Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26737.roa
File: AS26737.roa (raw, json)
Hash identifier: e+SZhlNwKIabtJFYMDrEEhukzetfX4fWrvQCMdvzGBo=
Subject key identifier: E1:14:54:1C:63:56:02:DB:AE:3C:AB:46:63:24:83:1F:57:AF:9C:30
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4D99A108277470E09714E98625F1448482E1C27D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26737.roa
Signing time: Fri 06 Sep 2024 02:37:29 +0000
ROA not before: Fri 06 Sep 2024 02:32:29 +0000
ROA not after: Fri 05 Sep 2025 02:37:29 +0000
asID: 26737
IP address blocks: 104.234.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:99:a1:08:27:74:70:e0:97:14:e9:86:25:f1:44:84:82:e1:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 6 02:32:29 2024 GMT
Not After : Sep 5 02:37:29 2025 GMT
Subject: CN=E114541C635602DBAE3CAB466324831F57AF9C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:d8:91:bf:29:fb:86:33:ac:67:50:26:5e:
57:01:c0:2e:f9:11:ab:ee:0a:e0:bf:57:d8:b7:e9:
53:f9:67:dd:3b:dc:3d:cd:52:d3:2c:d9:79:60:5b:
e1:ac:8a:6f:e3:0b:a7:8e:36:b6:c4:28:5e:3b:1c:
02:03:91:df:ee:1f:2e:12:50:94:07:3c:98:1a:24:
e9:e1:92:8e:7a:10:25:52:93:2a:9e:f8:1e:83:b8:
d6:61:07:e9:76:29:9e:d1:fb:ff:16:7e:d9:f2:33:
3d:2d:4d:69:db:77:07:f3:23:f1:2c:0b:73:fb:e6:
a1:49:7d:4c:73:42:01:95:bc:17:7d:13:11:a5:e8:
bd:a8:9d:28:dd:ac:63:46:bb:cf:fb:a5:46:85:de:
5c:01:20:2f:78:d9:7f:36:ce:e0:27:20:53:e3:23:
75:a9:e2:e8:90:00:f8:13:04:ab:79:79:cb:cd:85:
c9:7c:72:ef:66:55:9c:db:46:04:1b:91:21:5a:92:
4a:a5:75:61:7b:a2:81:7f:fb:47:0d:45:cd:ed:c2:
22:ae:18:f9:78:74:c4:05:42:fe:d1:dd:7e:f8:2d:
8b:79:32:f8:85:2d:3d:da:ae:33:74:0b:57:54:3a:
8b:08:ae:ae:b8:bc:55:04:77:16:5c:f9:a3:89:47:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:54:1C:63:56:02:DB:AE:3C:AB:46:63:24:83:1F:57:AF:9C:30
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b3:19:7f:96:02:36:1b:18:dc:07:fa:71:3e:18:19:a1:97:
cc:f2:40:c3:ac:f1:5a:45:bb:81:da:40:9a:cd:4e:34:7a:c3:
6c:a7:66:d9:96:03:a9:62:51:ff:85:11:bf:4a:17:f5:05:42:
cd:5c:db:ab:48:1a:6d:6b:94:f7:7b:1e:55:9c:92:c6:cb:3f:
e3:ae:aa:29:fc:26:cc:56:cd:73:0e:76:1c:14:62:c3:3d:d5:
e6:95:74:41:cc:7b:d5:d1:fb:3b:87:be:f2:e2:e4:a7:f6:d6:
77:ac:51:77:e2:13:4a:fc:ed:c8:1d:36:bf:60:80:bb:73:ca:
14:7d:43:ae:63:5d:71:4f:e9:87:21:7d:6a:ac:a1:52:1b:5d:
bf:af:4f:f4:46:84:03:a3:65:c0:4d:19:15:00:ea:ef:89:be:
72:02:7d:f2:79:47:03:af:7c:0d:ef:68:fb:3a:3a:e1:3f:4d:
56:f2:25:1a:89:d6:38:92:bf:9b:81:33:be:21:87:30:ac:b8:
1d:89:92:b8:ee:52:f1:82:42:d7:25:7d:be:19:22:59:54:73:
28:b9:b2:3d:28:9a:e2:02:74:56:7c:f9:81:b4:ca:71:84:d9:
93:46:ad:26:10:1c:f8:0c:77:6c:ce:8b:aa:0e:c7:43:39:3d:
77:82:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org