Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151734.roa
File: AS151734.roa (raw, json)
Hash identifier: 9MISXwkgRjEocRPnvaT2E4MALhKagxG4xI2u4TckVcQ=
Subject key identifier: 46:49:E0:EC:1E:CC:FA:72:BE:5E:CD:80:49:B1:E6:85:D4:AE:C4:8E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0C6672A776991EDA59F429D4C40F0EEFB00090C6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151734.roa
Signing time: Wed 14 Aug 2024 06:17:58 +0000
ROA not before: Wed 14 Aug 2024 06:12:58 +0000
ROA not after: Wed 13 Aug 2025 06:17:58 +0000
asID: 151734
IP address blocks: 104.234.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:66:72:a7:76:99:1e:da:59:f4:29:d4:c4:0f:0e:ef:b0:00:90:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 14 06:12:58 2024 GMT
Not After : Aug 13 06:17:58 2025 GMT
Subject: CN=4649E0EC1ECCFA72BE5ECD8049B1E685D4AEC48E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:0e:32:ae:64:a2:37:c0:a9:34:01:2e:21:
56:78:0c:91:59:55:e0:51:db:38:2e:58:e6:e2:9e:
71:56:96:73:b8:b6:79:27:88:fc:67:a3:1d:f1:a3:
41:bb:c2:23:7a:c6:cf:70:06:92:8d:f6:f4:a5:06:
61:9d:31:e1:c5:08:95:17:55:b6:b4:ab:82:d1:2a:
43:44:05:c4:f0:f3:c8:15:8b:a0:94:25:e6:94:68:
8e:6c:0c:85:2a:5e:e3:96:dc:a6:10:36:88:6a:3e:
2f:06:5b:f4:b0:56:7a:fc:39:90:92:fc:f3:38:65:
a8:3b:a8:9b:73:5f:ba:1c:af:bf:7e:40:b9:ec:0c:
33:57:2f:67:00:80:05:86:9c:8d:5b:f4:3d:2b:18:
00:f5:8c:c8:8b:42:59:a1:dc:2d:cd:06:ac:70:c5:
d2:62:58:23:c0:ba:d9:ae:35:c4:ed:72:09:a6:23:
75:1d:9c:1c:f4:1c:9d:c7:d3:e2:9b:33:03:53:f9:
cd:e4:7b:c7:7b:50:0c:4a:7c:a6:dd:06:6d:ec:38:
c4:59:18:ce:d6:17:d7:90:0b:79:dd:fa:22:ef:27:
e6:3c:98:c4:f6:49:f1:8d:78:35:55:56:13:c8:07:
0d:f3:26:c2:26:9c:a8:f7:01:76:1c:83:de:19:be:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:E0:EC:1E:CC:FA:72:BE:5E:CD:80:49:B1:E6:85:D4:AE:C4:8E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.174.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:90:55:1f:9e:5f:75:87:f9:58:c2:b0:b0:c1:16:08:05:85:
8a:dd:08:8c:62:11:43:8e:4f:c6:a2:2e:7d:8d:9f:5e:0b:9e:
fb:24:04:96:77:43:05:72:c2:37:a7:80:12:64:42:cd:88:a1:
57:e4:92:71:d4:c1:80:d3:e3:34:7e:9b:06:80:d1:b8:65:d0:
ff:42:dd:49:a4:16:a3:21:23:b9:5d:84:17:b1:df:ef:0e:8f:
7f:6e:2e:36:77:74:05:c2:58:63:9d:09:cb:f8:ea:60:6a:7c:
38:c0:b5:b0:e8:26:72:2f:88:18:6c:66:a5:cc:8a:9c:a4:ca:
c8:3f:0d:b6:09:b1:c8:34:5f:a3:f4:26:3d:93:8a:26:04:ac:
c6:c8:50:6d:f2:4b:cb:64:aa:a0:98:3b:a8:a6:51:02:ef:cb:
e5:6e:37:b1:63:67:77:c9:6b:66:4a:5e:63:30:f3:71:99:5f:
38:33:71:97:40:1b:3a:f2:a2:a6:91:7c:a3:95:98:28:10:fb:
88:5c:16:71:cb:3e:17:f7:50:c8:2a:6a:c5:6b:8f:5b:7d:4d:
71:f5:32:d2:b5:01:51:0d:1a:18:d6:a8:d5:1e:ba:89:f7:4e:
d8:29:ca:f1:d5:ca:cd:7c:bb:fe:ac:59:d8:36:0f:20:21:a7:
8d:47:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 01:52:16 2024 by rpki-client on console-ams.rpki-client.org