Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a46cfba-9a91-3f0f-95dc-803a1dc28cb4.roa
File: 9a46cfba-9a91-3f0f-95dc-803a1dc28cb4.roa (raw, json)
Hash identifier: 4KCjlp/BqLPHTfF1PGI+GWcbr+qUevWuRafxq2yGaho=
Subject key identifier: C5:E2:C5:43:AA:FA:B4:5C:53:70:56:6F:69:E5:5F:FF:58:7D:9B:0A
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A5425E35FB81666BBD200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a46cfba-9a91-3f0f-95dc-803a1dc28cb4.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.66.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:54:25:e3:5f:b8:16:66:bb:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3e696bb4-e254-477c-87c4-1e7cfe250460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:84:db:13:e5:7c:67:17:63:d6:8d:cf:ef:
c5:a7:b3:de:58:0a:a7:41:65:6d:70:5e:25:06:1d:
e5:a1:78:84:92:55:6a:0e:6d:5d:27:35:3e:e5:c8:
1b:87:b2:cd:f8:f9:38:26:af:3a:ff:6d:c9:b5:5e:
a1:71:26:9d:b1:d7:dc:b0:76:7f:90:29:d8:24:a5:
8e:fd:88:df:ee:32:e1:c9:de:7b:7d:db:d5:56:cb:
e2:79:38:e6:f4:b7:52:bb:ed:55:76:44:00:ba:64:
21:d1:3b:40:29:5b:bc:3e:c3:44:08:19:b4:e6:54:
48:dd:08:68:b7:c2:29:fa:bb:ab:0f:35:e6:a2:b6:
b9:e4:88:ef:ca:ab:81:ae:8e:08:20:65:24:1b:c0:
b8:03:7e:04:1b:f8:3e:ac:c5:64:eb:b7:0a:86:d5:
9e:0d:6b:82:d4:41:cc:85:18:84:c3:8f:86:22:8e:
63:45:d1:64:ad:25:87:7b:ae:bc:81:13:29:21:1e:
0a:c9:a9:02:07:c5:fb:91:f4:f5:53:a6:e0:21:ed:
59:78:ac:8f:fa:c9:c3:0b:c5:0e:5a:8c:c9:81:cd:
1e:bf:36:d3:e2:af:6e:2e:f1:4a:c9:01:0a:c1:29:
7e:67:21:9d:b8:96:5a:1a:e7:23:07:ec:92:97:00:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:C5:43:AA:FA:B4:5C:53:70:56:6F:69:E5:5F:FF:58:7D:9B:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9a46cfba-9a91-3f0f-95dc-803a1dc28cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:29:18:6b:ea:c3:b3:81:88:3c:9c:20:9c:42:45:2a:1f:84:
b9:ba:76:75:8b:5d:79:47:28:21:1e:1a:38:85:0b:83:3f:10:
94:1e:ab:80:6e:31:3a:7e:8a:b5:77:0d:05:d5:6c:fe:81:4c:
4d:2f:b5:9c:70:c4:39:07:20:4b:04:f6:61:6b:98:17:dd:f8:
43:c6:07:ae:e0:75:44:c2:8f:91:9d:ce:6c:38:a1:dd:12:c3:
a9:dd:43:87:ca:45:09:54:8d:e2:76:ba:62:28:90:14:d6:be:
11:60:a0:38:7d:44:2b:4c:c3:7b:4b:d2:43:93:1a:89:91:64:
02:54:e6:53:9d:1b:a9:59:63:17:b8:19:29:d0:01:e6:c6:de:
df:a1:6c:aa:1f:71:09:50:e5:5a:5b:a7:71:63:8c:1f:9c:09:
63:a3:fd:1e:e2:40:94:48:16:d6:46:76:bf:cf:74:f0:17:0b:
9f:b6:01:d0:7c:6f:96:6f:f1:c5:d4:67:c1:d9:36:93:44:48:
70:85:01:89:1d:d9:f1:d2:13:de:e1:92:c2:7b:b3:c4:b4:9a:
4f:0b:97:04:d7:ad:9d:7a:8b:42:49:10:8f:cc:41:1d:9a:c5:
cc:e5:b0:ff:c0:aa:62:4a:c6:cb:6d:59:0b:9c:bd:ad:88:70:
ca:08:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:55 2025 by rpki-client