Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204843.roa
File: AS204843.roa (raw, json)
Hash identifier: dCbxc1OjpNywWRsuMZd6HbugtJIS+mhhheyLJOyr39c=
Subject key identifier: 54:1E:D6:48:FD:45:4B:18:71:1C:F8:BD:EA:11:F6:75:97:51:93:6D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0AA2DF9129E4610BD84C3532E13B05FBF0CFB8C3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204843.roa
Signing time: Tue 11 Apr 2023 07:00:11 +0000
ROA not before: Tue 11 Apr 2023 06:55:11 +0000
ROA not after: Tue 09 Apr 2024 07:00:11 +0000
asID: 204843
IP address blocks: 104.234.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a2:df:91:29:e4:61:0b:d8:4c:35:32:e1:3b:05:fb:f0:cf:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 11 06:55:11 2023 GMT
Not After : Apr 9 07:00:11 2024 GMT
Subject: CN=541ED648FD454B18711CF8BDEA11F6759751936D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:53:b6:f4:97:ba:1c:f3:97:80:b9:c6:d3:
ba:ee:5e:f8:91:2a:98:d8:be:30:ac:17:2b:2b:d5:
c1:8d:3b:29:83:f6:61:6e:47:89:98:98:fc:17:d0:
2d:94:e2:b1:72:59:0f:bb:33:de:cd:af:b2:af:e1:
31:c1:60:26:24:69:f9:9f:7a:b5:23:19:5c:60:5e:
1d:78:2a:b3:50:8d:9f:bc:50:d6:1e:43:21:2c:c6:
d7:ec:71:70:d6:13:c3:4f:2a:03:4b:86:72:af:2e:
b8:06:73:73:c2:bb:94:c7:d8:54:1a:64:d4:37:d3:
49:d9:59:35:59:fd:bf:01:38:06:97:7c:8c:98:a2:
de:fd:32:cf:c6:6f:7f:e7:17:16:a0:b0:26:fd:f1:
d6:e7:fe:b7:c3:2a:fc:b1:3a:de:60:84:37:75:32:
a3:2f:4f:74:2e:71:d2:32:c4:08:e0:25:8c:b5:30:
02:5c:2a:fe:35:32:ac:48:a5:24:66:23:2b:03:e8:
ab:7c:7d:b5:c3:5b:e8:9d:7d:67:19:f5:02:ae:2e:
79:01:94:57:e0:48:50:11:5c:af:ce:1d:2a:38:66:
2a:55:a3:2e:7f:36:0e:9d:7c:fd:2c:f7:10:0e:9f:
95:63:82:01:01:31:2e:00:dd:33:cb:f1:41:2b:80:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:D6:48:FD:45:4B:18:71:1C:F8:BD:EA:11:F6:75:97:51:93:6D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS204843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.226.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9f:f0:ca:3b:d9:aa:39:4c:69:bf:43:33:38:9e:b6:c1:54:
08:14:78:3f:96:b2:aa:57:4f:aa:fc:4b:51:97:7c:59:21:67:
cc:5e:83:ea:fe:3e:19:1a:aa:f9:b2:83:f1:55:d6:44:a6:21:
40:f2:06:77:49:fc:05:29:bb:f0:e0:eb:72:cc:0c:0b:f6:1c:
51:89:cf:fd:2d:69:ed:54:53:b5:a5:c9:b6:4a:e8:c7:49:c2:
ed:06:27:fd:b1:13:57:3c:da:23:f7:67:88:16:82:9c:f6:b3:
69:5d:6c:69:17:63:4b:ab:b4:f9:42:52:e9:50:1a:ef:6f:fd:
ca:ae:2a:71:d7:79:14:51:9b:a4:e6:a3:3d:98:bf:45:9e:a6:
2d:e1:2d:44:e3:1b:c9:e3:fb:87:52:a3:37:c7:76:cc:dc:29:
20:31:db:7f:10:89:e3:bd:16:27:48:c1:06:2d:91:c3:51:e3:
f5:0e:ee:3a:f2:27:55:9c:6e:0f:22:71:e1:89:ec:08:3a:c1:
bf:81:db:d8:4f:b9:fd:f2:28:b4:37:cf:96:14:99:cb:94:a2:
2d:91:c0:ec:27:3b:d8:fe:f8:0b:e3:72:26:e6:9f:68:11:07:
7d:c7:6f:49:f1:f4:e7:1d:28:c5:cc:a8:0e:dd:10:9b:8c:89:
0e:ca:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org