Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c68536bb-f77c-378a-bd52-a2573825bd8a.roa
File: c68536bb-f77c-378a-bd52-a2573825bd8a.roa (raw, json)
Hash identifier: xraL18rEdf8V3HMwx73eE2rZ4klSif1oCT9gbjJOwzU=
Subject key identifier: D9:B3:4A:7B:E2:A1:9F:2C:B7:E7:27:A3:6B:F0:CD:15:02:CA:F9:85
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A6F21DE24330C8D95F000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c68536bb-f77c-378a-bd52-a2573825bd8a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.154.176.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6f:21:de:24:33:0c:8d:95:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=4d5064f2-b9ea-4f61-9ea9-cdbc53866ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:d7:b3:7d:6c:cf:0c:24:52:8b:05:3a:8b:
0b:e9:10:d3:2f:51:ef:84:49:1a:6d:73:a5:9b:5c:
a8:df:c1:f2:6d:ed:e2:ed:94:69:62:3d:96:49:8d:
17:77:64:f5:36:fd:c6:3b:a5:18:00:5e:5e:f9:9a:
5e:d7:ad:6f:82:d6:be:9c:96:7d:24:77:e0:07:13:
c6:7c:a3:64:b9:b6:14:3f:36:e7:d0:56:e2:da:ea:
fd:a9:a9:a8:fe:7f:51:45:08:1f:07:80:6c:af:c4:
83:0b:24:ae:2f:48:5b:b0:e7:6e:a9:8e:7b:5d:da:
54:8b:9b:80:41:c2:12:08:ca:35:73:99:36:ba:52:
2b:49:c8:5f:f2:c4:31:1e:b0:c3:6a:14:34:87:ec:
97:e7:f2:a8:5d:81:55:c2:10:f5:b5:98:7a:f1:bf:
17:60:0a:7e:f3:da:73:a7:8b:b7:93:97:56:a9:d5:
32:3f:f8:5c:3c:27:6b:91:35:4c:53:00:dd:d7:5c:
64:c1:45:d9:45:b9:9e:cc:3e:50:d2:a1:1c:d7:02:
b6:b4:99:c9:65:01:17:45:c8:a5:62:bb:c7:bf:76:
44:ce:2a:a8:01:07:55:a5:07:d6:96:6d:b0:a5:6e:
82:91:b5:a3:3b:04:a5:78:58:c5:d8:01:2e:ab:1c:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:4A:7B:E2:A1:9F:2C:B7:E7:27:A3:6B:F0:CD:15:02:CA:F9:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c68536bb-f77c-378a-bd52-a2573825bd8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.154.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:46:20:07:ca:f5:91:b5:f5:ac:f6:23:83:32:e4:4c:f6:5a:
c5:1b:88:1f:03:ac:df:a2:78:ba:d7:40:81:01:78:a7:6a:32:
cd:73:2b:60:e2:55:cc:4e:70:76:68:67:9a:e2:88:b2:59:78:
ff:f7:98:49:6b:18:26:4a:a0:39:36:8d:11:fd:cf:75:a3:d5:
0a:d8:26:e1:65:71:01:4d:80:ee:43:3e:04:d5:0b:53:42:8c:
8f:eb:24:22:2a:4a:ec:f6:07:cd:cf:c8:bd:02:10:76:e8:9a:
3d:b2:60:e0:bc:6a:bd:10:86:71:02:a8:cc:1d:ab:f0:7e:36:
ec:03:50:65:d5:be:1d:15:d8:d3:8e:8d:df:93:4b:ef:bd:80:
a0:76:36:ee:05:5e:bc:fe:75:b2:c8:d5:9f:d2:f2:96:26:a2:
36:ff:7e:4d:e4:14:51:0a:f2:72:98:fd:cb:ea:86:fb:e4:29:
30:50:7b:8c:36:79:d9:f1:31:8b:d8:af:c1:9e:1a:de:93:f3:
c3:21:55:04:22:c4:e0:68:b8:5a:fc:3e:e7:19:2e:0f:55:69:
97:53:e8:4a:37:0f:60:e1:5c:6f:a4:32:bd:2c:b3:48:93:80:
4e:29:34:37:65:e5:90:1d:57:4e:82:b7:bb:0c:0d:52:64:c8:
b2:2a:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:25 2025 by rpki-client