Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: TndTCLQLF/15ZGx0ZnsD3hg04orHrwupO9LkV4RG9i8=
Subject key identifier: C9:1E:E9:A2:54:DC:46:6D:95:38:7D:F2:98:03:69:1C:54:BD:E4:31
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6AEC2B659842D939B7C0F16F0B5096074C724237
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
Signing time: Mon 03 Apr 2023 04:26:01 +0000
ROA not before: Mon 03 Apr 2023 04:21:01 +0000
ROA not after: Mon 01 Apr 2024 04:26:01 +0000
asID: 137409
IP address blocks: 104.234.180.0/23 maxlen: 24
104.234.180.0/24 maxlen: 24
104.234.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ec:2b:65:98:42:d9:39:b7:c0:f1:6f:0b:50:96:07:4c:72:42:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 3 04:21:01 2023 GMT
Not After : Apr 1 04:26:01 2024 GMT
Subject: CN=C91EE9A254DC466D95387DF29803691C54BDE431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:41:27:0f:cb:95:ad:b9:59:37:ef:64:36:
0a:b3:54:5f:93:b4:a5:f7:4c:e5:8c:da:3b:36:4f:
0b:a3:a0:c1:2d:4b:1d:55:12:cc:f1:76:2b:5f:0f:
17:70:c6:2c:aa:bb:12:6e:5c:cc:23:f3:b6:1d:3e:
f0:cc:0d:ff:1b:12:2e:53:4a:b1:5c:58:85:57:6b:
65:1f:44:de:5a:95:1d:9a:cd:c9:db:33:9f:fa:b8:
da:3b:d0:2a:e5:82:75:7a:c4:f4:ce:4d:11:b0:91:
5b:6e:b7:63:da:00:08:d5:89:f0:ba:40:9e:1c:46:
e1:e4:dc:bb:3b:2a:e6:44:bd:a9:25:48:01:b0:4b:
3d:51:a6:c4:b1:d7:10:4b:1a:73:53:40:b5:9c:ce:
ab:11:80:49:e5:da:07:db:49:30:e5:d1:bb:78:1b:
77:58:1f:aa:0d:23:61:ff:73:77:24:52:ec:e8:00:
3c:cb:94:0f:95:4b:f3:2d:19:ac:4c:4d:5b:ab:68:
da:9e:0f:1d:ed:0d:0b:c7:b6:00:60:ad:9e:ae:a2:
7d:03:c5:49:0e:87:3c:f9:a4:c8:de:26:59:76:d9:
e9:38:92:39:c1:00:f0:f8:30:de:47:70:31:24:05:
e9:41:a7:3e:f6:6c:74:0f:b1:f9:cf:50:4f:87:dd:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:E9:A2:54:DC:46:6D:95:38:7D:F2:98:03:69:1C:54:BD:E4:31
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.180.0/23
Signature Algorithm: sha256WithRSAEncryption
13:5c:24:a9:d0:15:7d:78:a1:cd:47:66:3c:32:dc:7a:ba:36:
c0:5a:89:45:23:48:c0:cc:ce:e2:af:0c:3d:33:43:9b:43:53:
e7:d6:a6:f2:c2:cb:d6:33:19:38:ae:26:b2:43:37:be:b8:d4:
44:2f:b6:c8:4f:a4:43:5c:c8:cb:63:db:06:2d:8d:f6:71:62:
d9:7c:1b:04:ac:f6:b6:bb:ea:1f:47:9b:07:3f:fc:46:81:0f:
73:d8:fe:94:42:d3:c4:3c:1b:97:9f:a0:26:c3:09:3e:70:b2:
92:62:5f:92:ae:40:e9:b3:6b:1d:45:af:be:c4:dc:b1:ea:e1:
83:c1:b2:05:7f:48:2c:57:a0:da:da:2b:7d:21:c7:87:f0:03:
be:48:74:93:42:4c:5c:7c:c2:1e:fe:51:08:27:df:08:ad:00:
8f:77:76:d3:df:28:9b:0f:40:bb:7f:ae:d0:ab:98:8f:d4:ff:
03:15:d3:ca:59:c5:b6:15:28:bc:6b:fa:96:5a:aa:ca:04:52:
15:35:4a:ef:39:c3:a4:88:47:c5:c1:00:42:ba:d8:20:59:49:
9c:0b:2f:90:8c:05:e2:ae:f6:ae:75:fa:1d:f3:8c:4e:92:32:
5e:1a:82:30:5a:54:2b:2b:0e:ad:40:8b:f7:36:e3:f3:ee:e0:
16:88:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org