Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa
File: AS14315.roa (raw, json)
Hash identifier: K7951jDDfLGZjpHN+vjo9rTE3oOJu+sjw2E5fQ4ofPk=
Subject key identifier: 3F:42:1A:30:58:BA:5A:AA:14:81:50:41:AC:A0:7E:BD:04:6E:CC:9D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7F17E7BA932186083B911787B20F071968AE54C3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa
Signing time: Fri 09 Feb 2024 22:07:27 +0000
ROA not before: Fri 09 Feb 2024 22:02:27 +0000
ROA not after: Fri 07 Feb 2025 22:07:27 +0000
asID: 14315
IP address blocks: 104.234.3.0/24 maxlen: 24
206.53.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:17:e7:ba:93:21:86:08:3b:91:17:87:b2:0f:07:19:68:ae:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 9 22:02:27 2024 GMT
Not After : Feb 7 22:07:27 2025 GMT
Subject: CN=3F421A3058BA5AAA14815041ACA07EBD046ECC9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:39:40:5a:ad:7b:ff:32:66:1c:7d:ff:27:
8f:1d:1c:57:fa:6d:ee:9c:83:fc:dc:48:3b:6b:33:
1d:b9:b2:e9:8a:cf:cc:5b:eb:69:30:0d:2a:12:af:
c6:78:b1:09:7b:16:c1:41:9b:79:93:ba:a5:80:2a:
cf:88:3e:44:eb:b8:19:7c:07:52:65:54:71:cf:37:
98:d5:47:70:a4:f3:a8:12:43:20:70:4e:28:7b:fd:
f5:0d:d6:b2:64:8a:cb:5a:91:38:08:6a:c0:c1:25:
c0:0c:32:f9:ba:13:90:05:28:4e:eb:90:f8:e7:ab:
74:ac:b3:bc:49:48:ad:2f:db:a8:2d:5c:ad:39:47:
70:13:c6:a5:c8:38:6c:9a:6e:5f:d5:2e:57:6e:74:
d1:fc:1c:d4:18:de:9f:9a:a2:8e:45:dd:e8:ed:0c:
dc:91:6a:59:2c:be:e5:7c:b2:0e:39:be:23:66:f0:
02:50:ac:16:c9:32:6f:40:3d:f9:3a:58:50:29:32:
bd:6b:83:38:b0:a1:da:91:b4:82:40:8e:57:6d:bc:
6f:64:2d:21:07:03:8e:5e:cc:b2:37:dc:ca:20:c2:
93:a4:5c:45:73:4b:28:4f:69:f6:ee:5c:70:f0:e3:
18:37:68:be:1b:b7:a6:6b:a4:e6:76:08:93:70:fb:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:42:1A:30:58:BA:5A:AA:14:81:50:41:AC:A0:7E:BD:04:6E:CC:9D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.3.0/24
206.53.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f7:9f:7e:62:a1:ee:74:fd:db:ad:ad:57:50:2c:d6:45:4c:
48:6d:ae:2e:63:e4:25:d1:a0:67:4d:f5:3b:90:9f:c9:a1:32:
dd:ec:f0:34:56:87:84:de:2f:5f:dc:f1:31:09:f1:06:50:55:
b4:c5:a0:34:ee:6a:0e:6a:ac:13:44:43:48:fa:e9:ab:8c:c9:
ba:17:a1:93:d3:a0:23:1f:5a:98:b5:37:fd:1b:0f:e8:78:06:
71:9d:9e:1b:17:7c:52:fc:b4:5c:72:ac:d2:41:8b:ed:d3:00:
bd:58:07:55:b2:71:a3:32:80:20:91:65:88:dd:6f:67:d1:46:
6c:ba:56:9c:1c:f4:8a:51:26:53:6b:d3:5d:2e:a4:e4:5c:95:
70:d2:95:81:06:d4:f5:11:58:83:90:bd:53:70:5e:e2:bf:6c:
f2:f7:e9:7f:32:f3:d2:31:27:5e:5e:03:04:31:2c:a9:03:e4:
c8:28:87:e1:35:a9:46:d7:bb:c8:5b:2e:64:e7:a5:b2:eb:19:
e1:5b:ce:24:76:46:ad:d1:2d:ed:e1:a2:42:10:b1:dd:1c:a5:
fb:7b:0d:eb:d7:10:d8:92:ce:4b:af:71:7a:a9:6a:90:f3:30:
06:0c:98:ea:5c:fd:54:87:bc:f4:7a:49:c5:ef:be:4a:c7:3d:
17:8f:17:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUfxfnupMhhgg7kReHsg8HGWiuVMMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjA5MjIwMjI3WhcNMjUwMjA3MjIwNzI3
WjAzMTEwLwYDVQQDEygzRjQyMUEzMDU4QkE1QUFBMTQ4MTUwNDFBQ0EwN0VCRDA0
NkVDQzlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHI5QFqte/8y
Zhx9/yePHRxX+m3unIP83Eg7azMdubLpis/MW+tpMA0qEq/GeLEJexbBQZt5k7ql
gCrPiD5E67gZfAdSZVRxzzeY1UdwpPOoEkMgcE4oe/31DdayZIrLWpE4CGrAwSXA
DDL5uhOQBShO65D456t0rLO8SUitL9uoLVytOUdwE8alyDhsmm5f1S5XbnTR/BzU
GN6fmqKORd3o7QzckWpZLL7lfLIOOb4jZvACUKwWyTJvQD35OlhQKTK9a4M4sKHa
kbSCQI5XbbxvZC0hBwOOXsyyN9zKIMKTpFxFc0soT2n27lxw8OMYN2i+G7ema6Tm
dgiTcPtyhwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFD9CGjBYulqqFIFQQaygfr0E
bsydMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE0MzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOoDAwQAzjU+MA0GCSqGSIb3DQEB
CwUAA4IBAQBt959+YqHudP3bra1XUCzWRUxIba4uY+Ql0aBnTfU7kJ/JoTLd7PA0
VoeE3i9f3PExCfEGUFW0xaA07moOaqwTRENI+umrjMm6F6GT06AjH1qYtTf9Gw/o
eAZxnZ4bF3xS/LRccqzSQYvt0wC9WAdVsnGjMoAgkWWI3W9n0UZsulacHPSKUSZT
a9NdLqTkXJVw0pWBBtT1EViDkL1TcF7iv2zy9+l/MvPSMSdeXgMEMSypA+TIKIfh
NalG17vIWy5k56Wy6xnhW84kdkat0S3t4aJCELHdHKX7ew3r1xDYks5Lr3F6qWqQ
8zAGDJjqXP1Uh7z0eknF775Kxz0Xjxc/
-----END CERTIFICATE-----
Generated at Thu May 9 00:48:49 2024 by rpki-client on console-fra.rpki-client.org