Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa
File: AS204769.roa (raw, json)
Hash identifier: gizPfa/lCLfP7YsBJ6mmrbgBo5O5BKtrCh7cTwR52xk=
Subject key identifier: E1:17:94:B7:4C:EE:59:C1:77:5A:5D:88:BE:DE:0A:CC:93:18:BF:62
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 60E869FCCF7D63A21EC73380C19A8D2E5DEE0D23
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa
Signing time: Fri 18 Aug 2023 12:30:04 +0000
ROA not before: Fri 18 Aug 2023 12:25:04 +0000
ROA not after: Fri 16 Aug 2024 12:30:04 +0000
asID: 204769
IP address blocks: 206.53.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e8:69:fc:cf:7d:63:a2:1e:c7:33:80:c1:9a:8d:2e:5d:ee:0d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 18 12:25:04 2023 GMT
Not After : Aug 16 12:30:04 2024 GMT
Subject: CN=E11794B74CEE59C1775A5D88BEDE0ACC9318BF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:07:ba:e6:39:0f:27:b1:b1:00:72:cc:b2:
de:4b:5e:a0:50:97:2d:07:a9:0f:f1:23:dd:e5:35:
12:77:ea:5f:88:78:76:3a:14:08:30:68:a1:a2:f9:
ea:04:e5:7f:04:d4:17:d4:72:33:c7:87:63:69:90:
c9:90:88:e3:52:73:5d:3b:35:2e:5f:21:05:86:00:
a2:fe:75:00:a1:38:53:40:18:82:5a:6c:95:7e:37:
e3:6d:0a:d5:67:7e:b4:b0:86:58:7e:04:d2:76:cb:
30:c1:0c:31:52:99:ed:74:73:e8:21:54:0e:81:4f:
3f:65:05:6f:b5:6c:01:ca:00:80:71:86:6c:2d:f1:
05:e6:9b:69:69:b1:97:aa:e8:18:ac:fc:e1:25:f0:
77:6a:c3:13:d7:6e:4e:83:95:dc:bb:a9:ec:3d:a5:
d1:26:09:f6:8a:bf:0f:3f:f8:2d:f8:60:96:87:17:
72:01:02:69:7f:37:30:c4:94:7c:a2:29:33:cd:10:
5e:cc:47:19:d7:25:9e:99:78:13:dd:6d:95:10:9d:
25:d6:9c:ae:34:5e:6f:25:d4:92:b5:2d:e0:25:71:
97:e7:ef:a5:c2:74:7e:a6:ea:5b:94:6f:b3:5a:74:
5f:51:b8:08:c4:28:d2:6c:bc:1e:a5:ff:3b:aa:bd:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:17:94:B7:4C:EE:59:C1:77:5A:5D:88:BE:DE:0A:CC:93:18:BF:62
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.58.0/24
Signature Algorithm: sha256WithRSAEncryption
46:99:bc:be:e1:f1:87:5b:ba:93:d9:59:5e:f2:3c:c9:ac:e5:
a6:c0:84:c7:5d:32:9d:0a:08:ba:b0:ec:27:f3:e7:a1:55:0a:
ce:3f:79:02:3b:08:ad:80:25:8f:a3:58:21:df:96:e1:f6:d7:
97:a2:3c:5f:63:6e:e4:ec:f8:ea:32:03:41:e1:78:de:90:cf:
84:7b:fc:11:99:13:0f:42:67:e4:14:a2:11:4a:d6:c0:05:9a:
00:38:77:3a:b0:45:ea:28:53:48:51:d5:0d:9b:d4:39:42:01:
78:19:fe:d2:69:fa:04:6b:e7:1b:7b:78:e4:8c:a8:21:f4:e7:
1e:6e:27:b9:51:f6:f9:13:94:82:69:39:2a:47:2a:71:6d:88:
f3:38:69:04:d6:85:a9:b5:18:32:8b:8e:69:6d:41:d1:0d:25:
48:10:0c:a0:90:9e:64:23:70:26:9b:5f:5f:09:64:d8:45:a3:
0a:36:76:1b:b6:00:93:54:0f:51:9d:92:cb:20:fd:18:7c:dd:
0f:b9:7b:ca:6d:8b:b7:e7:ce:1c:71:5a:dd:73:65:83:14:7b:
90:3c:31:f8:b0:17:6c:c4:17:ef:ec:e2:7e:d8:f5:c1:7b:09:
26:c4:bf:94:30:5b:77:8f:f7:df:ab:57:da:88:11:db:58:89:
1b:3a:f5:1c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUYOhp/M99Y6IexzOAwZqNLl3uDSMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwODE4MTIyNTA0WhcNMjQwODE2MTIzMDA0
WjAzMTEwLwYDVQQDEyhFMTE3OTRCNzRDRUU1OUMxNzc1QTVEODhCRURFMEFDQzkz
MThCRjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnMHuuY5Dyex
sQByzLLeS16gUJctB6kP8SPd5TUSd+pfiHh2OhQIMGihovnqBOV/BNQX1HIzx4dj
aZDJkIjjUnNdOzUuXyEFhgCi/nUAoThTQBiCWmyVfjfjbQrVZ360sIZYfgTSdssw
wQwxUpntdHPoIVQOgU8/ZQVvtWwBygCAcYZsLfEF5ptpabGXqugYrPzhJfB3asMT
125Og5Xcu6nsPaXRJgn2ir8PP/gt+GCWhxdyAQJpfzcwxJR8oikzzRBezEcZ1yWe
mXgT3W2VEJ0l1pyuNF5vJdSStS3gJXGX5++lwnR+pupblG+zWnRfUbgIxCjSbLwe
pf87qr1SswIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOEXlLdM7lnBd1pdiL7eCsyT
GL9iMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIwNDc2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM41OjANBgkqhkiG9w0BAQsFAAOC
AQEARpm8vuHxh1u6k9lZXvI8yazlpsCEx10ynQoIurDsJ/PnoVUKzj95AjsIrYAl
j6NYId+W4fbXl6I8X2Nu5Oz46jIDQeF43pDPhHv8EZkTD0Jn5BSiEUrWwAWaADh3
OrBF6ihTSFHVDZvUOUIBeBn+0mn6BGvnG3t45IyoIfTnHm4nuVH2+ROUgmk5Kkcq
cW2I8zhpBNaFqbUYMouOaW1B0Q0lSBAMoJCeZCNwJptfXwlk2EWjCjZ2G7YAk1QP
UZ2SyyD9GHzdD7l7ym2Lt+fOHHFa3XNlgxR7kDwx+LAXbMQX7+ziftj1wXsJJsS/
lDBbd4/336tX2ogR21iJGzr1HA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org