Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14956.roa
File: AS14956.roa (raw, json)
Hash identifier: WEcxBhTGJD4ctgQw3vse+4p5LySAXmuMXEJt54dEc2o=
Subject key identifier: 4A:2D:27:44:BD:82:14:34:B7:C1:EE:B5:6D:3E:CC:88:91:52:58:2E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 689CFCC49C7E3D9ED9E6A52D4DD05F78A73C56D7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14956.roa
Signing time: Sat 22 Jul 2023 10:48:48 +0000
ROA not before: Sat 22 Jul 2023 10:43:48 +0000
ROA not after: Sat 20 Jul 2024 10:48:48 +0000
asID: 14956
IP address blocks: 104.234.10.0/23 maxlen: 23
104.234.118.0/23 maxlen: 23
104.234.147.0/24 maxlen: 24
104.234.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9c:fc:c4:9c:7e:3d:9e:d9:e6:a5:2d:4d:d0:5f:78:a7:3c:56:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 22 10:43:48 2023 GMT
Not After : Jul 20 10:48:48 2024 GMT
Subject: CN=4A2D2744BD821434B7C1EEB56D3ECC889152582E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5b:6f:00:ed:d5:7f:53:00:55:fe:a6:d9:f7:
7b:d5:04:73:05:79:8b:c1:2d:0e:e9:11:dd:ab:43:
28:d2:72:60:1a:54:0d:3a:bc:12:2d:90:3c:b5:45:
30:33:07:b2:da:f1:7e:f3:fc:5a:fd:8b:dd:fe:35:
18:1e:b6:86:e2:ea:56:36:79:02:98:2e:9f:f9:13:
90:b4:e9:9b:fa:f8:f0:ba:93:46:4b:e9:37:32:a8:
51:61:1b:1a:e5:2f:10:87:37:51:96:d7:ca:e9:1d:
52:47:d7:ee:4b:b7:9c:5b:49:20:ab:a5:f5:d0:4b:
90:48:fe:2b:6c:ae:1c:c7:b1:e2:82:fa:91:dd:eb:
6e:de:bc:47:6a:f4:99:37:1b:0f:ac:61:7e:05:b5:
c0:5d:5e:45:0f:d7:cc:6b:92:5f:78:f0:38:d5:e1:
e3:1c:d9:8f:f4:fd:86:f9:46:37:bd:ab:54:5b:b0:
2e:4e:98:25:5b:77:c8:79:31:62:ac:ad:49:df:cb:
7e:44:20:3e:d3:da:18:a0:ab:7c:d8:86:5f:7d:2a:
60:d9:19:58:04:40:88:17:ac:58:8e:c9:67:da:50:
aa:d0:3e:85:27:17:2f:a8:73:49:5d:26:b4:b7:94:
dc:42:5e:55:73:c0:3e:d4:8d:0b:cb:cf:3e:3b:4f:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2D:27:44:BD:82:14:34:B7:C1:EE:B5:6D:3E:CC:88:91:52:58:2E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS14956.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.10.0/23
104.234.118.0/23
104.234.147.0/24
104.234.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:9b:fd:fb:a6:7d:df:5b:28:d7:ca:78:8d:3f:44:d9:bb:1d:
b4:2d:9f:e5:32:8e:f1:c1:27:c9:65:3d:96:f4:f5:08:35:79:
08:80:d0:8a:b3:f4:16:f0:a3:ab:54:48:36:34:f0:07:bd:36:
b4:b7:eb:3e:7b:e0:17:5d:52:e0:33:b5:5f:4e:07:9e:a8:c2:
af:58:ce:4c:54:0d:17:3c:7c:de:11:fe:6b:ed:4e:c9:10:69:
d7:de:56:d3:02:a3:4b:b3:0c:3b:af:59:c1:87:03:13:64:cd:
65:55:77:ab:58:b1:8c:32:ef:54:74:9f:0c:01:01:a7:0f:7e:
81:bb:a4:f3:fb:72:3b:c7:6c:71:2d:e2:cd:ba:3d:11:85:77:
e3:b0:36:92:0b:d8:e4:10:75:ad:e0:3a:35:79:ec:36:70:a4:
d0:94:70:6e:62:9c:bf:36:97:29:d6:1a:15:14:3b:7d:fa:e7:
fb:05:c0:b9:ce:80:43:76:a4:24:36:95:8d:df:1f:db:3f:b2:
eb:66:ca:90:d9:97:61:41:ec:ee:14:26:44:2b:2a:d9:af:88:
52:51:07:e8:8f:bb:a5:5c:07:7d:53:d1:20:aa:68:1f:cd:b5:
28:c1:6c:81:29:fd:e0:23:12:ae:84:fe:d1:45:57:84:19:98:
2d:bb:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 15:42:57 2023 by rpki-client on console-ams.rpki-client.org