Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS38424.roa
File: AS38424.roa (raw, json)
Hash identifier: P6cPFHyg4eN55eCv5Nyu/k/LxRPNQ7TgIhrxX8wVs+I=
Subject key identifier: 4C:10:09:08:2A:C1:D4:E9:8F:49:85:B5:31:4D:AA:AD:2A:2F:B6:17
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 1C201B1F6ACC824E74DF57D415E2FA13C2D19167
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS38424.roa
Signing time: Thu 27 Jun 2024 04:04:57 +0000
ROA not before: Thu 27 Jun 2024 03:59:57 +0000
ROA not after: Thu 26 Jun 2025 04:04:57 +0000
asID: 38424
IP address blocks: 23.156.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:20:1b:1f:6a:cc:82:4e:74:df:57:d4:15:e2:fa:13:c2:d1:91:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jun 27 03:59:57 2024 GMT
Not After : Jun 26 04:04:57 2025 GMT
Subject: CN=4C1009082AC1D4E98F4985B5314DAAAD2A2FB617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:46:b1:96:8f:6e:64:6d:77:15:b4:90:37:
c5:ba:cd:2f:f5:67:d0:b6:ef:37:aa:6e:03:91:48:
cb:b2:2d:0b:bf:33:60:ea:24:b7:77:6b:00:66:c4:
ef:8a:c9:91:70:cc:3f:ae:fb:c7:51:f1:f7:b3:1d:
4e:39:f5:d0:2f:d6:71:7e:e4:e1:9a:5f:0d:bd:08:
f0:e4:4a:2d:b5:bd:fb:aa:78:cf:a8:9a:93:e5:d3:
11:92:b2:85:b9:8a:d5:f3:3d:bf:f0:b1:98:33:f6:
51:fc:9f:0c:be:08:45:d5:d2:92:9a:9f:f7:f6:bc:
ba:b5:8c:b7:52:52:93:52:a5:4e:9a:a3:70:ec:c8:
31:af:05:29:50:99:3b:e5:b9:ec:04:5c:b0:6a:4a:
76:b9:19:1e:03:fb:9b:76:45:ba:02:e8:39:92:be:
e9:3f:00:9a:05:69:7f:4a:af:0a:04:17:d9:af:61:
d7:92:99:a1:0a:f6:a2:52:66:54:18:df:76:7c:a3:
82:33:d6:0f:a2:a9:ff:fc:f5:2f:63:45:0c:b6:a7:
d7:d1:82:11:2f:ba:4b:c9:5b:cf:01:49:bb:d2:5c:
8d:c4:ca:b5:ab:df:07:f7:25:f2:1b:f4:e6:2d:c1:
40:96:1c:d1:fe:d3:53:60:6b:6e:48:34:c0:46:9a:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:09:08:2A:C1:D4:E9:8F:49:85:B5:31:4D:AA:AD:2A:2F:B6:17
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS38424.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.156.240.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7c:3c:0b:bc:b9:a3:74:99:a3:21:d0:97:4b:ef:ab:c2:e8:
10:17:95:cd:0c:41:cc:2f:69:49:1f:ac:e9:2d:41:58:84:7d:
93:d7:a1:42:39:47:11:78:bc:1a:26:0a:19:a4:55:ac:79:ef:
9d:9a:da:d4:13:93:ea:9f:4e:a2:8e:fa:4d:20:5a:cc:4b:e5:
ea:6a:e7:ab:83:ae:05:3f:87:ad:dd:be:c5:b9:23:19:61:1e:
3b:31:b8:2c:71:75:87:f0:0b:7d:97:d9:4f:76:d1:92:9d:ac:
4f:10:04:73:cc:79:eb:b9:2d:6d:f1:10:eb:41:2b:1e:c4:18:
97:a6:9c:a5:0d:08:1f:4b:c4:ba:23:ad:db:48:13:86:87:fd:
4d:2a:24:1c:e6:da:ba:f8:e7:6c:5e:af:9e:82:fb:dd:67:fd:
b0:58:18:a1:31:eb:e2:3a:07:ac:13:c5:e6:5b:5f:cc:58:d6:
fd:1a:0f:6d:37:75:85:37:85:02:57:13:32:27:bd:a1:1f:68:
e6:ac:e9:cb:6f:99:53:33:ac:79:7f:b0:e4:77:a0:83:56:1d:
4e:3b:22:45:79:66:9e:11:0d:47:bf:33:6f:1d:f7:54:e2:21:
af:d2:e8:22:7f:f2:5c:eb:46:cf:cb:d6:68:67:c6:c2:c6:a4:
b9:68:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 02:44:49 2024 by rpki-client on console-fra.rpki-client.org