Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32159.roa
File: AS32159.roa (raw, json)
Hash identifier: hPgAJt7ARaP4BzqMzWaTBzF+D/hW0t5JF1Bf+er/OWA=
Subject key identifier: 34:91:4D:AA:CE:DD:0B:FA:B7:3D:BC:30:EB:79:8B:46:42:C1:0F:7C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 03AF9BF2DD303F5FDEDFC56CEAF0E203039D4978
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32159.roa
Signing time: Tue 10 Oct 2023 19:43:24 +0000
ROA not before: Tue 10 Oct 2023 19:38:24 +0000
ROA not after: Tue 08 Oct 2024 19:43:24 +0000
asID: 32159
IP address blocks: 104.234.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:af:9b:f2:dd:30:3f:5f:de:df:c5:6c:ea:f0:e2:03:03:9d:49:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 10 19:38:24 2023 GMT
Not After : Oct 8 19:43:24 2024 GMT
Subject: CN=34914DAACEDD0BFAB73DBC30EB798B4642C10F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:a6:23:26:b0:1d:e1:13:fb:97:b5:a7:8f:
2b:46:c6:a3:15:14:fe:82:d8:d8:f0:2a:ba:d0:e6:
15:f4:99:5b:6f:35:ed:f4:d7:45:ad:bb:c7:bf:5e:
d7:84:0c:d7:09:d3:0a:4f:49:25:20:dc:09:b9:84:
cc:72:85:e8:00:9a:74:a1:58:5c:d2:f1:02:68:61:
f6:e7:cc:2b:5c:a2:70:29:3b:5f:a4:e8:52:ec:b1:
67:95:ca:47:4a:26:c8:92:c4:07:36:a0:03:68:4d:
97:f4:d3:55:a1:83:6b:0b:0b:74:9b:e3:e5:77:1f:
1e:c1:ae:96:35:e6:cc:40:f4:8e:50:d8:11:ec:68:
61:0c:a9:84:f7:18:1d:3d:f7:36:dc:7d:ee:d3:08:
b8:88:3b:cc:f1:ca:48:c9:04:07:cf:c9:b0:bc:64:
35:13:7f:7e:f8:d2:48:25:41:6c:a9:c3:dd:f9:88:
64:cf:bf:3a:bc:15:49:74:7f:40:6a:76:7b:ea:6e:
cb:88:aa:7c:09:d3:02:a9:97:35:45:b7:f9:b4:dd:
d8:18:ed:58:9c:82:de:81:4e:89:8a:42:2d:25:33:
a1:49:cf:a7:2a:a8:b9:56:1a:53:9c:2f:91:29:b1:
60:ec:c1:50:04:ae:4c:75:ee:b8:33:11:3f:89:a2:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:4D:AA:CE:DD:0B:FA:B7:3D:BC:30:EB:79:8B:46:42:C1:0F:7C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32159.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.149.0/24
Signature Algorithm: sha256WithRSAEncryption
73:37:ba:56:31:a0:8c:f1:22:eb:03:70:d8:76:ba:65:d5:45:
3a:c2:81:e4:fd:36:72:35:ad:52:d2:fb:c9:e1:7d:fd:27:e9:
dc:0f:b7:7f:b2:cb:0e:49:96:d9:b5:ff:00:7c:8c:0c:3d:08:
93:6b:25:1e:6b:1c:f5:61:9b:36:e6:66:32:42:07:c6:08:5b:
0d:eb:3b:96:ae:41:57:a4:1f:41:72:4f:4c:df:c7:e3:b1:3c:
5f:0a:a2:16:ea:d7:55:9b:17:45:78:46:cd:46:a6:b6:9d:8b:
d6:8d:91:d7:3e:93:2f:78:1d:8c:9f:a7:e0:2c:03:73:6f:21:
f0:a1:92:e1:bd:d9:d2:e2:fc:aa:f3:a0:af:aa:bf:e6:84:bc:
eb:4c:67:89:6d:45:a5:1c:8a:34:22:d0:68:ca:1b:c6:fd:b0:
4a:db:f7:3b:ab:a2:c8:b3:91:df:2c:18:85:b7:7e:11:57:7f:
89:33:1d:21:24:20:ac:4e:be:bc:ea:de:4e:e4:65:80:ac:92:
6d:79:34:d8:ed:9f:60:55:fd:36:37:6d:3e:de:2e:20:26:f0:
0a:76:e9:e4:c1:f0:a1:d4:c7:79:df:89:bd:f6:e8:3e:10:77:
c4:6d:e5:44:a8:2f:00:ac:3e:73:58:f0:19:3e:a0:d4:7a:f7:
fc:64:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 23:14:03 2024 by rpki-client on console-fra.rpki-client.org