Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204372.roa
File: AS204372.roa (raw, json)
Hash identifier: ontCWSiMTgH3mWiXupSnxrl9YFp0kPPFmxK2ADhqN6Q=
Subject key identifier: 08:52:DF:3A:63:37:D8:F3:6B:6C:A2:75:DD:64:1B:C7:1A:96:2E:0D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5F01DF9086AAFD6D7965DEF9D1C79142DF1D8FB2
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204372.roa
Signing time: Fri 08 Sep 2023 18:40:57 +0000
ROA not before: Fri 08 Sep 2023 18:35:57 +0000
ROA not after: Fri 06 Sep 2024 18:40:57 +0000
asID: 204372
IP address blocks: 98.142.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:01:df:90:86:aa:fd:6d:79:65:de:f9:d1:c7:91:42:df:1d:8f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 8 18:35:57 2023 GMT
Not After : Sep 6 18:40:57 2024 GMT
Subject: CN=0852DF3A6337D8F36B6CA275DD641BC71A962E0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:f7:2d:4f:73:7a:e7:8b:4e:dd:b6:65:11:
f2:ba:2d:f4:92:ed:0c:97:2d:a7:13:54:10:76:1a:
f5:b8:b3:79:a6:36:61:de:5d:0b:63:dd:e6:e4:20:
fb:5b:8b:39:88:da:ab:7d:f7:95:5e:17:b8:de:1f:
c0:87:6d:c3:49:95:dd:f5:30:55:0d:59:96:97:d8:
83:37:c4:05:d7:49:1f:77:64:95:82:80:51:91:bb:
e2:d6:b3:53:a4:49:9f:e3:e4:e1:75:8c:6c:46:50:
7d:7b:9c:4e:4f:5a:a1:2d:02:2a:72:e0:f3:23:18:
2c:0a:e1:f9:76:d5:63:1d:db:b2:dd:4a:77:3a:a2:
58:9a:11:a1:aa:2c:0a:4e:88:89:c0:b8:7c:89:f8:
66:99:43:84:45:a8:c7:c1:58:7a:16:21:44:d7:99:
49:c0:c9:9f:d9:32:73:49:9f:54:69:2b:9e:d0:cf:
7d:e2:22:11:78:78:49:72:47:aa:6c:ff:53:30:dd:
13:52:ea:fb:ed:e6:2f:9f:b8:e6:ea:65:c1:52:bc:
b5:8c:d7:38:9b:4a:b0:54:9d:da:57:68:e8:d5:1c:
54:bb:67:66:4c:2a:74:ee:aa:15:c2:00:12:16:cd:
f6:97:7f:cc:f1:49:da:d5:0e:94:3f:f8:d7:42:f5:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:52:DF:3A:63:37:D8:F3:6B:6C:A2:75:DD:64:1B:C7:1A:96:2E:0D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.243.0/24
Signature Algorithm: sha256WithRSAEncryption
80:05:b9:f2:48:e1:3f:99:d9:a8:df:d2:f4:86:f3:54:e3:ee:
82:8e:45:13:3a:e0:e2:82:84:c2:81:70:78:9b:94:af:83:e9:
4d:26:b4:8e:43:fa:b2:a8:6d:65:15:0a:95:f6:22:3c:47:d7:
60:13:34:b0:cd:d0:0b:44:7d:78:30:50:f0:93:2f:5a:11:63:
fe:60:22:13:4d:44:89:95:31:df:2f:c9:81:92:46:ff:4e:c6:
31:64:0e:65:4b:6d:58:72:ba:cd:ca:26:ed:e1:41:89:9d:92:
3e:3a:7c:b9:f6:47:21:46:e0:2a:f5:fd:30:04:9c:6f:8a:01:
a4:83:a6:d3:6e:0f:c6:b5:dd:08:fb:85:f1:99:23:46:8b:eb:
de:fa:39:99:93:40:a1:3c:63:95:93:fc:4b:97:d5:50:d0:a6:
0e:05:d6:21:c6:56:90:9d:3a:a1:63:13:11:37:e5:c0:72:aa:
d7:ae:74:b2:4d:06:20:2c:65:a3:05:e7:81:80:f7:c0:6a:9e:
95:6a:33:a1:cb:80:de:bb:d3:1c:04:12:ae:81:22:be:3b:8f:
07:0d:75:bc:28:3f:2b:de:22:42:67:41:06:63:04:9a:56:06:
fc:34:6e:57:41:5a:ab:21:7f:ce:8a:c8:c1:e5:ef:e0:cf:d6:
5a:bc:87:08
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUXwHfkIaq/W15Zd750ceRQt8dj7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwOTA4MTgzNTU3WhcNMjQwOTA2MTg0MDU3
WjAzMTEwLwYDVQQDEygwODUyREYzQTYzMzdEOEYzNkI2Q0EyNzVERDY0MUJDNzFB
OTYyRTBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvv3LU9zeueL
Tt22ZRHyui30ku0Mly2nE1QQdhr1uLN5pjZh3l0LY93m5CD7W4s5iNqrffeVXhe4
3h/Ah23DSZXd9TBVDVmWl9iDN8QF10kfd2SVgoBRkbvi1rNTpEmf4+ThdYxsRlB9
e5xOT1qhLQIqcuDzIxgsCuH5dtVjHduy3Up3OqJYmhGhqiwKToiJwLh8ifhmmUOE
RajHwVh6FiFE15lJwMmf2TJzSZ9UaSue0M994iIReHhJckeqbP9TMN0TUur77eYv
n7jm6mXBUry1jNc4m0qwVJ3aV2jo1RxUu2dmTCp07qoVwgASFs32l3/M8Una1Q6U
P/jXQvWJOwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAhS3zpjN9jza2yidd1kG8ca
li4NMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIwNDM3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKO8zANBgkqhkiG9w0BAQsFAAOC
AQEAgAW58kjhP5nZqN/S9IbzVOPugo5FEzrg4oKEwoFweJuUr4PpTSa0jkP6sqht
ZRUKlfYiPEfXYBM0sM3QC0R9eDBQ8JMvWhFj/mAiE01EiZUx3y/JgZJG/07GMWQO
ZUttWHK6zcom7eFBiZ2SPjp8ufZHIUbgKvX9MAScb4oBpIOm024PxrXdCPuF8Zkj
Rovr3vo5mZNAoTxjlZP8S5fVUNCmDgXWIcZWkJ06oWMTETflwHKq1650sk0GICxl
owXngYD3wGqelWozocuA3rvTHAQSroEivjuPBw11vCg/K94iQmdBBmMEmlYG/DRu
V0FaqyF/zorIweXv4M/WWryHCA==
-----END CERTIFICATE-----
Generated at Mon Jan 8 01:00:32 2024 by rpki-client on console-fra.rpki-client.org