Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207787.roa
File: AS207787.roa (raw, json)
Hash identifier: KwcUB8NzBikQQbSll1RfFO4xlHnP0uP+2tH8tdkT8F4=
Subject key identifier: E9:2B:28:57:77:B8:58:08:68:D3:F7:75:2C:CD:E6:C0:07:48:FC:4C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3BB04C6111CDCFA4CB45FF31449E35111D8FAB53
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207787.roa
Signing time: Thu 04 Jan 2024 10:04:29 +0000
ROA not before: Thu 04 Jan 2024 09:59:29 +0000
ROA not after: Thu 02 Jan 2025 10:04:29 +0000
asID: 207787
IP address blocks: 104.234.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 10:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b0:4c:61:11:cd:cf:a4:cb:45:ff:31:44:9e:35:11:1d:8f:ab:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 4 09:59:29 2024 GMT
Not After : Jan 2 10:04:29 2025 GMT
Subject: CN=E92B285777B8580868D3F7752CCDE6C00748FC4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:e3:f1:9c:07:ea:7a:ff:d1:41:66:ff:3b:
e0:1a:b2:ce:1f:2a:42:00:f2:7d:53:97:35:a5:04:
e4:fa:77:df:0b:9f:b1:8e:bf:76:73:4a:ee:4e:16:
16:26:ec:49:9a:6d:e9:b2:1d:19:96:e1:39:f1:46:
21:32:79:4c:97:bd:fc:84:56:7c:8d:7e:9b:5e:15:
42:2d:cf:8f:2f:83:2f:2b:2e:16:4c:f9:c9:ef:e3:
4b:fc:f3:db:23:11:a6:ba:d1:40:86:2f:20:dc:d2:
af:2b:8f:63:16:86:27:66:30:37:16:2c:6d:8b:cf:
a8:8d:8f:b7:e1:6c:58:9a:69:13:18:b0:28:b3:ef:
bb:7e:fd:d0:19:e6:c5:3c:da:87:11:9a:0b:8c:b6:
17:4a:b1:9a:26:bf:e9:06:fa:96:18:53:94:e8:cd:
a9:7d:df:4b:fb:63:3d:b8:8e:5e:0b:73:09:54:a7:
87:4f:b7:06:47:57:39:34:a1:93:fd:36:90:23:30:
ff:14:05:4c:05:8e:94:fe:75:8f:87:40:e2:42:15:
6a:32:60:11:20:1a:fc:aa:7e:bd:59:ca:63:80:f1:
0f:e4:47:e3:10:d7:11:fb:e8:e7:68:1f:cb:f8:17:
e0:51:d8:a4:71:de:f4:b5:06:da:64:cb:93:bc:6f:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2B:28:57:77:B8:58:08:68:D3:F7:75:2C:CD:E6:C0:07:48:FC:4C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:42:94:7d:49:8c:8a:3d:62:dd:11:3c:0a:d5:52:06:e5:0b:
bb:29:0d:5a:ad:39:37:df:d0:dd:3f:ba:60:dd:17:75:c9:fe:
89:4e:51:91:77:66:76:67:15:f9:2d:9c:5f:46:38:1b:f7:3f:
93:eb:e6:7f:68:cf:89:4f:ab:a9:c8:97:35:2b:46:04:b8:41:
5c:3e:17:61:b7:82:73:00:a2:57:5a:62:d6:55:3c:25:76:ca:
cb:e7:f2:35:b8:86:64:c3:d6:c5:a4:f9:fd:b5:52:c9:c1:67:
92:59:25:9b:35:14:3f:f5:cd:fc:4e:35:6e:89:3c:f9:0b:a1:
64:a5:c4:94:af:4a:d4:a4:b5:96:08:5b:67:ad:7d:d2:86:ad:
ae:c8:bd:89:b3:a2:a9:c9:ab:d0:f7:82:01:48:a9:0a:1a:63:
5c:31:9b:f2:eb:6d:00:c6:2e:bc:b5:92:9f:35:b7:80:0e:98:
37:c3:3e:48:3b:2b:a2:2a:e2:8e:a5:00:b4:7d:c1:62:ac:1d:
38:2c:82:70:39:5a:60:2a:ba:0f:ad:48:ff:89:20:de:38:40:
b1:85:ee:22:0f:6e:04:7d:90:71:55:08:77:ba:b7:97:69:39:
56:65:39:af:bc:62:9d:15:54:22:23:a9:40:bb:38:e7:32:ee:
b2:a8:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 12:15:04 2024 by rpki-client on console-fra.rpki-client.org