Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211192.roa
File: AS211192.roa (raw, json)
Hash identifier: rwyQRGRwPw94t6CK5BtIDv32LPuFGHlEFqFoHB1Fgog=
Subject key identifier: EA:26:58:41:27:64:6A:AD:BC:0A:2B:23:6D:1F:36:25:63:90:3A:02
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5848CC0F6B6D456B8A3232EAEECE4A8AF1EE8CEA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211192.roa
Signing time: Sat 03 Jun 2023 00:00:05 +0000
ROA not before: Fri 02 Jun 2023 23:55:05 +0000
ROA not after: Sat 01 Jun 2024 00:00:05 +0000
asID: 211192
IP address blocks: 104.234.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:48:cc:0f:6b:6d:45:6b:8a:32:32:ea:ee:ce:4a:8a:f1:ee:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 2 23:55:05 2023 GMT
Not After : Jun 1 00:00:05 2024 GMT
Subject: CN=EA26584127646AADBC0A2B236D1F362563903A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:e3:12:b6:c7:99:0a:8b:07:37:e6:79:48:
eb:b1:e2:1a:eb:47:16:aa:43:32:f5:ea:77:21:94:
c0:41:6b:5a:20:48:26:d2:b5:39:3f:77:ff:46:a8:
43:99:07:c8:26:29:fe:57:03:08:87:c2:6b:98:27:
a5:ea:1c:5c:e7:4b:b6:be:08:55:0a:a9:88:9e:1f:
9c:f6:a9:4d:a5:45:0e:ff:bf:6e:df:4d:14:b0:c1:
20:51:65:af:3d:86:79:92:47:95:38:76:8d:27:09:
b0:23:ea:bd:44:53:64:01:57:0a:ed:b5:85:c0:5c:
64:d7:8e:47:18:0f:aa:b1:fe:1a:80:48:68:fe:5a:
0b:f6:34:df:47:e6:41:86:e3:e5:38:e4:95:7f:9f:
b0:51:8e:c2:4e:15:4c:af:36:aa:9c:0a:8a:1a:78:
75:33:3e:96:ed:2e:56:ed:b7:e6:ce:d3:ea:19:b7:
32:8e:5d:07:bc:67:c0:58:79:e3:39:82:cb:a9:68:
ca:10:cc:79:7e:8f:0b:66:7c:cb:f0:05:35:05:88:
ed:c3:42:97:29:34:97:5a:9f:ec:d7:53:b2:fd:82:
db:49:c7:c0:45:33:15:39:2c:16:35:82:9d:3c:a5:
60:e4:52:c2:45:6c:76:99:1b:c2:b9:ca:1a:6e:61:
d2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:58:41:27:64:6A:AD:BC:0A:2B:23:6D:1F:36:25:63:90:3A:02
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS211192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.54.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1b:07:1a:34:77:72:bd:23:fa:f4:90:23:a4:6e:96:04:07:
61:dd:1b:c2:d9:4c:21:53:14:46:ea:02:8c:6f:4e:69:e7:91:
fe:e0:92:6c:27:9d:a2:eb:28:26:35:7a:0a:c6:91:96:ee:2b:
0e:3e:8b:25:b7:af:c6:e7:0a:7e:17:47:5e:82:a1:7c:49:d4:
46:79:f7:5e:89:a3:cc:27:0e:f6:b3:01:5b:99:14:05:e1:af:
b4:8a:68:20:e4:df:31:ce:df:19:17:d7:96:c8:8b:60:b7:76:
c5:56:62:4a:76:f2:78:88:b1:be:82:ed:bc:73:0d:2f:ad:51:
9c:13:fe:2b:cc:dc:83:50:07:42:d0:cc:09:14:82:cf:6b:c2:
a4:00:6a:e0:81:c2:3b:73:1e:52:54:97:74:7b:8e:43:70:cb:
83:50:d2:21:72:3d:c2:41:5d:10:6c:b5:e6:9c:dc:66:a9:c9:
a4:41:6f:8c:1f:74:3d:96:cc:c1:41:66:25:d7:2f:5a:0a:ec:
85:d4:45:43:3e:a1:36:7c:04:df:b0:fd:d1:b1:64:61:09:7a:
05:a7:bd:7e:2f:0a:2b:e6:2b:80:ef:13:84:8c:d6:0d:23:b2:
40:b5:62:2b:cc:b0:89:1b:58:ba:de:02:b5:88:41:19:36:d5:
17:e7:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org