Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a566181f-a601-3b89-90f7-07a2147696d6.roa
File: a566181f-a601-3b89-90f7-07a2147696d6.roa (raw, json)
Hash identifier: F/pGAnjE6TVNIKsyLqx1V+iZYGf5BLEpOU7MXIifZr0=
Subject key identifier: 73:C8:5B:74:03:09:CD:AF:F4:02:4A:D4:28:62:DB:E9:D0:19:62:DC
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A640684D4557DC5434F00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a566181f-a601-3b89-90f7-07a2147696d6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.118.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:64:06:84:d4:55:7d:c5:43:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=befe0207-f560-4ada-927e-cbfe5e5ac5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:94:04:59:5b:72:6c:2d:12:02:0c:b9:ed:
25:72:2d:76:66:06:ed:3b:09:cd:24:22:eb:d2:a1:
56:91:6c:f2:94:08:23:64:92:b3:25:a2:e7:ab:36:
af:ac:bb:62:84:76:80:34:6a:8c:a8:8c:5e:c8:44:
6a:10:53:05:57:e3:d9:17:0b:f8:db:c7:bc:83:0d:
56:96:06:8a:ae:02:6e:f5:e7:fe:32:5a:2d:05:83:
94:8d:74:d8:7f:1a:d6:d3:05:88:b8:66:6b:72:17:
78:ad:16:db:ef:e7:10:7f:df:43:a1:d3:71:73:b1:
09:d0:c4:1e:76:b6:75:58:30:27:e8:e1:50:f3:49:
67:83:30:8d:61:6f:5f:ad:5f:7d:fd:b3:ec:8d:59:
7c:3c:b6:96:36:de:dd:c7:e7:c8:cb:c9:c3:6d:fe:
21:08:eb:08:92:ad:fd:28:11:d4:93:77:a0:6c:de:
d3:a8:00:c3:f6:48:bd:1d:5c:bd:66:0c:e9:eb:f2:
c8:fc:b6:50:d7:b1:3e:ae:e5:06:28:74:bb:c9:6b:
b6:49:b8:c3:fd:8c:c1:c4:8e:aa:44:bd:84:1f:4d:
5d:15:94:c2:bc:45:3b:a9:43:a9:cb:1b:d0:88:ee:
30:bb:ca:12:6c:5d:ef:3a:21:97:79:db:9d:48:67:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C8:5B:74:03:09:CD:AF:F4:02:4A:D4:28:62:DB:E9:D0:19:62:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a566181f-a601-3b89-90f7-07a2147696d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.118.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:0b:c9:56:a3:ca:3b:04:03:08:cb:e3:5f:bd:9e:2f:a2:86:
4d:4d:27:14:be:93:b8:f3:72:3d:24:61:23:b5:42:65:21:54:
b6:13:91:ee:f5:ce:bb:9f:77:78:90:33:47:ed:1b:71:d5:a9:
ba:60:c7:ba:09:5e:42:e9:a4:94:45:c5:fe:96:9c:a4:be:cb:
ec:ae:38:74:36:64:2e:c8:10:f1:8f:cd:ee:55:51:c6:37:fc:
50:37:35:b7:de:c9:0c:79:d9:6c:a0:06:32:2a:ae:bd:b4:e0:
51:8e:1a:7c:3e:bd:50:a0:46:c5:29:96:b8:bf:19:75:39:3b:
35:e8:35:eb:ec:18:36:3a:2f:53:fe:70:02:af:21:54:f5:a4:
05:eb:cb:f8:9c:27:72:28:97:44:29:f9:e4:9b:79:0c:82:2b:
b6:94:ef:70:44:7c:28:4c:60:31:c1:2d:cb:bc:81:36:c7:b9:
0c:ea:a1:b6:b8:e7:ad:ab:af:12:08:74:33:5b:dd:5f:a5:d3:
8a:f9:36:d7:78:1d:db:a0:98:ea:d4:ec:8b:1c:aa:5a:f2:f7:
e4:13:8f:18:fd:66:8f:e9:ec:f7:d5:ca:b9:2d:9d:5c:2a:05:
83:c3:d8:a6:1b:2c:5d:06:39:da:9c:8a:aa:87:ca:f9:2f:10:
9a:2d:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:30 2025 by rpki-client