Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69d0ba1-9707-3a54-96eb-3286e2e930a6.roa
File: d69d0ba1-9707-3a54-96eb-3286e2e930a6.roa (raw, json)
Hash identifier: Ep0UP9wjJyyC0w+dKf2ZP2qy7i76Rle51oGn7asiKV0=
Subject key identifier: D8:3B:B8:BC:57:3A:AE:AA:6F:2D:8F:CB:EF:5C:91:24:DC:BC:47:3E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A752798B6F33F30620E00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69d0ba1-9707-3a54-96eb-3286e2e930a6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 104.198.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:75:27:98:b6:f3:3f:30:62:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0f243932-3063-4ff3-af79-8f066f147553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:e6:ac:3e:ba:18:fa:73:f7:e7:ba:1e:34:
1f:4c:82:12:9e:4c:64:ab:6c:81:b9:89:04:ec:6d:
f4:14:38:82:30:ef:7c:32:d6:55:04:7f:e9:5a:86:
6f:9f:a4:67:48:84:7f:8f:66:b1:ff:4f:0f:48:a4:
78:f1:df:2f:d4:88:61:f2:9e:74:da:60:e3:a0:bb:
4f:4a:50:5b:86:fd:8b:ed:38:64:c2:48:4b:ac:d3:
5a:bc:99:b4:73:7c:61:a2:46:19:45:2a:87:5d:bf:
88:a4:63:43:bd:ea:af:c5:8b:3c:87:26:1e:4b:de:
d5:4a:c0:44:79:87:e4:18:3c:45:7e:bc:96:93:a1:
d8:d2:81:dc:2c:92:c1:09:28:64:71:37:e9:b1:cc:
aa:c4:c9:bf:aa:ce:ab:ce:9e:7b:ed:75:36:c0:93:
76:e3:82:eb:64:21:05:a3:e6:17:ba:47:64:cd:c1:
23:65:92:04:41:59:30:c0:16:36:97:cc:02:95:ee:
cb:b1:ed:84:6a:10:47:c9:9c:70:ba:4d:25:b4:c2:
f6:a1:bd:13:db:d7:3d:2a:0e:df:38:d0:12:38:fd:
a3:58:13:04:61:ed:63:60:80:8d:06:de:91:f2:3a:
8a:d5:65:b6:9c:6e:74:4a:e6:68:2d:e7:8f:3b:20:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:B8:BC:57:3A:AE:AA:6F:2D:8F:CB:EF:5C:91:24:DC:BC:47:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d69d0ba1-9707-3a54-96eb-3286e2e930a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
104.198.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c5:2b:63:1d:b3:94:22:4b:71:84:5c:85:69:d3:44:81:9b:
ab:c7:b1:83:79:24:7d:8c:43:99:e0:ab:7e:dc:44:78:e9:fb:
74:bb:48:32:3a:2f:89:da:51:7e:7c:07:72:36:3e:12:20:b0:
8c:54:09:24:46:d7:36:3a:7c:26:6c:3d:70:50:2a:b2:47:43:
62:8a:78:cd:12:df:d7:03:f7:29:62:0a:5b:f6:11:63:44:14:
67:71:84:5a:f4:41:30:cb:4f:fc:77:03:b8:65:e4:d3:ec:d2:
64:5c:b7:a6:5e:cd:9f:0e:49:f6:22:b1:72:35:60:e8:16:ff:
29:16:2c:3b:f2:9a:91:38:79:5f:e1:c5:11:01:cf:ac:0a:59:
4b:13:11:47:b2:46:fb:0d:b9:0a:c7:24:68:8a:77:ce:1e:3a:
f6:ff:26:6e:88:67:35:a9:b8:a7:6e:8d:0a:77:b1:3b:cf:bd:
ba:bb:e0:4a:3a:e1:6e:00:30:7c:e5:6a:1d:3c:35:05:8b:15:
9c:49:6f:69:c6:9e:18:1c:a8:91:07:2e:0a:98:ec:91:88:62:
00:db:34:16:49:d8:90:6c:98:40:2f:82:86:b8:e4:8f:6a:a2:
3a:97:6d:03:ca:f3:34:ec:ed:59:65:3a:4e:09:b6:03:c2:8f:
68:b5:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:27 2025 by rpki-client