Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e4098251-2b32-30e1-8cb2-9107c3c72e84.roa
File: e4098251-2b32-30e1-8cb2-9107c3c72e84.roa (raw, json)
Hash identifier: 8KJC8UB8E0KGIpOshpD3Ll2cVEOGN4mAGwp1lAcS9rM=
Subject key identifier: 3D:33:1E:E0:85:48:94:3F:7E:A7:8F:38:A5:56:17:C4:F6:D0:25:A9
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847FF4A74343342E13251C1FF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e4098251-2b32-30e1-8cb2-9107c3c72e84.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 396982
IP address blocks: 34.137.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Tue 21 Jan 2025 02:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:74:34:33:42:e1:32:51:c1:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=74e5e6bd-7fd2-4995-b586-85bbb4a3e566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:70:1d:da:78:99:4d:a8:66:87:70:a7:50:
d7:39:72:8e:0e:48:a0:ff:87:ce:c2:5b:64:f1:de:
19:03:79:37:eb:9b:b6:14:5b:30:8f:e1:a0:62:61:
41:74:af:a2:7c:9a:64:5e:53:a1:f1:5d:e3:1f:7b:
7d:ba:c6:39:58:14:26:24:8a:e6:88:22:86:ff:e2:
6a:53:1e:ef:22:e3:ad:04:f7:32:3c:c1:7c:1a:7f:
8e:fe:49:07:29:70:07:33:7e:b9:71:79:de:40:a3:
73:f8:7a:66:3c:58:f3:06:c8:ed:9a:aa:0b:e4:83:
95:42:5a:cb:0b:57:dd:aa:91:70:a1:68:51:b1:4d:
c2:8e:2a:37:4d:67:bd:e4:7b:b8:1a:67:c0:66:65:
97:78:0c:77:cc:04:80:dd:1f:76:5e:5d:3c:63:79:
07:c0:2b:dc:ea:ea:c7:49:11:a0:c8:ff:b2:61:06:
92:3c:35:74:87:2d:17:9b:43:42:8b:7e:b1:05:09:
11:6a:e6:47:c8:f2:4a:83:f3:c5:a7:70:13:b7:aa:
52:89:53:93:9f:d2:6d:71:60:de:2a:e0:10:1b:ea:
84:a4:e7:35:6c:2a:d6:af:82:79:e7:e1:b7:d9:dd:
8f:9c:f5:3d:be:7e:66:d7:48:4e:d1:3b:47:0a:59:
f2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:1E:E0:85:48:94:3F:7E:A7:8F:38:A5:56:17:C4:F6:D0:25:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e4098251-2b32-30e1-8cb2-9107c3c72e84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:ab:22:95:e0:0d:42:ae:e5:59:33:9a:9f:c7:01:e6:fb:42:
1f:78:6a:25:bd:b1:bf:de:74:69:7a:fc:dc:fd:0d:96:03:5a:
fb:a9:ce:63:38:12:5e:74:2e:ff:39:a0:50:83:22:74:87:0e:
99:9f:e5:bc:a9:75:ea:43:35:65:e8:2a:a1:3e:f3:71:25:1a:
b2:d5:10:3b:6f:5a:bf:c4:d2:c3:d7:e1:b0:d0:99:3a:5f:b4:
42:e9:48:64:e8:35:7e:34:13:03:58:d9:eb:2f:df:1a:b6:e6:
2a:1b:0a:40:77:38:8c:42:98:3f:a5:f6:4b:48:5a:f4:38:0c:
77:21:b5:79:55:fd:c6:f3:1d:cb:3a:2a:0e:76:c7:d0:1c:cc:
bd:bf:26:30:a3:d2:c3:e6:f0:c0:19:68:c8:37:3d:06:e8:9a:
01:e2:b3:d6:60:86:e8:98:76:de:37:81:42:dd:51:a4:60:2a:
34:7d:42:3e:c8:41:d4:ad:da:75:c2:fb:5f:d5:50:22:d8:66:
e6:15:ec:67:04:d6:16:e2:75:83:65:88:8f:09:a7:d0:e0:d0:
1a:18:f3:5a:63:71:60:96:16:eb:05:fe:77:cd:a3:eb:03:f2:
ae:62:9f:82:d4:92:95:59:cd:4e:26:e6:05:6a:5f:77:80:36:
22:3c:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:58 2025 by rpki-client