Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11367.roa
File: AS11367.roa (raw, json)
Hash identifier: T2kY5Tx3ctKu4aRhKNdQjUnE0xz19Wxn+jKs9LT9vcQ=
Subject key identifier: 68:F0:5D:A7:6F:05:11:98:6C:1D:55:F4:27:C0:BE:19:D1:6B:2E:6E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1AE1371B1B5529965C25320D6E55F704FC1FE164
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11367.roa
Signing time: Wed 18 Jan 2023 17:16:40 +0000
ROA not before: Wed 18 Jan 2023 17:11:40 +0000
ROA not after: Wed 17 Jan 2024 17:16:40 +0000
asID: 11367
IP address blocks: 104.234.248.0/24 maxlen: 24
104.234.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e1:37:1b:1b:55:29:96:5c:25:32:0d:6e:55:f7:04:fc:1f:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:40 2023 GMT
Not After : Jan 17 17:16:40 2024 GMT
Subject: CN=68F05DA76F0511986C1D55F427C0BE19D16B2E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:b4:12:2b:c6:99:86:cf:15:c7:97:c2:a1:
7b:41:4f:c0:03:b5:14:96:4b:b4:70:2c:ca:1e:74:
b0:bf:67:d3:90:74:1b:eb:34:c0:eb:46:3e:c2:72:
fb:6b:3a:30:94:da:81:5e:85:ee:c9:00:6c:42:d8:
3d:e9:24:ff:d4:bd:42:11:8d:14:a4:ec:4d:75:f8:
a4:87:58:82:d6:cf:f4:94:3c:d3:e7:45:4d:ff:78:
18:66:66:fd:2e:94:50:2b:b4:f9:88:7e:90:1c:1b:
b7:2c:67:af:dd:68:43:65:0e:08:36:f6:08:e4:c0:
ea:3c:56:94:34:13:3f:bc:c9:27:5a:14:a1:13:3b:
d6:2c:26:8f:ae:3b:1c:44:9c:47:00:bc:df:38:15:
1c:f4:20:b0:35:6c:0f:30:df:26:3b:da:87:fc:40:
5d:39:a8:cc:c6:f2:67:8c:a6:e2:0d:de:f9:54:a7:
84:aa:b3:7c:c9:39:24:7b:c1:64:17:12:ef:b8:4b:
cb:3b:fb:31:6f:bc:1f:55:c3:3e:a2:e9:ba:c8:1a:
20:3b:4d:07:d9:40:86:40:11:90:44:41:61:a6:9f:
22:5c:bc:05:a1:a3:92:19:54:4d:f4:72:2d:1f:51:
e1:e0:40:ab:e5:8d:4f:27:19:d1:f4:24:7b:71:f8:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:5D:A7:6F:05:11:98:6C:1D:55:F4:27:C0:BE:19:D1:6B:2E:6E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.248.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:c0:c8:fd:5b:da:2e:44:e5:1f:3d:bc:58:76:a8:72:c8:c0:
3c:5d:60:ee:5b:68:92:2a:98:e9:58:69:7a:81:08:d8:ad:5c:
54:9e:ca:24:92:4c:b1:8a:b4:6b:d0:8b:55:45:bd:d1:94:96:
a1:e8:e2:78:bc:f3:12:2a:b0:11:8a:20:f1:f9:65:74:9b:27:
36:94:0d:b1:61:06:d9:03:b3:c3:6b:98:18:ac:26:63:e2:6b:
35:cb:4f:87:e2:b9:49:0b:25:50:1c:57:16:6c:af:31:f6:b9:
7d:a1:37:fe:ff:ec:11:52:76:15:27:43:ea:67:f9:9b:05:45:
c1:ca:57:13:d4:01:20:6f:ba:b3:8a:7b:2b:7f:64:2e:e1:dc:
0f:0b:71:fd:a1:fe:a8:d3:c3:af:99:28:52:a8:91:1a:c9:ea:
b7:8c:11:18:c3:09:60:a0:ab:71:a3:d8:0e:53:99:c3:8c:b7:
72:37:d2:a0:e6:b8:5b:57:a8:c3:c7:78:05:7c:96:3e:61:03:
d1:57:48:c3:0d:9a:33:c9:f0:6c:35:f7:a2:8b:62:63:fa:78:
cd:e3:5c:40:8c:80:41:0d:6d:cb:a8:95:a6:ee:d7:a5:ae:af:
e9:3f:3c:94:8d:50:58:e0:1d:76:fe:fc:87:bd:fe:7b:0a:0d:
2b:6b:4c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 00:41:36 2023 by rpki-client on console-fra.rpki-client.org