Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
File: AS16276.roa (raw, json)
Hash identifier: wsywj6wGheoErnZo9+7FlPMPAwH9d1oBhB7CqZscSxs=
Subject key identifier: 25:F1:57:F3:FD:85:77:9B:16:D7:1D:E4:19:47:A0:2C:6D:F9:8C:FE
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6A9588C9539B919DB2FD4F6AAA6EDD8C32609C8A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
Signing time: Fri 29 Sep 2023 02:13:38 +0000
ROA not before: Fri 29 Sep 2023 02:08:38 +0000
ROA not after: Fri 27 Sep 2024 02:13:38 +0000
asID: 16276
IP address blocks: 104.234.150.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:95:88:c9:53:9b:91:9d:b2:fd:4f:6a:aa:6e:dd:8c:32:60:9c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 29 02:08:38 2023 GMT
Not After : Sep 27 02:13:38 2024 GMT
Subject: CN=25F157F3FD85779B16D71DE41947A02C6DF98CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:cd:85:4f:29:d1:aa:00:f4:3a:8b:5f:54:
62:94:74:9e:5d:84:7c:ed:2d:e7:bf:83:fa:21:e7:
da:7a:ea:38:39:c2:35:a9:5c:62:6a:23:76:2d:4b:
3e:be:01:69:77:23:e5:10:63:91:5c:55:78:cb:a0:
de:ea:c1:67:f6:e3:21:57:f6:43:f9:b1:ce:e9:c9:
1b:99:96:88:93:51:92:6b:41:da:e7:a7:34:eb:59:
26:91:54:ed:3d:a8:ef:b5:ec:a1:3d:2a:db:9b:63:
87:39:87:5d:e2:bd:df:8f:e4:20:3f:97:5d:b4:b9:
e7:5c:8e:4f:f5:c9:e2:10:5f:79:e1:88:fc:c5:4f:
d2:e8:8c:43:ed:ab:5f:94:92:3d:33:5b:da:46:b4:
cc:ad:3b:bc:fe:e5:3c:02:c7:64:73:29:5e:f5:a0:
24:07:48:e4:c4:e6:31:7b:12:6b:ce:fc:88:69:99:
fd:95:9c:be:4e:e5:39:a7:1f:03:68:0a:f1:ee:d7:
22:04:0b:43:99:4c:23:27:d3:eb:af:0c:87:08:b8:
03:b0:8f:c6:1c:29:94:6b:b7:5a:37:44:56:40:6e:
ea:26:28:06:a4:3b:83:cd:2d:e0:e3:51:a0:73:b3:
a2:99:5c:f3:1d:89:1c:da:3d:b0:86:63:bc:94:e6:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:57:F3:FD:85:77:9B:16:D7:1D:E4:19:47:A0:2C:6D:F9:8C:FE
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.150.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c9:ce:a3:75:3e:fa:fb:63:50:84:15:9f:bd:0a:52:96:d1:
cd:96:05:38:09:35:15:f6:88:0d:91:ca:d1:da:0d:a7:7e:8d:
60:63:80:12:0d:5c:b7:ab:05:d5:e6:e1:a8:86:0c:72:74:ef:
7e:0e:2c:79:db:75:5d:6c:2c:29:b6:19:d9:80:36:e9:11:07:
20:7e:a3:9e:34:c9:09:58:a5:7b:b0:e1:d9:cf:c3:ad:90:13:
fc:83:38:24:d2:ce:35:fa:a3:e8:d6:98:78:43:8f:ac:23:84:
fb:00:d4:10:8c:0f:90:e3:11:66:47:93:8c:66:9a:31:9c:6f:
fa:a6:fe:c7:c1:97:16:ff:b2:76:9c:40:dd:cf:04:ea:e2:00:
bb:3e:57:82:29:ce:fa:c6:89:d3:3c:9a:1c:18:ca:cb:40:34:
06:5f:5f:20:02:df:fa:08:4e:ce:25:14:b3:e6:46:49:e9:0c:
45:2d:b8:3a:f8:3c:b1:77:23:cd:02:4d:3b:21:c1:eb:90:a7:
32:4c:43:23:48:e0:91:f5:92:f3:42:54:60:b4:95:56:52:1a:
f1:d6:df:ad:ee:e7:97:78:f5:16:7f:69:bb:39:58:4e:2d:dd:
5e:7c:30:be:b3:1e:7c:71:93:98:f0:c9:3a:55:cf:7d:a8:b1:
ce:07:57:3f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUapWIyVObkZ2y/U9qqm7djDJgnIowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwOTI5MDIwODM4WhcNMjQwOTI3MDIxMzM4
WjAzMTEwLwYDVQQDEygyNUYxNTdGM0ZEODU3NzlCMTZENzFERTQxOTQ3QTAyQzZE
Rjk4Q0ZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7NhU8p0aoA
9DqLX1RilHSeXYR87S3nv4P6Iefaeuo4OcI1qVxiaiN2LUs+vgFpdyPlEGORXFV4
y6De6sFn9uMhV/ZD+bHO6ckbmZaIk1GSa0Ha56c061kmkVTtPajvteyhPSrbm2OH
OYdd4r3fj+QgP5ddtLnnXI5P9cniEF954Yj8xU/S6IxD7atflJI9M1vaRrTMrTu8
/uU8Asdkcyle9aAkB0jkxOYxexJrzvyIaZn9lZy+TuU5px8DaArx7tciBAtDmUwj
J9PrrwyHCLgDsI/GHCmUa7daN0RWQG7qJigGpDuDzS3g41Ggc7OimVzzHYkc2j2w
hmO8lOZpYwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCXxV/P9hXebFtcd5BlHoCxt
+Yz+MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOqWMA0GCSqGSIb3DQEBCwUAA4IB
AQAIyc6jdT76+2NQhBWfvQpSltHNlgU4CTUV9ogNkcrR2g2nfo1gY4ASDVy3qwXV
5uGohgxydO9+Dix523VdbCwpthnZgDbpEQcgfqOeNMkJWKV7sOHZz8OtkBP8gzgk
0s41+qPo1ph4Q4+sI4T7ANQQjA+Q4xFmR5OMZpoxnG/6pv7HwZcW/7J2nEDdzwTq
4gC7PleCKc76xonTPJocGMrLQDQGX18gAt/6CE7OJRSz5kZJ6QxFLbg6+DyxdyPN
Ak07IcHrkKcyTEMjSOCR9ZLzQlRgtJVWUhrx1t+t7ueXePUWf2m7OVhOLd1efDC+
sx58cZOY8Mk6Vc99qLHOB1c/
-----END CERTIFICATE-----
Generated at Mon Oct 23 00:38:14 2023 by rpki-client on console-ams.rpki-client.org