:ca:9f:8f:3c:b0:13:
16:05:5b:5b:f7:36:49:2b:32:d0:b5:1a:bb:55:14:
18:67:86:b0:d8:5c:8f:9e:6c:bc:2b:b0:97:5a:72:
3c:ab:c8:e1:7a:79:15:d2:57:6f:20:e5:d4:a7:38:
e6:43:d1:08:5f:62:45:ba:8c:80:4f:1f:c0:aa:36:
e4:49:7c:65:6a:43:c9:73:96:c0:bd:ac:83:9e:76:
dd:a1:74:27:68:27:4c:9f:b2:aa:18:6b:a6:9e:28:
14:dd:e9:7d:9a:b7:6b:fb:9a:60:49:9c:3a:31:26:
47:a4:f2:bb:83:67:35:6f:77:23:cd:45:67:89:14:
ea:6e:7d:6f:c7:5a:d4:94:ce:d8:d1:a5:9e:cf:dd:
84:9b:13:7d:4a:23:53:78:92:f2:c5:a9:3d:91:08:
a8:1f:00:82:bc:2d:99:43:d6:f5:36:ee:9b:3e:13:
af:42:f9:17:40:6b:47:4c:48:9a:86:8e:0d:21:5a:
72:69:ec:9d:a3:35:11:68:6a:dc:d2:0b:64:bc:3e:
47:01:01:61:9f:21:79:4e:aa:60:ca:c7:32:ee:38:
e3:be:c7:a2:e1:2b:4e:7f:0c:d8:8a:20:fa:af:80:
69:4c:72:82:bc:7f:93:3d:bd:af:0c:05:c8:40:e1:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6F:F8:C1:63:FA:3E:5D:5C:83:8E:21:D0:49:A2:C6:D2:66:76:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/917dd73c-af8a-3419-965f-145ce7ddef29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.150.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:84:5e:95:6a:e7:d0:d2:c9:05:01:6c:80:be:9f:b4:7c:b3:
ec:44:4d:69:14:5d:6e:7d:08:28:21:9c:03:17:aa:14:05:8e:
ca:81:26:f7:d1:12:91:02:df:f1:80:1b:5b:df:83:b8:27:c8:
9a:18:a0:a7:88:ad:ec:e5:ac:3b:3b:6b:82:07:0b:ba:ee:10:
bc:eb:fe:13:be:34:73:6b:df:4e:71:b2:92:6c:de:e1:e9:7b:
5d:e9:06:1f:93:ed:10:13:64:0c:8a:1c:2e:9b:b5:1e:1d:68:
8f:85:45:89:9e:9e:3f:13:b8:fd:d3:8e:c4:cd:2d:3c:97:b9:
9e:a2:6a:59:32:d1:fa:e8:0d:8c:23:03:5f:55:ac:45:4c:5f:
eb:05:15:28:a7:bf:a3:32:72:dd:ca:6f:2e:80:e0:8e:3d:a7:
cd:74:88:90:81:30:00:2b:bd:68:43:ca:30:e3:70:b7:26:7a:
da:fb:f2:69:e4:c6:fb:95:0f:99:f0:0f:7e:fa:56:af:77:6a:
40:80:10:c2:83:62:fa:0a:a3:a1:1b:34:79:f5:41:ec:dd:e1:
3f:4a:ba:25:4e:6e:63:4d:f4:42:e2:84:ca:0f:8d:3a:e4:eb:
32:5b:b8:29:f2:47:31:61:25:dd:34:30:f1:6a:73:36:4d:5b:
0e:a5:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:18 2025 by rpki-client