Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200181.roa
File: AS200181.roa (raw, json)
Hash identifier: r5aOF1hBfPhiXobWD8+IMle2oLs9BkUUeqewEll1xc0=
Subject key identifier: 07:1D:85:7F:F3:43:2A:9E:B9:24:83:F5:0C:09:C2:C7:91:6E:49:B1
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6D953C58CADBEDC31B404714542173AEC593429B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200181.roa
Signing time: Wed 08 Feb 2023 06:39:07 +0000
ROA not before: Wed 08 Feb 2023 06:34:07 +0000
ROA not after: Wed 07 Feb 2024 06:39:07 +0000
asID: 200181
IP address blocks: 104.234.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:95:3c:58:ca:db:ed:c3:1b:40:47:14:54:21:73:ae:c5:93:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 8 06:34:07 2023 GMT
Not After : Feb 7 06:39:07 2024 GMT
Subject: CN=071D857FF3432A9EB92483F50C09C2C7916E49B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:78:85:99:ba:27:a2:bc:95:c4:d3:99:7a:
9c:32:ee:32:f0:7b:ce:24:4b:14:ee:65:bc:1b:8a:
80:84:7b:34:f9:f2:ef:3b:5c:98:44:8a:c8:14:5a:
5f:63:a2:e7:5e:f7:d7:e0:4f:1d:c4:60:f4:56:96:
99:44:e3:ef:d3:08:d5:1f:a6:1f:6e:b0:22:e7:66:
18:5d:b9:16:5c:bb:19:0f:d5:18:42:55:82:71:49:
36:6b:4e:d3:d6:0c:80:7d:55:68:85:c6:d6:16:37:
db:8a:09:7d:a1:30:03:d6:00:2e:11:bd:fd:2c:4d:
08:c5:86:38:28:a8:cd:3d:29:00:f5:38:8e:98:fc:
6e:7e:d8:ac:78:ed:52:21:af:ca:bd:b2:46:22:1c:
d4:0b:8f:39:da:3f:cf:f5:5f:64:3c:6d:4a:d5:eb:
48:80:83:ec:14:91:d6:51:0f:5a:46:2b:56:42:62:
47:d2:56:eb:a9:7c:29:7e:9c:da:01:13:79:0f:0c:
36:48:1b:84:8f:44:56:a8:9b:72:e3:db:1d:fc:6b:
b4:f8:71:2a:f2:99:9a:69:42:a2:98:91:bd:5b:03:
3f:c6:2e:1a:ce:80:22:19:50:88:20:b7:71:b7:d4:
75:f3:af:35:74:6d:4d:a8:5c:35:05:2e:06:52:ba:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1D:85:7F:F3:43:2A:9E:B9:24:83:F5:0C:09:C2:C7:91:6E:49:B1
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200181.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:e7:7f:40:40:51:85:e2:18:72:95:2f:f8:f2:6f:6b:95:50:
37:27:c0:d3:e6:a0:85:25:59:7e:cd:5c:26:00:a7:e8:ea:0f:
13:95:0e:e3:1f:7f:f4:fb:a0:a1:11:13:34:0d:36:d8:48:12:
7f:1d:7a:5c:33:0d:d1:44:78:14:42:15:68:be:27:b4:70:f2:
6f:9a:99:a3:bd:7e:dd:3a:ab:e5:20:34:df:d8:8f:df:ae:d5:
67:e0:50:04:30:73:df:08:3f:20:54:e8:36:e5:b9:52:60:69:
6b:e9:60:d2:51:76:53:8d:5f:6b:71:c0:a5:00:d1:88:7d:c5:
13:24:d3:f2:4f:41:e9:0f:de:01:ee:95:c0:c7:b3:ea:80:7a:
52:16:9a:c5:2a:83:7a:57:05:e5:54:51:0a:0a:11:aa:f7:af:
7b:78:fe:d8:9b:c4:bf:af:08:72:da:8e:4b:c4:32:23:63:47:
bd:47:da:c9:b7:c7:5d:54:9f:3c:8b:e0:42:2c:7e:bb:30:04:
43:21:18:71:f4:87:1d:df:bf:b2:f2:2d:c4:f9:e4:bd:fe:a3:
49:56:7b:b1:06:44:57:10:bc:6a:77:9f:9d:5e:a9:f6:19:b1:
0b:0f:82:a8:72:ae:f2:1a:42:69:23:92:d4:c4:70:c0:1b:c7:
38:96:8b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org