Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7e082ba-f7e0-378f-9c72-90dc0322da83.roa
File: d7e082ba-f7e0-378f-9c72-90dc0322da83.roa (raw, json)
Hash identifier: TuCoEUO9Tmf+dda0MJrW+p6yCoPncQCCraBSukgv4KI=
Subject key identifier: FC:0E:45:C6:E2:63:61:D5:DA:F0:3F:AD:58:BC:72:C3:D1:83:F2:1E
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A7355EAEBDE0E1D7F2540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7e082ba-f7e0-378f-9c72-90dc0322da83.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.145.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:73:55:ea:eb:de:0e:1d:7f:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=eddabb96-9446-4925-aca2-e70846ed22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:65:34:50:d6:0d:04:6a:64:ae:de:0d:f4:
fb:fe:eb:00:25:22:e1:20:e0:99:fd:20:0f:32:9e:
09:67:2d:08:12:91:84:e5:31:39:cd:34:0d:02:16:
fd:bb:e9:93:a2:07:70:db:61:7f:00:e4:e2:37:f4:
90:c6:02:1a:d3:65:32:d3:53:77:61:42:53:c0:1b:
c3:26:97:ac:32:c8:51:27:cb:5a:25:63:22:b7:3e:
c5:e6:67:b3:b2:ca:ba:42:97:67:c6:53:92:3d:f4:
35:48:e1:e0:b4:87:c4:1c:e6:ce:ce:0d:8a:43:77:
e8:58:27:19:06:eb:03:95:75:c6:df:2f:c2:5a:89:
1a:ef:a6:7e:c2:95:86:d8:e9:a9:7d:04:e2:70:3a:
b2:26:74:0f:b7:fd:f5:24:0a:39:46:5a:03:fd:82:
9f:46:dd:64:14:59:07:4f:26:a9:6d:18:42:fc:c4:
8e:75:58:61:ac:ef:00:d2:10:00:de:a3:a9:33:94:
57:22:98:a9:1f:12:ed:ab:61:bd:bb:cc:b3:da:7e:
ef:19:bc:c5:0e:21:78:57:81:a3:4e:7f:9c:ff:5c:
fd:a4:4a:32:6d:e5:6b:e8:67:0c:45:2e:a0:5e:2e:
3d:ed:4d:b2:78:b4:fc:ff:89:ff:e7:0c:50:31:cc:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:45:C6:E2:63:61:D5:DA:F0:3F:AD:58:BC:72:C3:D1:83:F2:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d7e082ba-f7e0-378f-9c72-90dc0322da83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.145.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:b3:50:e7:fb:b1:7e:9a:df:f8:9a:25:61:8e:70:91:b5:b7:
92:64:83:79:b3:7d:2b:a3:76:f0:90:b4:d5:77:f2:3c:45:74:
b0:11:a7:d7:60:f9:b7:f5:8f:ef:4c:a8:f7:3d:ed:08:48:f5:
b5:ae:c6:88:c8:3d:3c:ce:1a:36:93:6e:20:14:40:a5:81:e5:
49:fc:b8:93:64:72:c3:35:a1:43:ac:ad:69:c8:0a:18:35:9d:
7f:bb:a6:d0:dc:1e:36:c4:79:69:b3:9d:98:6e:21:ec:75:77:
52:70:54:30:b9:93:91:31:c1:e4:37:8a:c1:e4:31:ae:53:b1:
0d:30:be:62:94:8a:a7:3c:ae:a6:71:9f:09:d1:a1:58:ff:ac:
fd:0f:90:f4:27:cb:e6:6c:c9:0d:c2:ab:3b:69:92:77:5d:08:
07:bb:60:6e:f5:2b:35:ee:1c:40:72:30:c4:11:20:94:df:a5:
bd:08:73:68:10:77:cc:ef:19:11:82:12:91:f3:c9:89:06:a5:
ee:29:3e:f7:fe:04:a2:e8:22:19:7c:1b:45:8a:30:69:23:e9:
53:f8:61:b7:d2:f0:98:72:a6:cd:00:92:58:4b:c5:a2:89:11:
09:68:e9:3d:53:91:5f:19:9d:b8:92:ac:7d:56:77:73:df:2f:
2e:66:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:14 2025 by rpki-client