Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139660.roa
File: AS139660.roa (raw, json)
Hash identifier: 8Ww9JTM68ViepHmgHU3uloEgjtn49H8fbcF3DNNmvQ4=
Subject key identifier: 1D:3B:D1:CA:82:AA:83:19:D5:43:79:47:3F:40:70:EE:F8:5D:8B:A8
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2B1A41DDC564A957994A3E488CBBDF31AC6F4F00
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139660.roa
Signing time: Tue 05 Dec 2023 12:16:27 +0000
ROA not before: Tue 05 Dec 2023 12:11:27 +0000
ROA not after: Tue 03 Dec 2024 12:16:27 +0000
asID: 139660
IP address blocks: 104.234.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1a:41:dd:c5:64:a9:57:99:4a:3e:48:8c:bb:df:31:ac:6f:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 5 12:11:27 2023 GMT
Not After : Dec 3 12:16:27 2024 GMT
Subject: CN=1D3BD1CA82AA8319D54379473F4070EEF85D8BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:89:65:7d:4e:3a:62:ba:d8:78:4a:8b:ca:
42:ac:80:3f:00:ea:e6:c8:93:ab:8e:b7:58:07:d4:
b8:e2:52:3b:73:b6:ec:d6:23:0d:69:dd:59:21:04:
2e:30:09:d5:95:3b:7b:9b:b0:18:70:cd:76:70:7b:
be:eb:ff:75:23:ac:57:9d:2d:16:c5:15:a5:47:6d:
7c:a9:bc:d2:c4:1e:fb:60:a8:6c:45:5a:8e:86:f3:
c4:40:7c:69:e7:fb:72:b3:08:7e:c7:2e:49:45:0a:
d8:ee:3a:ab:41:34:42:6a:87:cd:34:e2:23:78:e7:
4e:f8:f4:17:55:70:65:b3:c1:69:47:c5:9d:6f:aa:
17:40:7d:6b:1f:e9:de:e4:77:f5:14:85:c9:09:11:
51:85:0d:26:fc:42:52:b7:b5:b5:7b:d3:ab:a3:cb:
43:47:38:a3:fe:4b:bd:19:80:60:bc:4b:31:af:65:
43:13:8a:f5:00:03:ef:30:49:4f:bf:4e:0f:2f:40:
b2:bf:84:fd:0f:00:e8:b6:01:54:73:8c:b9:70:1f:
5a:9e:0e:a7:28:31:aa:22:0a:7d:5b:31:1f:d0:f8:
b2:cd:90:cc:fc:77:a3:c5:22:61:f2:84:81:1b:19:
08:12:d6:91:a8:f6:f2:93:43:bc:6c:ff:3a:c3:ba:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:D1:CA:82:AA:83:19:D5:43:79:47:3F:40:70:EE:F8:5D:8B:A8
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS139660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ec:d6:73:12:ae:cb:fc:87:4b:2f:79:ad:0f:e2:e1:4f:4c:
d1:52:77:fa:f8:66:7b:5a:64:c7:72:73:5e:f5:31:01:dd:c1:
6b:bb:b8:9d:fe:b8:e1:f1:46:64:5b:1b:35:d1:fe:2e:ef:39:
fb:82:69:51:b1:12:87:eb:fb:33:c9:67:a9:28:5b:99:41:c1:
fd:78:e0:f2:de:ac:7d:9e:2d:93:a4:83:87:db:44:26:b3:7b:
1d:a1:9c:f3:fb:45:ca:b3:48:f9:69:98:c5:79:7c:dc:70:2b:
cd:24:a9:8f:78:03:e3:8b:67:3c:92:93:96:85:c1:75:4c:ad:
d4:98:db:a2:a3:cd:c1:b0:a5:18:d3:d3:ad:84:a7:9a:90:43:
d8:e1:99:64:03:d1:02:f6:cf:10:b6:c3:ef:4a:3a:c1:de:d9:
ca:ce:78:04:c2:ae:7d:33:0a:40:56:75:eb:75:fd:84:36:59:
6b:d7:4e:1d:d4:29:55:ed:f1:36:67:34:f0:ff:01:f6:70:e9:
ea:90:ae:f2:be:75:d3:1d:63:a6:24:a2:c8:14:e5:9a:ef:6c:
47:0d:cd:c1:df:4f:00:9c:76:ee:80:b6:37:06:a3:c8:fd:d9:
3d:9c:27:02:b8:9d:2d:09:3f:9d:2a:ad:b3:e7:ad:8d:7c:ba:
0a:74:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:41 2024 by rpki-client on console-ams.rpki-client.org