Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: PlQiGrMCWKDhJ0Q3mqlo2e1Sd67m9aXv8DBidmL/XTY=
Subject key identifier: 45:C3:8D:49:18:E4:95:74:FC:88:90:7E:6D:A3:16:C8:F0:80:ED:1C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4428F2D013089E412C8C59B2A7AE613DB8B655C0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1299.roa
Signing time: Wed 18 Jan 2023 17:16:36 +0000
ROA not before: Wed 18 Jan 2023 17:11:36 +0000
ROA not after: Wed 17 Jan 2024 17:16:36 +0000
asID: 1299
IP address blocks: 104.234.69.0/24 maxlen: 24
104.234.88.0/24 maxlen: 24
104.234.219.0/24 maxlen: 24
104.234.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:28:f2:d0:13:08:9e:41:2c:8c:59:b2:a7:ae:61:3d:b8:b6:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:36 2023 GMT
Not After : Jan 17 17:16:36 2024 GMT
Subject: CN=45C38D4918E49574FC88907E6DA316C8F080ED1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:bd:07:d8:1e:fa:1a:cd:45:1b:e5:d0:af:
2a:0c:e5:69:21:ad:59:37:3d:13:f7:24:0b:ff:ba:
be:31:57:39:fa:75:89:51:90:5b:e6:3c:66:03:a4:
a8:fb:25:5b:46:c6:7a:0d:aa:62:1b:a7:54:14:26:
ab:a6:d3:8d:a6:09:e2:95:31:64:7b:d7:0f:dd:98:
ee:03:5b:fe:49:df:96:9f:d0:d3:85:d2:ce:e0:35:
56:8b:55:9c:19:d8:09:d5:54:54:af:df:d3:13:b5:
4b:18:1c:6f:49:c4:55:15:c9:d6:5e:29:1c:f0:05:
45:2b:80:fe:8e:55:b4:ea:5f:a9:e5:62:c4:bc:d4:
8e:c2:2d:c7:94:f5:94:e2:54:81:6c:42:46:e5:cb:
f6:51:52:99:16:63:ce:64:ef:1f:e9:2d:9b:37:6b:
46:35:db:56:68:77:4f:a4:02:ee:f9:ad:df:c3:09:
80:45:b3:88:99:1f:f5:62:3f:c2:1f:0c:dc:3a:f5:
db:2b:78:66:87:38:83:91:e0:cb:e8:32:97:3c:a3:
3a:e8:f1:87:3a:7b:f5:90:e0:9d:19:a1:9c:c3:e0:
98:ca:17:eb:98:3e:cf:29:cf:5f:37:45:fc:d4:f7:
64:03:e2:dc:80:6b:5b:7c:d2:78:14:60:dd:94:91:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:8D:49:18:E4:95:74:FC:88:90:7E:6D:A3:16:C8:F0:80:ED:1C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.69.0/24
104.234.88.0/24
104.234.219.0/24
104.234.221.0/24
Signature Algorithm: sha256WithRSAEncryption
23:63:8b:c9:7a:7c:0b:49:f0:5c:b6:7d:34:32:ee:fd:d9:60:
dd:a2:dc:80:6f:a4:4b:0b:9d:32:98:92:37:7a:4c:13:46:a2:
df:2f:80:fd:72:aa:7b:c7:01:1b:d2:f9:f3:ec:50:26:6d:b6:
e3:a1:52:d1:79:a1:16:4d:a3:91:43:c6:87:20:da:33:5a:79:
59:74:6f:62:b9:fc:4c:29:91:a3:40:b6:4c:b2:e2:55:c2:a6:
60:8e:13:77:e8:52:2c:aa:d1:ec:eb:a5:05:fc:72:e5:5a:08:
3b:fc:5b:91:cd:14:03:3f:a2:08:50:14:85:05:06:26:b5:56:
0d:75:9b:35:b0:56:fa:a7:ec:a6:ee:e3:87:c3:5f:86:81:df:
cf:d2:76:05:e1:07:45:97:39:15:aa:e9:0e:f4:c9:eb:2c:0b:
22:ab:5b:98:61:8e:29:92:d4:49:0c:27:e2:61:9f:ed:90:6b:
40:c5:a7:0c:66:3a:f9:ad:e7:9f:11:d7:0e:db:3e:c1:57:2b:
a9:fc:bb:e4:f4:7a:e8:fb:7e:da:41:e4:7c:c1:44:34:e7:b5:
1d:18:40:a2:bd:5a:58:77:ef:76:cd:23:cb:f4:71:7c:ef:0d:
a0:79:6d:9c:ee:e9:ce:13:f0:fc:9d:5f:2f:a7:54:34:c7:0d:
e0:9c:55:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org