Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2baf4bc8-9a8d-3e6e-bc21-1790b43a3335.roa
File: 2baf4bc8-9a8d-3e6e-bc21-1790b43a3335.roa (raw, json)
Hash identifier: g/Gh7j5QkweHRwcZd7XLSn+6+YvFe5aOu+2Xp/5lLlA=
Subject key identifier: A3:D3:CB:8F:66:77:AE:03:56:EB:EE:6B:8B:32:21:4C:F6:5D:00:88
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DDB945807BEF29B9DDE000
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2baf4bc8-9a8d-3e6e-bc21-1790b43a3335.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:b9:45:80:7b:ef:29:b9:dd:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=b01c9452-3ffc-49ae-ab93-94db0b450e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:70:5a:66:b6:18:e1:2b:82:79:3f:72:94:
ce:e9:d1:83:05:80:33:cc:70:4c:8b:03:e5:10:cd:
43:61:84:7a:47:dd:49:89:8d:37:ee:d7:27:08:df:
0e:b1:df:09:8f:de:72:00:5b:af:47:af:16:3a:17:
01:4b:39:6a:68:1c:47:f0:61:ae:34:61:ee:a1:4f:
98:13:d9:9b:dd:97:78:5e:d6:1e:9d:77:82:ba:d5:
11:0a:09:e1:6f:fc:ca:8a:98:08:89:6f:b7:2b:52:
c8:7a:4a:f8:00:ba:31:11:5e:bd:ad:ae:e3:fc:46:
95:05:56:c5:fc:15:1a:ad:89:04:cb:66:92:aa:72:
6f:64:17:1e:de:a9:da:4f:63:67:74:72:d1:39:70:
73:8c:92:b3:be:cd:53:8b:f8:68:b9:e7:3b:13:48:
91:f4:cd:d2:ba:2c:aa:4a:18:71:d8:89:3a:90:3a:
05:3b:e2:67:7e:82:11:0e:0b:65:99:60:5b:05:88:
20:fe:81:74:5c:e9:d6:dc:6f:82:2a:c4:90:05:60:
95:af:49:28:3e:b4:c2:5b:30:ab:75:f7:c8:92:58:
b6:d6:74:06:8e:48:8d:b7:ba:a1:7d:d3:f9:fe:57:
99:1d:7e:0f:9d:83:9a:54:87:b2:83:81:a0:54:9f:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:CB:8F:66:77:AE:03:56:EB:EE:6B:8B:32:21:4C:F6:5D:00:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2baf4bc8-9a8d-3e6e-bc21-1790b43a3335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.75.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:73:5f:c8:48:25:83:77:a6:59:fd:2b:48:af:40:08:3b:f8:
1c:19:f0:b7:1f:94:3f:9e:6a:61:1c:05:62:c0:a7:96:3c:d0:
f3:93:ad:06:36:83:17:c7:1f:4d:b7:4d:13:fe:8b:28:99:4d:
c7:e1:7a:ce:3d:3a:85:80:5c:b5:f0:aa:68:d2:22:7f:cf:09:
f9:3e:3b:eb:89:b9:57:e7:9d:83:2e:45:f9:f1:48:0f:a5:6c:
21:ca:7a:27:ae:d0:7c:cc:7b:8e:0b:bf:00:7d:f8:c6:d1:bf:
22:44:83:8c:d5:b1:9f:c4:b5:17:8e:6c:eb:46:de:13:d3:b9:
1b:44:57:c8:96:aa:b0:c5:e4:e7:5d:5a:6a:51:db:98:bc:e0:
7b:93:48:a1:01:2d:f9:dc:72:71:2e:72:81:31:a9:36:0d:7c:
d3:1b:c1:61:12:9a:3a:d4:94:f3:10:2d:3f:1e:77:4d:81:33:
36:96:67:5c:c6:14:36:be:51:98:16:5a:ef:24:a7:96:a2:2c:
23:d7:d5:74:27:5e:78:aa:11:ba:b5:1a:ed:4d:65:cd:f7:72:
3a:42:a2:8c:72:03:99:03:c1:5c:ba:ab:fc:f4:7a:9d:3a:a6:
e3:cd:c2:c5:bc:57:d2:99:7a:a5:c6:cb:8f:e3:52:7f:a6:5e:
93:fc:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:32:01 2025 by rpki-client