Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149090.roa
File: AS149090.roa (raw, json)
Hash identifier: nLOnFW7/bC4KzCIm5fuZXSLr1NXPt+jPc3efDI4FdiU=
Subject key identifier: CF:77:6F:13:AE:62:99:ED:79:C0:F7:25:77:2A:4C:B6:C9:9E:E5:AC
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 59B7D6664ECFFA9F6A3B9557DF6AC62D8D8126D5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149090.roa
Signing time: Wed 09 Oct 2024 01:55:34 +0000
ROA not before: Wed 09 Oct 2024 01:50:34 +0000
ROA not after: Wed 08 Oct 2025 01:55:34 +0000
asID: 149090
IP address blocks: 104.234.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 02:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:b7:d6:66:4e:cf:fa:9f:6a:3b:95:57:df:6a:c6:2d:8d:81:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 9 01:50:34 2024 GMT
Not After : Oct 8 01:55:34 2025 GMT
Subject: CN=CF776F13AE6299ED79C0F725772A4CB6C99EE5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:b9:07:ac:f9:df:f4:08:f4:83:e0:90:8a:
fe:fe:4d:44:ee:33:6f:e2:85:53:ff:25:81:2f:78:
4a:c6:f4:3b:83:94:ef:a1:7e:85:cc:f6:a7:aa:d1:
3d:16:96:e4:41:b3:7f:a4:18:6f:22:18:05:bd:e4:
5a:7b:ac:ab:7c:fe:ce:96:dd:34:26:2e:1e:48:46:
f5:8e:01:74:01:56:04:d5:32:b7:58:21:1b:9c:f7:
86:f5:ca:c5:9d:e7:55:71:d5:02:3e:65:d4:db:ca:
84:4f:7a:a4:a3:d9:aa:52:59:83:0b:32:d7:2f:9d:
9e:eb:98:7a:12:70:b0:21:cd:67:8a:99:cb:5b:14:
dc:be:bc:fa:6d:fe:e0:1f:1b:29:68:01:40:89:94:
b2:0b:b9:74:60:73:69:14:6a:5b:22:90:5a:c4:45:
6c:2b:3a:83:99:ce:99:29:f1:8f:f7:2a:18:1b:85:
90:1b:12:b7:aa:e7:0f:74:98:a4:a5:ac:83:b4:4c:
d4:6e:66:6d:09:31:7e:c6:96:91:e2:1c:f4:12:2f:
93:5d:4a:e5:cc:96:e5:37:dd:df:cb:63:70:d7:79:
5a:9c:0a:ca:ea:87:8c:60:bb:40:25:12:3a:6e:15:
0c:76:87:8d:27:6f:f9:d2:5a:7f:96:b7:3c:0f:35:
6f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:6F:13:AE:62:99:ED:79:C0:F7:25:77:2A:4C:B6:C9:9E:E5:AC
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS149090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:06:55:25:39:b5:f6:f1:fd:64:37:3f:10:d0:34:b3:ad:0e:
4d:a1:5d:86:18:8f:cd:46:ab:95:19:04:f3:76:80:87:29:17:
d6:98:d6:05:1d:5e:61:dc:c9:80:0d:45:0e:e9:12:20:8b:64:
3c:39:c2:98:72:0a:97:1b:bb:a6:9e:d4:09:af:0d:75:18:8b:
1c:6f:c7:12:97:eb:3f:dd:19:c4:a9:ad:c7:57:8e:29:0b:83:
06:81:c0:d5:16:60:fb:c0:52:38:b0:80:ef:13:da:43:ee:08:
8f:e6:5f:c7:a8:6a:6d:3b:6d:b7:d1:82:bc:d6:bf:3f:07:ec:
3b:c1:11:bb:1e:a0:5e:3b:7a:36:a7:90:93:c6:79:25:a6:ce:
3b:a4:e6:9b:3c:b3:20:22:21:1d:69:3d:25:82:50:ca:1f:3e:
5a:c9:8c:d1:9b:67:a7:61:60:97:3e:8c:3d:76:81:d5:d0:06:
8f:ce:35:f7:e8:d5:3d:34:c9:fe:b2:b6:01:ad:50:8e:bb:55:
00:8a:3e:7b:0d:8c:82:42:70:c8:89:b7:63:d1:b9:50:5b:09:
65:bb:31:83:be:bb:dd:aa:af:ef:dc:f6:8a:f7:67:37:bf:c1:
91:4e:c6:2c:45:0e:42:84:be:e7:88:b3:d5:2c:09:de:c8:b6:
40:e8:4a:de
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUWbfWZk7P+p9qO5VX32rGLY2BJtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDA5MDE1MDM0WhcNMjUxMDA4MDE1NTM0
WjAzMTEwLwYDVQQDEyhDRjc3NkYxM0FFNjI5OUVENzlDMEY3MjU3NzJBNENCNkM5
OUVFNUFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliS5B6z53/QI
9IPgkIr+/k1E7jNv4oVT/yWBL3hKxvQ7g5TvoX6FzPanqtE9FpbkQbN/pBhvIhgF
veRae6yrfP7Olt00Ji4eSEb1jgF0AVYE1TK3WCEbnPeG9crFnedVcdUCPmXU28qE
T3qko9mqUlmDCzLXL52e65h6EnCwIc1nipnLWxTcvrz6bf7gHxspaAFAiZSyC7l0
YHNpFGpbIpBaxEVsKzqDmc6ZKfGP9yoYG4WQGxK3qucPdJikpayDtEzUbmZtCTF+
xpaR4hz0Ei+TXUrlzJblN93fy2Nw13lanArK6oeMYLtAJRI6bhUMdoeNJ2/50lp/
lrc8DzVvUwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFM93bxOuYpntecD3JXcqTLbJ
nuWsMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE0OTA5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqhTANBgkqhkiG9w0BAQsFAAOC
AQEACgZVJTm19vH9ZDc/ENA0s60OTaFdhhiPzUarlRkE83aAhykX1pjWBR1eYdzJ
gA1FDukSIItkPDnCmHIKlxu7pp7UCa8NdRiLHG/HEpfrP90ZxKmtx1eOKQuDBoHA
1RZg+8BSOLCA7xPaQ+4Ij+Zfx6hqbTttt9GCvNa/PwfsO8ERux6gXjt6NqeQk8Z5
JabOO6TmmzyzICIhHWk9JYJQyh8+WsmM0Ztnp2Fglz6MPXaB1dAGj8419+jVPTTJ
/rK2Aa1QjrtVAIo+ew2MgkJwyIm3Y9G5UFsJZbsxg7673aqv79z2ivdnN7/BkU7G
LEUOQoS+54iz1SwJ3si2QOhK3g==
-----END CERTIFICATE-----
Generated at Wed Oct 23 04:49:48 2024 by rpki-client on console-ams.rpki-client.org