Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270157.roa
File: AS270157.roa (raw, json)
Hash identifier: ZzBrj2cGDXSLnqlVu65FJ0oKDyHGnrzvYZ/lY4SPjxg=
Subject key identifier: D8:2A:B6:35:A2:3F:D1:56:82:DB:48:74:6E:B9:B6:DB:80:5D:F5:19
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 68C39413C151AB192B7E85E7CBB350FB626081EB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270157.roa
Signing time: Sun 14 Jul 2024 06:33:31 +0000
ROA not before: Sun 14 Jul 2024 06:28:31 +0000
ROA not after: Sun 13 Jul 2025 06:33:31 +0000
asID: 270157
IP address blocks: 104.234.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 00:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c3:94:13:c1:51:ab:19:2b:7e:85:e7:cb:b3:50:fb:62:60:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 14 06:28:31 2024 GMT
Not After : Jul 13 06:33:31 2025 GMT
Subject: CN=D82AB635A23FD15682DB48746EB9B6DB805DF519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:67:27:2b:54:30:e8:b0:07:bb:95:58:fc:ee:
43:8a:61:cf:42:f6:a3:82:c7:11:f1:33:3b:9b:cb:
1d:cb:ac:04:ef:ec:38:be:8f:dd:98:d5:26:2f:f1:
a3:d5:2a:ad:ea:1b:08:3f:6d:37:40:83:d9:50:5b:
bf:db:b3:0d:30:68:b8:fc:a4:73:d1:50:8a:ba:6d:
a3:e5:81:5a:83:c7:a6:94:48:33:0f:94:8f:f7:21:
18:2d:e9:1e:bd:9b:1a:20:40:d8:21:a4:57:0f:da:
37:0a:ce:41:28:ca:fe:f2:6d:be:82:5d:6b:e0:69:
20:46:f5:da:44:12:29:a8:95:75:ac:1c:b5:b0:57:
85:e0:be:35:ea:d3:3d:6e:89:e8:8f:0c:91:20:18:
17:c4:3c:c1:04:41:d8:f8:0b:2c:dd:bb:44:b4:bc:
2b:cb:1d:48:b4:64:d9:38:eb:f0:7b:9b:ba:1d:03:
95:f7:07:02:d7:71:da:7e:c5:fc:96:43:26:c9:02:
ac:13:b8:80:1a:ae:27:1d:28:1f:9c:f2:68:2b:ad:
45:37:63:07:a0:38:8f:c5:9e:41:70:c6:2b:02:dd:
3e:60:21:e8:13:9c:0b:2e:dd:cc:31:40:61:fc:e2:
aa:9f:dc:bb:d7:75:e1:28:6b:ee:85:12:b4:2e:79:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:B6:35:A2:3F:D1:56:82:DB:48:74:6E:B9:B6:DB:80:5D:F5:19
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS270157.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:55:20:ac:3c:df:b5:a2:57:52:e9:70:3f:e1:44:15:54:15:
2e:c0:1c:29:03:5a:5e:8b:3b:ea:bb:db:a5:0d:5b:2d:61:0d:
4b:92:ea:78:d1:e2:1a:c1:a5:e6:3a:02:77:d9:76:0a:c5:fc:
a4:a8:12:14:6f:de:f4:2c:7f:7d:59:21:7a:ba:a4:7b:33:30:
3b:d3:39:0c:e3:d1:74:13:96:40:42:e7:54:4c:98:4b:2e:8c:
a5:f7:c5:51:c8:fc:e7:dc:95:4b:e1:aa:cd:1a:35:77:3c:16:
2a:22:a1:56:d2:b2:49:09:47:55:9c:30:f6:da:49:84:2a:6a:
b7:0e:df:29:6e:33:6c:36:ab:d2:d2:a4:44:1e:94:01:3f:a7:
5e:18:0b:5b:0b:3a:47:d8:c4:18:b5:99:88:26:6d:69:a4:f6:
ca:fd:b5:c2:b3:99:8e:cd:89:f3:e4:56:19:66:3e:02:6f:1a:
96:96:19:73:47:85:db:f0:82:4a:df:99:e8:8f:df:05:8c:30:
2a:aa:22:96:eb:5f:52:08:18:44:6f:56:1e:77:0d:74:66:ad:
a4:12:fc:34:88:26:a1:ad:f4:e9:1e:7e:8f:fc:3c:2c:c0:38:
b5:2d:e0:fa:e2:ee:16:84:27:ba:7b:8a:7f:a2:18:42:4d:94:
99:01:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 01:58:08 2024 by rpki-client on console-fra.rpki-client.org