Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3d050f0-7979-3e18-9efc-8a61a774ff33.roa
File: b3d050f0-7979-3e18-9efc-8a61a774ff33.roa (raw, json)
Hash identifier: 3AtaPUyVMJX8S0dlpmxINL+d15eYdA1aF2qJoh/zaJA=
Subject key identifier: 46:A9:AA:A1:64:6F:8C:4D:A6:E7:EB:B5:D9:FC:A0:D1:96:15:2E:A3
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328583D3C8AAFCC48B6D31165EE3A80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3d050f0-7979-3e18-9efc-8a61a774ff33.roa
Signing time: Mon 14 Mar 2022 04:00:00 +0000
ROA not before: Mon 14 Mar 2022 04:00:00 +0000
ROA not after: Sat 15 Jun 2024 04:00:00 +0000
asID: 396982
IP address blocks: 34.74.0.0/15 maxlen: 15
Validation: Failed, certificate revoked on Fri 29 Mar 2024 20:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3c:8a:af:cc:48:b6:d3:11:65:ee:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 14 04:00:00 2022 GMT
Not After : Jun 15 04:00:00 2024 GMT
Subject: CN=9f438e76-c8e8-46db-87d9-f4be487b5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:55:d2:ed:14:bc:cc:da:b5:8b:d6:71:f8:
c3:7b:3c:bf:5d:e9:63:03:72:6c:68:b3:37:de:cb:
60:c6:06:4f:54:0d:6d:ce:95:ce:70:6b:be:d3:95:
f0:a0:c2:5e:53:04:d5:00:0e:29:eb:c7:05:58:d6:
98:de:8f:03:7d:28:78:eb:04:02:ed:cc:fb:f0:75:
0a:64:22:f8:6b:a3:16:d9:07:86:10:59:79:2a:39:
e8:5c:33:e8:21:41:86:a8:8d:cd:f6:70:04:77:8f:
c0:7a:8a:7a:68:11:05:c7:ec:c1:ec:9f:19:27:91:
94:e8:07:55:de:14:b4:aa:38:e2:04:1c:26:f3:e3:
c6:5e:a0:14:f5:94:ee:f6:e5:7d:f7:4d:33:0f:0d:
5f:0b:f7:36:10:f5:47:9e:93:8c:1c:6e:5c:66:ea:
9e:05:32:20:ad:dd:56:a1:b0:c7:aa:1b:07:39:c8:
ea:3d:aa:41:69:81:4a:e6:21:ad:d2:06:da:d4:c3:
03:12:f5:49:24:07:a7:15:8c:41:0e:df:0f:1b:ba:
a9:c3:02:1d:73:22:04:dc:29:65:b7:0d:3a:84:36:
23:4d:e3:5d:0b:97:43:85:e3:fa:9f:69:5a:9a:e8:
b0:96:03:d5:50:0a:76:05:30:a7:79:66:25:d9:58:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A9:AA:A1:64:6F:8C:4D:A6:E7:EB:B5:D9:FC:A0:D1:96:15:2E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b3d050f0-7979-3e18-9efc-8a61a774ff33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.74.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:d4:bc:cb:0a:02:b2:87:ca:97:d6:6b:7d:27:83:98:a4:fd:
ab:9e:4a:78:28:89:f0:f4:9e:37:a5:a8:08:32:72:d5:b9:22:
fc:aa:1e:56:99:9b:cf:9a:3c:15:e1:69:c9:97:df:f7:9b:1a:
52:03:84:52:17:0b:08:c2:b8:bc:8f:4c:1e:ae:ba:c9:1c:67:
6f:2f:bb:c3:fe:01:90:9e:2b:5c:f8:c2:74:08:af:77:d7:a3:
92:10:84:49:8e:6e:25:bb:7c:86:2f:00:82:76:8e:ce:ba:df:
84:ab:e4:36:5d:be:6f:a8:3b:45:5b:df:18:f6:d2:1e:c5:36:
f1:bd:a7:e9:f8:51:70:22:38:a1:d9:e8:5e:70:6a:c2:d8:16:
84:36:5e:9a:52:08:72:47:43:6b:60:7f:cf:5c:22:d7:b8:a6:
8f:12:dd:81:c3:f1:90:c2:50:01:d2:59:dc:22:9d:85:40:fc:
b7:a6:5a:a6:e9:87:bc:66:3b:9c:5a:57:09:df:82:da:fc:12:
fa:b2:f8:51:ea:df:38:35:fe:a1:ff:1f:9e:8d:6d:30:05:87:
88:91:e5:bb:dd:18:c8:c8:4f:4a:44:a1:1e:4f:9a:0f:80:b2:
f6:46:4f:10:17:26:38:55:fb:16:71:27:c1:85:1f:c1:e7:dd:
95:1a:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:19 2024 by rpki-client on console-fra.rpki-client.org