Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137897.roa
File: AS137897.roa (raw, json)
Hash identifier: 0cj6vndArI0wz/a36f0k/AcFbJXW0SIhlBN0kXDC78U=
Subject key identifier: 7F:0C:17:6C:F3:61:F6:53:E9:FD:4F:5C:1E:28:14:69:6A:F7:A9:8B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 079C8D210CC51C49574DBB606FEE0AB3266E5F18
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137897.roa
Signing time: Sun 26 Jan 2025 14:39:21 +0000
ROA not before: Sun 26 Jan 2025 14:34:21 +0000
ROA not after: Sun 25 Jan 2026 14:39:21 +0000
asID: 137897
IP address blocks: 104.234.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:9c:8d:21:0c:c5:1c:49:57:4d:bb:60:6f:ee:0a:b3:26:6e:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 26 14:34:21 2025 GMT
Not After : Jan 25 14:39:21 2026 GMT
Subject: CN=7F0C176CF361F653E9FD4F5C1E2814696AF7A98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:8b:34:76:7c:73:d5:35:57:e0:73:69:5d:
57:88:88:d9:0a:d1:f7:86:11:46:c4:6d:93:1c:dc:
09:e2:2c:c2:4a:63:9f:2a:d9:15:53:d4:c7:0d:6f:
e1:16:cb:37:b3:46:2e:1a:05:4d:96:fd:41:51:21:
fe:a0:bf:ac:10:a0:af:3c:a7:72:1d:ff:90:3e:4b:
c4:95:27:48:1a:3e:2b:2a:b3:c1:ae:e7:26:25:75:
98:9e:55:d3:ea:f2:3b:81:65:b9:09:23:82:11:42:
11:f6:1b:42:59:60:a3:9a:0a:8b:79:bb:f0:9d:65:
9b:4d:a8:92:1a:4c:39:2f:57:f3:73:e1:4e:0a:d8:
e2:8c:1c:e0:cf:1b:81:15:64:aa:b8:b6:8b:99:a2:
65:b0:e8:ed:ab:bd:96:d6:12:fa:98:46:5f:87:83:
7e:c3:81:b7:26:ba:9e:30:0b:eb:6a:7b:d8:98:10:
eb:31:29:dc:c1:e7:02:86:08:1d:eb:59:76:42:87:
68:a1:74:c6:0b:ce:b2:aa:06:3d:46:63:89:c9:fb:
fc:5c:e5:36:62:4d:e2:17:17:fb:1c:ed:26:fb:28:
17:d9:60:75:10:af:00:c0:a5:9c:86:5d:2b:f4:52:
91:d6:6d:ec:9c:00:d3:03:1c:fe:5e:d3:94:ff:cc:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0C:17:6C:F3:61:F6:53:E9:FD:4F:5C:1E:28:14:69:6A:F7:A9:8B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS137897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:3a:1b:07:ea:21:e5:89:59:99:3c:73:ab:6d:95:37:f3:8f:
c6:ee:e2:1f:e8:fc:15:e3:2f:38:a8:09:b2:de:18:76:ba:9f:
1f:f1:62:57:77:9f:9f:45:d2:4f:c2:0e:4b:9a:14:e1:f1:e2:
94:eb:7a:5a:2a:cc:4c:89:af:7f:94:e6:ad:15:cd:dc:5d:d5:
5f:64:7c:9a:b9:26:3d:e4:a6:3f:18:02:c5:d2:61:cf:43:0b:
a1:f0:8b:83:2b:82:1e:e5:56:99:9f:8c:52:28:94:9b:df:86:
70:14:c7:90:95:ff:d0:73:04:89:5b:dd:07:75:5f:51:d1:a8:
c7:de:1f:7d:a7:1a:c6:9a:f4:4e:6c:d0:35:1f:72:f0:5e:85:
4d:aa:c0:22:ef:05:7e:92:cd:db:1f:5f:66:85:6e:b8:0d:be:
41:3c:b2:de:f5:7a:4d:75:2c:f7:33:1e:d8:56:28:4e:d1:09:
4a:a3:ca:c6:4a:d9:a1:f9:26:81:be:cc:7f:fc:f3:8b:6e:17:
9a:08:f7:05:a0:b2:bd:ab:f3:07:70:73:ad:fa:37:c8:4d:05:
e3:b6:60:88:a9:de:fe:a8:95:9a:81:a9:63:a6:d2:28:cd:98:
46:74:da:ae:c3:43:c9:25:8e:c1:92:c2:a0:8e:0e:5e:c2:df:
d4:de:4b:9f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUB5yNIQzFHElXTbtgb+4KsyZuXxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTI2MTQzNDIxWhcNMjYwMTI1MTQzOTIx
WjAzMTEwLwYDVQQDEyg3RjBDMTc2Q0YzNjFGNjUzRTlGRDRGNUMxRTI4MTQ2OTZB
RjdBOThCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7GLNHZ8c9U1
V+BzaV1XiIjZCtH3hhFGxG2THNwJ4izCSmOfKtkVU9THDW/hFss3s0YuGgVNlv1B
USH+oL+sEKCvPKdyHf+QPkvElSdIGj4rKrPBrucmJXWYnlXT6vI7gWW5CSOCEUIR
9htCWWCjmgqLebvwnWWbTaiSGkw5L1fzc+FOCtjijBzgzxuBFWSquLaLmaJlsOjt
q72W1hL6mEZfh4N+w4G3JrqeMAvranvYmBDrMSncwecChggd61l2QodooXTGC86y
qgY9RmOJyfv8XOU2Yk3iFxf7HO0m+ygX2WB1EK8AwKWchl0r9FKR1m3snADTAxz+
XtOU/8zURwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFH8MF2zzYfZT6f1PXB4oFGlq
96mLMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzEzNzg5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq7DANBgkqhkiG9w0BAQsFAAOC
AQEAwjobB+oh5YlZmTxzq22VN/OPxu7iH+j8FeMvOKgJst4YdrqfH/FiV3efn0XS
T8IOS5oU4fHilOt6WirMTImvf5TmrRXN3F3VX2R8mrkmPeSmPxgCxdJhz0MLofCL
gyuCHuVWmZ+MUiiUm9+GcBTHkJX/0HMEiVvdB3VfUdGox94ffacaxpr0TmzQNR9y
8F6FTarAIu8FfpLN2x9fZoVuuA2+QTyy3vV6TXUs9zMe2FYoTtEJSqPKxkrZofkm
gb7Mf/zzi24Xmgj3BaCyvavzB3Bzrfo3yE0F47ZgiKne/qiVmoGpY6bSKM2YRnTa
rsNDySWOwZLCoI4OXsLf1N5Lnw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:41 2025 by rpki-client