Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272011.roa
File: AS272011.roa (raw, json)
Hash identifier: VwG02qk0tkoBIu7utAxQqwL+pDukWYQyHiVPeTzS9vI=
Subject key identifier: F4:BF:FE:47:E4:B4:9E:5E:16:D8:3B:F2:45:47:76:A9:AD:F4:88:5B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7D987762D86D56E8CBC1DF58B87C2F16D3F4A31E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272011.roa
Signing time: Mon 09 Oct 2023 19:21:20 +0000
ROA not before: Mon 09 Oct 2023 19:16:20 +0000
ROA not after: Mon 07 Oct 2024 19:21:20 +0000
asID: 272011
IP address blocks: 104.234.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 10:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:98:77:62:d8:6d:56:e8:cb:c1:df:58:b8:7c:2f:16:d3:f4:a3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 9 19:16:20 2023 GMT
Not After : Oct 7 19:21:20 2024 GMT
Subject: CN=F4BFFE47E4B49E5E16D83BF2454776A9ADF4885B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:8a:f6:9c:4a:3c:63:77:79:94:48:5f:1b:
a0:a2:47:0e:5c:f8:72:ae:f3:51:d6:2c:d6:85:fe:
12:27:97:86:42:5d:63:a3:62:4f:c2:82:f0:66:19:
e0:09:cf:9f:57:a4:94:a7:6d:7a:a4:3c:64:d4:08:
c0:90:0a:54:fc:62:bf:8a:4d:c4:54:4b:92:76:e2:
00:78:97:a5:82:ba:25:3b:21:91:e9:f0:0f:1f:3f:
1a:f9:50:e9:ca:be:dd:ab:45:36:74:aa:e1:86:c8:
f6:e3:66:32:a2:8b:18:b7:4b:d0:fb:75:d0:2b:fc:
d4:d1:e9:3f:d9:96:24:b8:b6:42:7e:32:77:ab:ec:
73:3b:c7:5b:71:7f:50:61:04:fb:a9:3d:11:df:54:
2c:5c:0e:c9:0a:df:22:ff:ac:2b:02:d5:90:8a:2e:
52:20:9b:07:cc:23:d3:a1:b8:94:0d:ad:8c:29:1b:
be:39:fe:05:58:45:67:29:d8:f0:68:b0:c4:09:23:
22:37:72:45:d3:39:28:c9:ef:0d:8a:16:7b:67:10:
b6:16:10:8e:54:ae:27:04:65:44:fa:c3:30:7a:82:
b0:5a:8c:5d:c8:14:68:f8:d7:a0:ed:2a:2d:7c:1e:
cd:c2:f7:47:9a:a5:94:99:f1:dd:4b:b9:84:ee:33:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:FE:47:E4:B4:9E:5E:16:D8:3B:F2:45:47:76:A9:AD:F4:88:5B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.50.0/24
Signature Algorithm: sha256WithRSAEncryption
96:f8:b1:9f:e4:02:e1:33:c6:d7:ea:d6:cd:69:b1:df:b3:2f:
76:01:84:64:b0:63:a4:88:02:2a:c8:d1:5d:e3:4e:a0:46:24:
c4:57:b4:4f:c4:2f:77:3d:00:fb:2e:fb:7e:0f:15:53:0d:4e:
bb:39:ac:db:b5:35:66:30:01:4e:25:1a:fb:93:13:7b:ad:dc:
a1:94:7c:a5:51:a1:ab:a5:2c:2b:d5:10:31:ba:f4:b5:b4:c0:
d6:2c:cb:cd:67:9a:7b:21:12:2e:2a:96:e0:8b:e7:0c:88:0a:
a9:f4:52:a8:ef:2a:21:5a:fd:81:d3:5d:21:d5:a1:a9:3b:89:
ab:63:f3:c0:08:31:33:d7:42:97:e6:33:41:3e:5d:30:08:f0:
ba:24:cc:10:65:ac:a3:77:fa:2d:94:49:4d:98:05:62:ee:40:
9d:46:59:ee:38:3a:c8:82:68:b7:0d:14:9a:39:d8:34:43:e7:
91:91:35:e8:45:b0:8e:c3:2c:72:fe:f2:e8:8d:f4:1f:f3:cf:
c6:cf:fe:14:59:21:ed:d7:3a:c7:2a:b9:31:b4:c1:69:a2:c0:
d5:f8:73:03:90:16:14:75:a1:6a:bb:90:68:cc:2a:ef:9c:03:
08:a9:a3:6c:9e:0d:0a:4d:fc:59:7b:ff:85:93:c5:cf:fe:53:
3d:b8:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 12:38:34 2024 by rpki-client on console-ams.rpki-client.org