Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b218a195-1e8d-326e-9141-05509969ac50.roa
File: b218a195-1e8d-326e-9141-05509969ac50.roa (raw, json)
Hash identifier: +mCmBN5o85g/A1CRIncJ56xeITN5zk+rS02Y7RLip74=
Subject key identifier: A3:BD:B0:5E:F9:96:2D:8D:2B:89:C0:AF:BA:21:BE:02:C9:BC:BD:73
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A65EEF7AC8F4186E6F840
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b218a195-1e8d-326e-9141-05509969ac50.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.89.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:ee:f7:ac:8f:41:86:e6:f8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=b12385ff-01bd-43b5-a8c0-e61cf165cf3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:aa:fb:33:17:3f:80:51:32:9f:a9:e6:f5:
bd:b5:5d:c9:43:13:c3:ca:95:fd:94:ea:0e:e4:39:
ff:79:39:5a:56:be:1f:7d:b0:c6:cb:01:1c:2e:b8:
6c:17:ac:36:2c:da:bd:fb:dc:1e:5c:eb:fd:09:ab:
a8:c9:85:b2:85:7b:c9:5d:be:69:d2:68:1f:06:88:
aa:07:34:ff:ef:27:e7:0e:0c:d6:19:64:f4:36:0d:
ef:9e:48:3b:32:36:31:5e:58:e9:c0:7d:b8:9b:c9:
ac:b8:6a:e3:c0:76:b5:9a:1c:0a:4f:88:f7:ab:b9:
34:e4:4f:bd:b2:09:bf:21:60:8d:b0:92:7b:92:d0:
dc:73:2e:0e:a3:0b:57:49:af:cf:5c:95:5d:4f:38:
ac:24:eb:6a:a5:5c:79:5e:18:a3:01:bd:07:97:17:
58:ae:87:b6:2c:eb:97:00:18:09:29:23:b0:33:fb:
71:c1:ce:8f:d0:ee:14:9d:e3:f0:48:4e:e7:17:e3:
ce:65:cb:30:0d:93:c9:0e:ef:f7:33:57:02:c3:f0:
4b:7c:1c:32:d5:2f:b8:11:49:d5:10:a0:33:2c:2d:
67:3e:9e:6b:14:cd:76:9e:66:53:c3:86:43:79:3b:
11:84:7c:f0:1b:ba:0e:ae:04:a1:f6:c1:27:09:98:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BD:B0:5E:F9:96:2D:8D:2B:89:C0:AF:BA:21:BE:02:C9:BC:BD:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b218a195-1e8d-326e-9141-05509969ac50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.89.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:dc:ac:49:4e:b4:28:b5:ba:06:46:b3:78:bc:d8:aa:af:3f:
de:cc:82:96:b9:7b:cc:fb:c1:eb:ce:12:48:ba:3f:d4:bf:58:
96:0b:03:f8:b0:ed:2a:68:d6:f0:22:48:b6:9d:a3:09:ae:8f:
c5:87:b4:da:8c:df:0e:93:d9:0c:e7:c0:86:c8:bd:c9:6b:26:
1f:cc:08:dd:f2:da:d4:c6:e5:e5:27:74:90:3c:06:5f:6b:45:
e9:95:6a:a1:05:c7:9b:10:39:eb:8d:b6:5b:5c:72:0e:f4:41:
69:41:35:a8:87:bc:5c:d9:a2:21:41:f2:45:fe:29:19:b2:34:
0d:a1:19:56:20:ea:95:c0:b7:fa:bf:df:e9:87:18:9d:e7:33:
f9:59:2b:3d:e8:e5:9e:6a:b8:76:24:dc:e7:15:1b:c5:fa:8e:
6d:38:72:cd:13:d3:f5:f7:06:a2:95:ef:f0:18:ac:39:cb:12:
f1:89:df:5e:3e:6c:0e:05:a1:ff:20:21:f6:a5:c7:df:e2:b7:
a3:35:8f:80:dd:e7:e2:40:9e:01:80:b1:2b:e8:99:c8:51:9e:
f5:d3:e7:f8:55:70:ab:4b:60:9c:99:f2:bd:27:6d:5a:52:0c:
c6:12:ed:50:f2:1a:89:59:5d:f9:7b:47:0a:b9:fb:81:29:e0:
d6:2e:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:32 2025 by rpki-client