Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: kJ7x3AIgAWfOjdUyP7BggHkBPFUBFRHcJqre+7fm68k=
Subject key identifier: BD:97:0F:EE:BB:2C:6D:D6:DE:12:65:7E:89:6E:16:6C:A7:85:88:98
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 382559111ACD6FF914C6F1C47479FF27C936E81D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS10753.roa
Signing time: Sun 12 Mar 2023 00:00:13 +0000
ROA not before: Sat 11 Mar 2023 23:55:13 +0000
ROA not after: Sun 10 Mar 2024 00:00:13 +0000
asID: 10753
IP address blocks: 104.234.4.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:59:11:1a:cd:6f:f9:14:c6:f1:c4:74:79:ff:27:c9:36:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 11 23:55:13 2023 GMT
Not After : Mar 10 00:00:13 2024 GMT
Subject: CN=BD970FEEBB2C6DD6DE12657E896E166CA7858898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:f5:d6:ac:d4:60:7f:f0:8a:40:e1:f1:93:
11:d2:3d:de:45:f5:72:28:d4:84:be:14:1c:2b:da:
58:47:4b:59:1a:26:69:3c:c9:16:a3:a5:6f:d3:c2:
ce:21:55:6c:e3:f6:b8:aa:90:7e:d7:26:e5:6f:63:
2a:5b:59:af:d4:dd:96:d6:c5:c8:d0:9c:5d:13:31:
7d:b5:46:91:1d:c2:4b:b8:2d:4c:0d:27:29:53:94:
8f:06:6d:a1:33:15:5f:8d:69:38:0c:da:ed:88:4d:
27:37:0d:30:77:d8:0a:5f:96:36:c9:33:00:8b:d7:
08:73:8a:11:12:25:3b:3d:a7:c9:6d:7f:0e:ab:2b:
f0:b8:f6:2e:f0:a3:87:c4:da:ef:19:6c:a3:a8:1a:
2b:65:c2:34:c1:cf:5d:6f:ed:7b:7c:da:43:7c:78:
53:b2:87:f7:c7:ae:6a:ba:69:15:53:a4:2d:c8:77:
68:7b:26:14:c5:64:5f:65:5f:3c:0a:58:b3:04:ef:
cf:ac:00:06:cb:1b:f3:fa:84:72:9b:03:bf:ed:ca:
3e:0e:b4:88:0b:10:e1:bb:1b:cd:31:23:62:1a:3e:
12:19:bf:70:72:c4:e3:9b:b8:f9:4f:49:86:67:76:
c9:81:8e:65:aa:f3:85:2c:92:ef:7c:8c:4b:7e:0c:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:97:0F:EE:BB:2C:6D:D6:DE:12:65:7E:89:6E:16:6C:A7:85:88:98
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.4.0/23
Signature Algorithm: sha256WithRSAEncryption
91:cc:5e:ff:c3:14:66:0b:0e:95:4d:6b:f9:21:2e:89:bd:a6:
6f:a7:39:46:a0:af:a3:fd:2f:ff:ec:cf:ef:cc:e0:44:72:48:
85:02:ba:97:43:ff:02:07:18:bd:1f:b8:3a:c1:d6:26:c7:49:
98:bb:09:0d:2c:7c:2d:9a:b3:08:84:39:48:a6:4c:59:52:36:
48:56:2a:58:b6:92:8e:79:5d:14:02:33:71:87:0f:ed:c6:eb:
97:41:41:fc:f4:6c:32:21:a2:01:b1:7d:f8:e1:a3:57:09:8d:
d2:86:38:99:c7:4b:3d:c2:5b:03:09:03:27:97:fc:73:03:c0:
b5:8c:3e:09:91:7b:63:12:52:5d:06:be:95:c1:61:12:30:75:
b4:37:e8:14:b9:23:43:72:8b:0b:ea:2d:72:aa:f4:d2:3e:0e:
7a:8b:c1:21:94:54:c5:2d:e7:2c:9a:03:bf:2d:7b:fc:92:6a:
c3:f7:09:f0:f8:39:f6:4c:95:bc:5e:2c:d1:7c:b0:82:a4:a4:
3d:b9:71:0c:bb:df:8c:a7:b6:03:29:86:8c:1f:23:88:a5:b5:
e4:4f:f8:98:7e:8d:07:d5:10:b5:41:96:be:23:d7:6e:5f:fd:
3d:61:41:12:27:88:ce:97:0d:51:a0:f0:58:56:26:bb:c4:0f:
af:57:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org