Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa
File: AS207429.roa (raw, json)
Hash identifier: nj5JaiTSvwZzpyoIFWIVPfBUqIBWaCw94IHGg5VJcYM=
Subject key identifier: CE:C2:01:7C:59:89:5B:84:04:59:A5:EA:B0:FE:B1:87:81:E3:A9:3A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 03CDBB3FC7539F4724F2C48B1BA7C8057CCA2D08
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa
Signing time: Wed 18 Jan 2023 17:16:31 +0000
ROA not before: Wed 18 Jan 2023 17:11:31 +0000
ROA not after: Wed 17 Jan 2024 17:16:31 +0000
asID: 207429
IP address blocks: 104.234.13.0/24 maxlen: 24
104.234.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:cd:bb:3f:c7:53:9f:47:24:f2:c4:8b:1b:a7:c8:05:7c:ca:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:31 2023 GMT
Not After : Jan 17 17:16:31 2024 GMT
Subject: CN=CEC2017C59895B840459A5EAB0FEB18781E3A93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:3f:51:8c:fb:ea:63:b2:d6:cd:bf:3e:69:
bd:ef:e1:c1:c7:86:be:b1:f9:34:f0:82:59:df:31:
4f:eb:d2:e7:af:a0:86:01:4a:27:ce:68:53:88:a9:
d9:b6:79:6f:c0:66:22:f0:54:74:d8:d3:0d:b4:02:
a0:5d:62:6e:26:95:e2:af:eb:e9:9f:b3:2f:0b:80:
d9:e8:fc:d5:36:dd:3b:75:aa:af:21:7f:f2:a3:ff:
b8:85:a5:e9:dc:41:28:77:d9:5b:6e:f9:3c:d1:5b:
38:1e:b4:73:a9:fd:61:65:22:92:1e:6a:f4:d8:df:
fd:83:8f:23:44:51:35:53:29:31:06:8b:06:51:17:
fd:06:3e:6f:2e:86:b1:ca:48:a7:ce:a1:5c:5c:3c:
44:e9:b4:57:a8:bc:3c:35:d1:c5:8c:a3:00:f3:b7:
ef:c8:b4:13:c1:d8:d6:fa:57:ce:dc:c6:f3:61:f7:
92:a9:9a:f4:48:f3:58:c6:10:a2:23:2b:53:14:87:
ca:c7:fe:0b:2c:39:ee:61:85:e1:7c:2c:6c:9d:42:
28:a0:de:f1:7e:67:a0:2f:17:8c:99:39:75:5d:45:
10:50:3d:77:a0:b2:a4:99:a2:47:7c:95:92:a6:1b:
f4:c2:ea:ab:e9:74:75:2b:a5:c1:fc:77:5c:2b:2c:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:01:7C:59:89:5B:84:04:59:A5:EA:B0:FE:B1:87:81:E3:A9:3A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.13.0/24
104.234.182.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f4:db:7d:5f:f8:1d:06:ca:f1:39:56:bf:a5:bc:e0:2f:df:
2e:9e:bf:28:43:44:62:2a:21:ba:af:41:d9:61:24:64:4b:ea:
a6:67:c1:57:ce:d9:8e:bd:27:be:7a:2e:64:22:61:52:50:73:
01:68:fd:9f:78:de:58:af:03:12:e2:c3:74:fd:74:f1:99:24:
44:85:e2:65:76:6f:14:e4:c0:76:72:26:dd:05:31:a6:13:6f:
2b:63:88:a1:0c:46:b1:17:23:89:e2:51:7a:f3:db:82:d5:7e:
30:55:83:49:67:60:20:2e:b8:07:ef:8f:84:44:c1:b9:34:32:
31:a8:99:b4:d7:13:ca:7d:d7:67:71:e2:54:b3:a0:05:bc:ed:
d0:01:5e:57:4c:8e:4a:13:48:eb:02:f8:67:43:68:de:19:22:
b4:05:01:b0:52:93:83:a5:ea:1f:c5:ee:b2:4e:f9:93:2a:c8:
eb:b7:f4:07:35:03:ba:1b:32:50:20:ed:f0:83:48:65:f4:57:
d1:09:e6:d0:a1:00:7d:62:8b:4a:6d:e3:8c:ef:1f:51:48:02:
11:cc:af:c0:fc:25:b2:e9:cb:e3:93:25:0d:11:9d:ab:d9:55:
31:5a:0f:88:53:7b:81:39:be:8c:ae:7a:64:05:e2:1b:0b:5c:
25:d5:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org