Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149020.roa
File: AS149020.roa (raw, json)
Hash identifier: Ed1MdEhx+ftj/mxaMgtDdLAfiWjgNKZjeMIjz473OQo=
Subject key identifier: 1B:1B:80:7A:A7:28:71:41:B1:3C:F4:76:BE:4D:B1:C1:A0:53:51:EE
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3ACF7622388CBA6FE1C4EFADAB68042D0DC67A9D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149020.roa
Signing time: Wed 23 Oct 2024 02:05:39 +0000
ROA not before: Wed 23 Oct 2024 02:00:39 +0000
ROA not after: Wed 22 Oct 2025 02:05:39 +0000
asID: 149020
IP address blocks: 104.234.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:cf:76:22:38:8c:ba:6f:e1:c4:ef:ad:ab:68:04:2d:0d:c6:7a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 23 02:00:39 2024 GMT
Not After : Oct 22 02:05:39 2025 GMT
Subject: CN=1B1B807AA7287141B13CF476BE4DB1C1A05351EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:61:9b:67:17:5e:09:69:b5:3d:7e:ea:5c:
e3:61:d9:d1:e4:0a:5b:24:95:fb:e6:39:86:84:a2:
f1:df:29:3e:2e:d6:2a:86:37:95:b0:98:bb:2d:7f:
2e:72:9f:d5:b7:3b:33:24:db:0b:b2:ea:80:e0:ca:
2e:78:6c:95:bd:55:94:ef:57:f3:ab:19:af:6a:de:
80:de:d0:1a:b7:a3:34:69:66:f4:54:e4:9c:8e:ae:
f0:5d:00:1b:f7:14:ab:bf:58:cd:86:92:90:a8:85:
60:fc:5a:53:bd:31:96:00:f9:b5:13:8e:9f:61:c4:
e3:1a:cc:d5:86:ce:e7:3a:65:cc:29:65:3c:57:ee:
e8:f4:33:ba:87:45:b3:7b:f6:3a:2e:b4:56:35:77:
9f:84:2d:b4:9e:e5:ee:e0:72:62:b7:85:4c:7e:df:
f0:5b:fb:70:39:3d:84:00:35:23:ec:1f:5a:c8:4b:
6e:2c:38:55:74:3e:98:5a:2f:35:a7:10:37:d7:fe:
fc:b7:68:1a:f4:1f:f3:53:13:df:f9:af:a6:db:b3:
40:6c:62:08:da:09:aa:7a:66:eb:35:a8:86:33:1e:
e6:8f:38:3e:91:5c:0c:cb:c7:b1:78:af:42:a0:60:
f3:3a:92:da:58:5b:c9:b8:79:7e:44:85:7e:b6:86:
8b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:80:7A:A7:28:71:41:B1:3C:F4:76:BE:4D:B1:C1:A0:53:51:EE
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.133.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d9:ee:dd:9f:a1:05:15:c2:22:65:11:bf:a6:95:53:71:6d:
d0:40:7e:7a:9a:17:eb:dd:2b:ba:1e:4d:e0:28:57:7e:b7:b8:
b2:a3:fd:c8:ee:01:23:15:97:e3:de:1a:96:ea:51:40:a5:2c:
73:bb:a5:3a:27:58:4f:ac:02:83:04:9a:ff:db:f3:d6:06:63:
69:73:0e:cd:37:18:3b:73:66:d6:63:46:3f:05:0c:a0:12:7a:
d1:9a:d8:83:e4:66:6e:0f:48:f3:53:b5:78:43:f7:39:30:b8:
35:4f:bd:ea:67:23:3c:02:a8:de:b1:73:bb:38:00:d4:6f:e2:
43:6d:bc:3c:9c:2a:84:57:6a:b5:51:1a:b6:15:06:67:50:10:
29:1d:c7:93:b8:0d:7d:22:82:94:9f:9a:11:d5:d6:dd:93:d6:
04:04:32:95:3a:92:bb:ef:a7:d6:f5:29:7e:1a:96:e0:69:b1:
63:86:64:a5:3a:2a:ae:27:05:f7:1c:80:a2:59:43:a8:59:2e:
80:6a:da:c8:49:2a:4b:4c:fd:b1:9a:82:f1:bf:dd:8e:23:9b:
98:83:29:8c:c3:ec:f4:50:42:b4:d2:8f:6b:60:9f:1e:1a:e8:
cf:e5:9f:7b:d5:07:8a:92:3e:b4:cf:23:22:92:d2:c7:3e:c3:
da:ee:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:09 2025 by rpki-client