Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207785.roa
File: AS207785.roa (raw, json)
Hash identifier: IjQ7+uSbJnc9hdgsKxuTu4nkF+yz/KJjwtpTwuUHQEc=
Subject key identifier: AE:6C:6E:E3:B7:6F:BB:D3:96:2D:C8:DF:F1:28:46:7D:3D:EB:71:DC
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 355DBE77B900FF1AD6A7BF8EDDD456E31512E173
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207785.roa
Signing time: Sat 11 Nov 2023 00:00:08 +0000
ROA not before: Fri 10 Nov 2023 23:55:08 +0000
ROA not after: Sat 09 Nov 2024 00:00:08 +0000
asID: 207785
IP address blocks: 104.234.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 07:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5d:be:77:b9:00:ff:1a:d6:a7:bf:8e:dd:d4:56:e3:15:12:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 10 23:55:08 2023 GMT
Not After : Nov 9 00:00:08 2024 GMT
Subject: CN=AE6C6EE3B76FBBD3962DC8DFF128467D3DEB71DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:2d:6b:1c:68:24:a5:68:d4:5a:40:b7:7f:
78:aa:ca:6d:06:0d:c3:66:bc:f1:7b:c7:9b:1f:e8:
71:9f:c0:34:e8:b8:f1:bc:4f:64:88:75:68:5f:10:
e5:d4:fa:6c:35:e0:70:fb:7f:e4:9f:c6:ae:12:2c:
42:9f:31:6d:b3:e1:b2:ec:95:9c:ef:ae:19:56:99:
c0:10:6c:ff:ef:de:46:b9:09:b6:34:52:ba:10:f4:
0e:09:de:34:ab:dd:1e:94:74:82:7c:7a:0f:bb:85:
5d:25:ec:12:26:f5:ec:05:e2:53:b6:51:c6:c2:bb:
61:a6:81:35:b3:24:f8:be:7b:02:71:be:a6:15:f5:
c1:1d:c7:44:e0:cf:61:05:6a:05:88:1f:a2:d9:f9:
c4:3f:1e:b0:dc:26:d6:b8:94:ee:66:fe:fd:04:a1:
c6:e9:62:19:d4:c4:28:fe:a5:85:9c:46:8d:db:e0:
2e:56:e1:57:07:64:d8:64:53:24:88:6c:96:be:79:
ee:fa:f9:a1:e0:c1:d2:92:b5:1a:ae:40:5a:6a:38:
78:c9:4e:6c:cf:6d:83:e9:1f:49:56:1a:71:a9:11:
9c:07:e4:fd:e0:27:a9:ab:07:a4:10:77:10:dc:37:
66:c4:3f:51:29:54:d4:55:99:8b:e7:27:f4:76:b3:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6C:6E:E3:B7:6F:BB:D3:96:2D:C8:DF:F1:28:46:7D:3D:EB:71:DC
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207785.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.115.0/24
Signature Algorithm: sha256WithRSAEncryption
75:51:5b:21:5d:d3:6a:c6:cd:35:3a:11:c3:d3:cf:31:a2:6d:
18:a5:ab:e7:1d:94:3b:5a:5c:17:40:aa:0e:b3:82:a0:9e:b4:
9e:25:fa:7f:dd:c2:15:ff:d2:1a:fe:6f:f7:95:1b:98:d7:69:
0d:c6:ec:bc:02:ec:3f:3b:ab:8f:b9:66:86:4e:3c:d4:dc:3e:
c1:23:57:9b:b8:17:d2:7d:4d:a0:55:63:fd:0a:bc:2a:7c:48:
d7:71:f4:2f:45:20:9f:cf:5b:6e:95:4d:84:68:f0:3b:1e:e6:
ae:35:83:cb:8c:0e:c6:f7:ee:e2:7d:2c:20:26:f5:45:38:37:
9e:d4:bf:c2:ba:85:87:c0:f0:a2:e9:a4:ab:07:3b:ab:b9:11:
a5:19:ec:4e:d3:af:54:1f:89:6f:f8:e1:93:0e:91:e1:fc:fc:
bb:02:18:7c:c2:73:fd:89:6e:7f:64:ae:82:f3:b6:d9:63:6a:
94:8a:05:71:e0:dc:ed:a0:71:7c:da:4f:26:3a:57:3c:fa:6a:
01:a1:78:ed:4d:97:48:0e:56:21:1c:36:fb:54:72:fc:47:b8:
96:5c:13:c3:eb:b4:70:38:85:6d:b3:40:2d:9f:f7:3a:ca:d9:
47:8f:76:fd:0d:1a:0a:2e:f6:fe:ce:d8:e2:cd:c0:d6:81:25:
74:e5:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org