Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98455f0e-92a6-3283-acc5-12e43f366804.roa
File: 98455f0e-92a6-3283-acc5-12e43f366804.roa (raw, json)
Hash identifier: 2l1rbHaQCLkackUmLlhdpgwEvZQjD4gJx3jaMxwf7V8=
Subject key identifier: AF:A7:8E:A5:9C:CD:C2:17:5A:70:A1:D9:E2:C5:44:F7:36:CE:03:EA
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A653254BDD9EE3E4D8800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98455f0e-92a6-3283-acc5-12e43f366804.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.156.64.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:32:54:bd:d9:ee:3e:4d:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f1f14321-e5b1-4c38-be9a-283421685d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7b:35:cf:3f:4d:db:2b:b8:ea:c8:9a:b2:e7:
ff:a8:a1:02:76:e0:8f:81:84:e6:47:8d:b8:8c:3b:
ae:89:50:7f:ef:7d:1d:69:5b:52:67:ff:31:91:54:
21:c6:23:d5:94:60:2a:a9:7c:fa:35:48:59:39:93:
94:47:74:86:1f:d3:49:cf:26:1f:cd:a6:7f:f9:ed:
a9:3a:58:c4:75:8f:59:90:df:0f:71:0f:9a:4e:34:
ad:18:ce:e2:df:f5:95:68:ef:d0:76:0d:11:ce:9b:
11:7d:ec:f8:0d:80:99:c2:51:29:c7:e8:26:87:5a:
a0:05:50:14:85:48:be:d9:84:c4:a5:ed:e1:fe:29:
a2:af:44:65:d0:a1:98:7f:6d:39:46:fa:c2:95:51:
cd:da:87:e0:6a:55:f1:99:1b:20:9d:97:e3:e3:ea:
20:fa:41:f7:a8:76:d2:d5:24:0c:29:82:0f:13:f7:
e2:95:88:28:6f:03:9e:6b:eb:01:80:9d:fe:47:4e:
df:52:0f:00:97:ba:3e:21:9e:e8:a6:17:6d:2e:f2:
0e:3c:d1:44:de:16:9f:87:df:a4:e1:a4:33:c2:e1:
01:33:00:13:c4:b6:e1:d0:06:96:86:dd:98:30:45:
45:56:3d:67:8a:a2:93:d3:44:56:34:a5:6a:00:fd:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:8E:A5:9C:CD:C2:17:5A:70:A1:D9:E2:C5:44:F7:36:CE:03:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/98455f0e-92a6-3283-acc5-12e43f366804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.156.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:c4:7e:42:01:fb:24:72:df:4a:eb:0a:50:34:d3:dc:57:ea:
f1:53:03:b0:92:bf:8b:9e:27:5e:ca:fa:ab:07:c8:2f:d3:da:
65:b7:5d:88:39:b4:d5:13:53:83:54:a4:4b:d1:ce:73:8a:9e:
ff:a8:9a:ba:9d:51:65:ca:f5:06:52:66:aa:9f:0f:74:92:b4:
0b:e9:76:40:97:fd:93:76:d5:30:17:d9:54:0f:1b:19:18:a6:
97:85:ea:d9:ba:14:50:6b:d5:61:31:ea:0f:82:1d:45:dd:ad:
d0:e8:32:0b:7a:9c:ba:27:03:b4:a8:c2:e7:cc:fb:69:4a:fe:
b6:97:8d:ed:11:36:fd:f7:9d:09:6a:53:97:d4:2a:f7:00:f4:
48:d6:93:fc:36:e9:56:85:5d:87:92:ac:fc:63:20:92:74:55:
89:bb:3f:17:03:8d:98:15:d8:d4:4d:41:f2:85:2d:90:ae:af:
a0:a2:01:48:c9:f8:69:cf:a6:21:07:a4:60:0a:8d:ac:f7:98:
21:05:3e:8b:12:a5:00:9c:bd:42:d6:6b:27:85:d1:9a:29:27:
0d:31:17:a4:16:7c:33:0c:95:f6:6d:e6:6d:44:04:41:e4:3b:
50:48:ff:2e:60:62:7e:56:47:cf:f0:c5:70:d6:57:03:a9:bb:
57:3f:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:20 2025 by rpki-client