Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e4b09-f435-3fe4-a38d-bf0a4a59d3fd.roa
File: 432e4b09-f435-3fe4-a38d-bf0a4a59d3fd.roa (raw, json)
Hash identifier: IN64Tom1q4GSCwvtx5aLLpnDNwOqbuneJ3ptba9qykA=
Subject key identifier: 97:61:68:08:69:C7:41:CA:98:91:B5:D9:D3:15:8A:AB:EC:A4:FC:DF
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285841D3DDBFA5BCFA95DCFAF0F5C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e4b09-f435-3fe4-a38d-bf0a4a59d3fd.roa
Signing time: Mon 08 May 2023 12:00:00 +0000
ROA not before: Mon 08 May 2023 12:00:00 +0000
ROA not after: Sun 10 Aug 2025 04:00:00 +0000
asID: 396982
IP address blocks: 34.143.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 00:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:d3:dd:bf:a5:bc:fa:95:dc:fa:f0:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: May 8 12:00:00 2023 GMT
Not After : Aug 10 04:00:00 2025 GMT
Subject: CN=bb41cbd6-e0ee-49b9-a86b-e3d25efd9525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:19:ec:71:e4:f2:7d:6c:03:12:93:36:cb:
d4:d0:8d:91:0d:ce:32:a4:3b:43:6f:68:33:e4:5b:
33:76:fc:28:d8:d2:22:a5:a2:5d:0b:96:3b:bb:93:
7f:d5:90:a8:92:21:f8:b9:aa:48:0f:3a:f6:38:6d:
54:50:86:1f:b3:1a:8d:f2:41:97:63:b1:bb:7d:3d:
82:6f:6e:f3:8b:2a:40:9c:71:9e:02:e2:db:c8:4c:
bb:b9:15:63:17:8b:43:0d:7b:8c:03:1b:5d:ee:c4:
45:0d:96:8c:bc:54:43:c8:66:9e:8a:1b:48:e0:c5:
21:17:e2:31:bf:17:ec:11:94:4a:b8:ea:51:62:39:
c0:ad:4f:93:81:f2:46:af:f1:82:87:17:41:7d:ea:
ca:9d:68:26:61:c2:da:91:69:cf:73:4b:69:a4:44:
14:a3:0b:16:ea:09:22:97:da:0d:9b:9a:63:b9:62:
10:7b:a1:8a:62:04:a9:a4:25:db:1c:cf:1e:fd:87:
4d:5b:13:ff:df:11:a7:64:0f:2d:96:36:72:61:74:
9f:4a:9a:e3:9a:f9:73:17:bf:d8:24:d3:22:6c:0b:
89:23:49:cf:4e:66:51:63:07:d1:a6:ef:eb:8e:16:
cb:5d:09:f5:4a:b9:1b:49:ac:0d:f8:63:b1:c9:8c:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:68:08:69:C7:41:CA:98:91:B5:D9:D3:15:8A:AB:EC:A4:FC:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/432e4b09-f435-3fe4-a38d-bf0a4a59d3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
34.143.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:87:f3:33:0f:61:bf:45:ba:5f:68:de:14:a1:6c:a8:05:38:
14:1e:c4:31:de:52:73:a4:5d:d2:c5:e3:b3:d4:0f:01:77:bd:
8f:d8:ec:99:44:4a:ee:26:27:16:3a:67:9a:2f:5a:57:ec:46:
0a:67:a3:7b:e6:52:85:be:fe:26:77:a8:24:02:3a:14:77:39:
4e:3a:c8:26:f4:4a:c8:90:bd:e2:41:b6:32:b5:ba:64:32:0f:
28:25:59:ac:b5:2f:86:a9:eb:60:78:a7:61:d3:71:49:c8:2c:
d9:1a:9f:e9:dd:28:ea:77:5a:ce:a2:41:84:90:11:0d:ed:e2:
d9:23:e6:76:87:fd:01:cc:e9:71:df:c3:f2:db:b6:31:5a:63:
a4:a1:a2:b5:87:e2:bd:9a:0a:36:b3:57:e0:7f:b9:84:8c:00:
35:46:5d:30:a0:33:95:9a:da:6b:d2:35:f3:17:b4:f2:81:b1:
45:76:7c:9b:81:17:03:72:cb:7f:84:43:56:85:a5:6c:92:9b:
1e:85:5f:55:9c:28:19:02:de:cd:38:1d:17:71:90:88:93:06:
2f:ac:ae:de:ec:fc:9d:66:ee:db:86:85:3c:90:d0:3a:c0:6f:
ff:d5:c5:54:18:28:5d:0f:e9:2d:b0:9c:e9:23:c5:cc:47:79:
a7:30:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:27:33 2025 by rpki-client