Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa
File: AS11611.roa (raw, json)
Hash identifier: 9NN5JXXC/bFEXDrzwAFeTxmtMtLlnxlSuRQWIHAH3bw=
Subject key identifier: 65:5B:8F:1A:62:E4:B4:6D:50:E0:34:38:3A:7F:D5:3C:DC:E0:F3:96
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2CCC655334D5149A98A4C7AC9B58482C41AAA2EA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa
Signing time: Wed 20 Dec 2023 18:01:12 +0000
ROA not before: Wed 20 Dec 2023 17:56:12 +0000
ROA not after: Wed 18 Dec 2024 18:01:12 +0000
asID: 11611
IP address blocks: 104.234.26.0/24 maxlen: 24
104.234.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 00:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:cc:65:53:34:d5:14:9a:98:a4:c7:ac:9b:58:48:2c:41:aa:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 20 17:56:12 2023 GMT
Not After : Dec 18 18:01:12 2024 GMT
Subject: CN=655B8F1A62E4B46D50E034383A7FD53CDCE0F396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:e1:4d:0d:4f:c4:4a:a4:59:68:4c:25:5e:
31:f1:46:1d:cc:64:de:cc:eb:52:2c:a2:e1:b8:d3:
42:47:42:a9:5e:d1:3a:c6:e7:43:25:2d:83:2d:23:
2f:93:ea:76:a7:b3:64:fa:96:04:a8:ba:19:91:05:
ab:02:7c:c9:34:73:5a:64:22:7d:6c:5b:a7:be:24:
31:62:1b:20:66:3d:13:da:d2:81:cc:dd:82:b3:5f:
22:bc:71:a1:bf:15:16:b5:2c:4a:92:84:e0:34:d8:
35:2c:9e:10:39:ea:ed:18:a3:19:5a:2d:0a:ad:21:
0f:ee:4d:54:ce:06:d6:ff:19:81:73:0c:85:cd:bf:
76:1d:45:45:3f:f6:80:69:db:8b:cc:ae:ba:ba:af:
eb:ce:0a:2d:66:b7:e2:6d:a9:14:09:2d:8b:0f:0a:
c2:ee:51:50:11:aa:63:54:f9:08:27:28:85:ac:e3:
a9:ba:d0:b6:6c:1f:20:c5:84:05:51:74:7b:eb:2a:
4c:7c:73:05:17:ba:0a:ec:a1:21:3e:4b:c1:ef:68:
e7:c1:8e:6d:ac:70:02:b7:1f:7a:67:c0:75:f3:54:
04:8a:78:85:8d:fa:37:b4:5d:d6:84:01:4d:ee:70:
c0:8a:ca:f2:13:cf:77:13:a7:70:50:08:dd:7e:72:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5B:8F:1A:62:E4:B4:6D:50:E0:34:38:3A:7F:D5:3C:DC:E0:F3:96
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS11611.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.26.0/24
104.234.222.0/24
Signature Algorithm: sha256WithRSAEncryption
29:91:84:4c:9b:7f:f5:52:75:68:31:3e:ee:a2:84:15:0a:10:
df:dd:4c:a8:48:02:b7:42:d2:96:b4:f8:07:72:d5:83:9c:2d:
45:51:29:11:4c:92:7a:c5:ea:e2:79:fd:de:1f:f6:e6:64:ce:
68:61:61:d8:94:1c:0e:67:56:50:4f:2b:c9:5b:22:08:31:ea:
6a:43:31:85:2f:b3:e5:7f:38:a9:27:67:77:42:c0:86:8a:87:
34:55:26:ef:64:dd:09:14:99:d5:a9:0e:21:06:9b:12:2c:73:
54:40:21:4f:ea:28:52:ba:f1:0f:e4:36:db:b5:3a:98:8a:c2:
aa:a8:67:f7:69:e4:10:c2:71:67:0b:4c:6c:04:f5:12:87:cf:
0d:7d:b7:d7:90:b7:02:67:0c:e3:d7:16:ef:ef:ce:d9:50:64:
31:bc:5a:9a:d1:85:23:89:cf:73:0d:dc:a7:f0:ac:36:40:90:
6c:1a:14:38:55:0a:0d:c1:7f:3f:96:97:12:c7:ef:68:16:04:
9a:f1:02:e8:e6:95:1a:09:32:54:13:bb:8d:f7:41:cb:e5:5a:
c2:6f:c4:3d:d0:29:f6:78:e2:16:28:fb:67:7a:b0:a9:76:b3:
5f:90:be:04:03:54:c9:46:35:2e:64:f4:bb:48:0d:4d:41:65:
ce:aa:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:21:58 2024 by rpki-client on console-ams.rpki-client.org