Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27317.roa
File: AS27317.roa (raw, json)
Hash identifier: fSAnln2irqm0ayJTmJy5S4kscFPi0g57uC4CyAooLMI=
Subject key identifier: 15:85:21:70:BB:EF:11:9F:51:B2:8C:43:87:1B:CD:83:40:5E:88:3D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 44EEE840CB971883E7A4A465A3CCD3B4D55B75EE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27317.roa
Signing time: Tue 05 Mar 2024 20:43:07 +0000
ROA not before: Tue 05 Mar 2024 20:38:07 +0000
ROA not after: Tue 04 Mar 2025 20:43:07 +0000
asID: 27317
IP address blocks: 104.234.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 10:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ee:e8:40:cb:97:18:83:e7:a4:a4:65:a3:cc:d3:b4:d5:5b:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 5 20:38:07 2024 GMT
Not After : Mar 4 20:43:07 2025 GMT
Subject: CN=15852170BBEF119F51B28C43871BCD83405E883D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:93:f1:fe:05:d8:5e:fc:1e:28:6f:92:7c:
a2:31:60:6b:ec:c7:3c:6f:bd:c8:76:1f:f0:3c:c3:
9d:dd:9a:8a:80:6f:2c:ed:53:1e:d5:44:29:81:8f:
12:c1:93:4f:3d:e4:7e:0b:85:bb:46:de:ff:83:48:
e5:41:12:70:b4:72:ec:5c:59:63:fd:ae:ed:d4:20:
18:a4:dc:9b:41:13:f2:bd:bf:9a:73:32:17:4a:d7:
32:11:af:39:21:f6:4e:a9:f7:d5:2a:b3:4c:6f:6d:
d1:84:f6:9e:86:90:33:e3:28:32:3c:d8:b0:16:16:
d6:6a:3c:cc:61:12:3d:ec:eb:90:e2:1c:44:23:e5:
ed:a5:b4:78:6e:6e:2f:86:ca:f8:e2:3c:ed:e0:ce:
18:7d:2a:3c:81:4c:8b:b1:67:ec:cb:14:0f:01:58:
f0:0a:7b:32:3d:40:87:e2:cf:b4:60:a0:8e:7b:74:
9e:23:2b:19:ad:c5:d8:a4:86:5f:c1:ef:05:ca:96:
c7:ac:d1:42:e4:ef:df:f8:7b:4d:ca:bd:e0:aa:21:
54:10:e1:b5:f6:2c:f0:49:e0:83:7a:69:77:5a:51:
03:65:19:9c:34:46:6b:6f:aa:f1:ea:ef:63:df:44:
39:62:4d:cd:07:8a:df:38:6e:93:f4:f2:b6:45:d7:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:21:70:BB:EF:11:9F:51:B2:8C:43:87:1B:CD:83:40:5E:88:3D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS27317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.226.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ec:30:44:21:b1:7d:fd:4a:06:b8:87:af:e6:dd:83:df:9d:
f2:77:05:0f:e2:07:f2:3a:81:cf:33:87:d2:a6:19:e7:c6:86:
d7:b5:18:d9:a4:a7:5f:93:5d:93:e7:e1:65:a2:d9:30:45:03:
b8:ce:f2:d0:dc:25:32:90:40:95:70:27:f5:52:c1:bc:e9:8d:
01:01:21:19:9e:29:fe:64:db:bd:7d:4f:23:7a:da:13:76:3f:
f7:72:10:ed:8d:91:57:8e:b4:89:39:c9:61:a5:7c:47:6c:a3:
09:ef:98:95:7c:96:0b:19:92:3a:95:36:c2:94:65:fc:a5:97:
64:d1:bb:67:6a:c2:bb:75:1f:fe:a9:21:0b:91:fb:ec:1d:2c:
94:b2:92:a8:07:55:c2:ba:28:b2:8a:1f:84:0d:d9:1f:e9:0e:
bb:9f:9a:83:d8:3c:d3:8d:fc:7d:ba:fa:88:bd:1a:27:1a:5b:
3a:70:20:3a:b9:5c:5b:cd:b9:a9:57:11:78:bf:21:0c:8b:11:
7d:fe:72:e7:93:a5:21:9e:7e:e4:42:1e:96:04:fe:de:cc:6f:
59:34:6d:9e:ba:8e:56:b1:ce:f1:e2:56:04:e4:91:b5:72:ec:
65:4f:f0:a9:ba:b6:d4:68:8b:1d:74:c4:2b:2b:ab:12:2a:e7:
01:3e:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:43:56 2024 by rpki-client on console-ams.rpki-client.org