Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197644.roa
File: AS197644.roa (raw, json)
Hash identifier: yeE8pkZckAjkbMTiPuECwZ+noGyhMfhJISoSh5yex94=
Subject key identifier: 33:C0:27:62:54:06:0B:4B:80:2F:9B:0B:BA:38:47:77:F3:2B:C4:57
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 35260DF04C80C8E4835CD6F414F836D354D202CC
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197644.roa
Signing time: Wed 02 Aug 2023 12:39:28 +0000
ROA not before: Wed 02 Aug 2023 12:34:28 +0000
ROA not after: Wed 31 Jul 2024 12:39:28 +0000
asID: 197644
IP address blocks: 104.234.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 15:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:26:0d:f0:4c:80:c8:e4:83:5c:d6:f4:14:f8:36:d3:54:d2:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 2 12:34:28 2023 GMT
Not After : Jul 31 12:39:28 2024 GMT
Subject: CN=33C0276254060B4B802F9B0BBA384777F32BC457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:5f:01:22:ce:c8:f2:18:01:01:e9:67:37:
db:19:37:df:ce:19:50:40:6c:f5:7b:20:64:ef:39:
64:78:e9:95:bd:af:ce:6f:e1:22:55:6a:74:6c:cf:
3e:71:05:8a:03:85:04:01:86:de:cb:a0:44:6c:a6:
de:c7:3e:99:3e:95:4f:36:d1:42:1a:97:fd:77:70:
53:30:51:50:4a:0a:08:ae:ff:93:38:b8:a5:cc:96:
7c:ba:b8:92:ff:ef:32:0e:bc:69:31:14:ec:52:d0:
f5:92:74:55:56:13:66:5c:47:db:16:be:40:f0:aa:
3a:8b:a8:33:1a:cb:22:81:68:99:99:0d:83:36:42:
63:83:b4:32:7e:ac:25:48:4f:e3:a9:89:bc:a3:36:
81:ff:0c:b7:b0:4a:08:fb:ee:c1:cc:8e:b0:5c:bf:
5d:f3:38:71:21:76:2e:bf:a7:09:4b:fe:83:9e:e5:
25:50:af:55:dd:b7:9e:78:11:cd:a0:46:79:17:ac:
6a:c8:68:80:a7:b1:cb:28:cd:b6:5c:4b:86:65:e8:
14:4d:c0:43:70:a5:f3:ea:38:8d:ce:c2:8d:6e:df:
8a:a9:cb:dd:b7:b0:09:18:78:d1:78:70:db:57:ac:
db:cd:ba:2a:f8:4a:83:d2:c5:5d:f9:ad:08:fc:76:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:27:62:54:06:0B:4B:80:2F:9B:0B:BA:38:47:77:F3:2B:C4:57
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197644.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:10:e4:8e:58:33:eb:e6:44:4e:a7:f1:28:86:41:44:d4:ee:
33:6a:09:6f:65:b6:fc:1a:5e:c6:12:48:13:03:b5:8d:61:c4:
e9:29:3a:17:96:20:4e:3b:8b:0f:09:4c:d4:28:36:15:16:79:
bb:11:0f:06:04:1a:c9:d3:e4:df:6b:60:d6:01:9b:d9:51:b7:
39:43:97:13:85:a7:34:23:e4:8d:1c:33:df:d4:5e:8c:6e:50:
4c:de:c4:66:a5:83:86:e1:47:db:7b:b9:15:10:48:cd:db:d8:
d9:11:73:61:8a:79:80:10:61:29:a2:e1:95:77:f9:a0:ed:4a:
c4:2a:01:1e:ed:86:56:7d:08:35:50:08:a5:10:4e:d7:d2:3c:
4d:f2:5b:f4:87:77:58:7f:8f:a4:68:24:0e:37:f3:35:d7:e7:
dd:e0:cf:bb:46:d1:3f:d9:ba:e2:4a:55:dd:f4:51:1e:13:cd:
95:59:89:06:9f:01:3b:d9:81:10:20:db:33:71:ff:98:7f:1a:
14:c7:5b:fa:9e:1d:bf:5d:7e:3b:31:69:44:b5:6d:2d:eb:dc:
c9:bb:d7:ff:08:40:c7:78:11:35:4f:2c:20:b2:79:ae:20:f1:
89:a5:55:6d:3f:c9:cf:a5:b1:48:e3:c6:47:c8:18:d7:01:d1:
91:23:e9:35
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUNSYN8EyAyOSDXNb0FPg201TSAswwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwODAyMTIzNDI4WhcNMjQwNzMxMTIzOTI4
WjAzMTEwLwYDVQQDEygzM0MwMjc2MjU0MDYwQjRCODAyRjlCMEJCQTM4NDc3N0Yz
MkJDNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwohfASLOyPIY
AQHpZzfbGTffzhlQQGz1eyBk7zlkeOmVva/Ob+EiVWp0bM8+cQWKA4UEAYbey6BE
bKbexz6ZPpVPNtFCGpf9d3BTMFFQSgoIrv+TOLilzJZ8uriS/+8yDrxpMRTsUtD1
knRVVhNmXEfbFr5A8Ko6i6gzGssigWiZmQ2DNkJjg7QyfqwlSE/jqYm8ozaB/wy3
sEoI++7BzI6wXL9d8zhxIXYuv6cJS/6DnuUlUK9V3beeeBHNoEZ5F6xqyGiAp7HL
KM22XEuGZegUTcBDcKXz6jiNzsKNbt+Kqcvdt7AJGHjReHDbV6zbzboq+EqD0sVd
+a0I/HaJhwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDPAJ2JUBgtLgC+bC7o4R3fz
K8RXMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE5NzY0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq3TANBgkqhkiG9w0BAQsFAAOC
AQEAthDkjlgz6+ZETqfxKIZBRNTuM2oJb2W2/BpexhJIEwO1jWHE6Sk6F5YgTjuL
DwlM1Cg2FRZ5uxEPBgQaydPk32tg1gGb2VG3OUOXE4WnNCPkjRwz39RejG5QTN7E
ZqWDhuFH23u5FRBIzdvY2RFzYYp5gBBhKaLhlXf5oO1KxCoBHu2GVn0INVAIpRBO
19I8TfJb9Id3WH+PpGgkDjfzNdfn3eDPu0bRP9m64kpV3fRRHhPNlVmJBp8BO9mB
ECDbM3H/mH8aFMdb+p4dv11+OzFpRLVtLevcybvX/whAx3gRNU8sILJ5riDxiaVV
bT/Jz6WxSOPGR8gY1wHRkSPpNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org