Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21682.roa
File: AS21682.roa (raw, json)
Hash identifier: XALtt1Z4DIchk7SRqtZ7qH+vTpIOAldYDxFGTJlUWhY=
Subject key identifier: 51:D2:64:8C:9D:B2:89:30:F7:D7:29:A9:6C:80:2F:91:94:30:53:DD
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 12C270F340880D2E5EB9575C9B9D9084A977710B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21682.roa
Signing time: Fri 27 Jan 2023 00:20:05 +0000
ROA not before: Fri 27 Jan 2023 00:15:05 +0000
ROA not after: Fri 26 Jan 2024 00:20:05 +0000
asID: 21682
IP address blocks: 104.234.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c2:70:f3:40:88:0d:2e:5e:b9:57:5c:9b:9d:90:84:a9:77:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 27 00:15:05 2023 GMT
Not After : Jan 26 00:20:05 2024 GMT
Subject: CN=51D2648C9DB28930F7D729A96C802F91943053DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ad:39:9c:85:6e:49:b4:6b:6d:87:a1:5b:26:
80:ce:c0:07:e0:6b:7e:21:4e:1f:61:6d:a7:5c:a8:
69:f4:31:8e:7a:ff:99:4b:26:b1:e7:7f:78:ca:2a:
0a:ed:e2:1d:8c:9f:39:c8:73:1b:26:f1:6e:a3:9b:
4d:5a:08:0f:81:a3:1e:8a:dd:42:b2:a2:2e:b3:87:
8a:21:e3:15:c4:7f:0c:eb:ce:13:87:0b:16:44:8b:
89:83:bd:d2:f8:a1:c7:59:98:c9:27:7a:b9:99:dc:
9b:1f:80:f9:ba:22:9d:05:a3:29:48:a7:6a:34:19:
16:91:4e:15:94:5b:45:56:f2:12:44:b3:27:f7:f9:
20:3a:fd:ac:94:b4:bd:c4:b9:98:ed:47:81:1d:f7:
27:6a:57:29:ad:81:0c:d7:9a:cb:8d:5d:45:be:13:
35:f9:9f:9a:eb:53:ff:26:97:2c:9b:ef:1b:16:34:
bf:36:60:73:c0:65:39:44:14:a4:02:d0:9d:48:1b:
79:d6:9d:a0:b5:d7:35:59:e2:68:4f:cd:ac:94:4f:
1a:de:75:7a:b6:4e:0a:c9:85:82:8d:61:b8:0c:45:
b1:16:5e:83:2c:d4:c7:67:e7:9e:43:8f:c9:88:c5:
ff:a7:47:8a:11:42:f3:fb:3e:1b:08:41:bf:3e:a1:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:64:8C:9D:B2:89:30:F7:D7:29:A9:6C:80:2F:91:94:30:53:DD
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS21682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.60.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a8:7b:a0:54:5c:fb:c0:78:ac:f2:93:13:40:f5:20:d3:9a:
97:5c:84:c7:fb:04:fb:03:d0:91:d9:f2:b9:5a:cd:49:2b:0c:
c5:3d:3b:5b:56:fc:3c:c1:84:8e:74:0b:8e:07:bf:a2:71:b4:
a9:ee:dc:0d:fa:e7:c3:90:e1:b6:f0:86:99:9f:10:fd:fd:0c:
26:e9:55:1b:ab:06:d0:6c:66:e3:51:b1:32:e2:4e:72:4e:13:
ff:c8:6b:6f:90:c2:e2:f2:2f:fe:f5:6d:3d:1e:93:49:9e:0e:
60:a1:b9:cf:e8:40:08:fb:31:6a:08:81:4e:e5:0c:fb:bc:69:
b8:eb:b0:a4:67:f5:9c:85:2e:db:44:6b:b6:4a:f2:5c:13:59:
2c:57:c1:54:e7:3d:ce:e0:87:0a:c6:d5:b8:16:46:b5:35:2c:
81:d7:85:22:54:ab:b7:f8:21:35:8c:ba:c5:32:e0:0a:30:88:
26:9e:46:16:c6:f1:4b:b7:fa:f0:73:64:f3:d8:02:e5:a3:b2:
32:af:99:78:08:40:cc:4d:d5:eb:78:24:bc:d7:7c:27:d1:57:
a3:31:08:d9:d1:51:7d:c0:2a:a8:3d:a5:17:05:e1:cf:39:1b:
ce:40:9c:16:e0:97:85:3b:40:1d:9d:61:cd:29:37:75:22:89:
bc:4f:ac:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 00:40:41 2023 by rpki-client on console-ams.rpki-client.org