Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa
File: AS32931.roa (raw, json)
Hash identifier: YEJES9MMSk5O9xx+fEG0jUaGoh4j4+HdQ/B7wmBYD4k=
Subject key identifier: 4D:B5:C9:E7:0C:FB:CE:1A:71:D7:76:22:BC:52:83:2F:8C:3E:32:53
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3AE1D985D8D8F6233034F2BA48D0000CE0258DC4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa
Signing time: Wed 20 Dec 2023 18:01:12 +0000
ROA not before: Wed 20 Dec 2023 17:56:12 +0000
ROA not after: Wed 18 Dec 2024 18:01:12 +0000
asID: 32931
IP address blocks: 104.234.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 19:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e1:d9:85:d8:d8:f6:23:30:34:f2:ba:48:d0:00:0c:e0:25:8d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 20 17:56:12 2023 GMT
Not After : Dec 18 18:01:12 2024 GMT
Subject: CN=4DB5C9E70CFBCE1A71D77622BC52832F8C3E3253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:8e:4f:77:c4:dd:95:98:3b:18:a2:7a:07:
1d:65:3d:e1:e2:8d:95:f7:5e:4f:60:2a:66:8d:f7:
f3:1e:96:c1:ee:75:99:b5:74:ff:d7:be:ab:7c:b4:
15:28:9d:a7:e9:4b:00:2e:5b:fd:75:3a:a0:d8:43:
f2:19:85:60:c7:aa:6a:c2:91:1f:3f:0a:23:64:4c:
ef:fd:fc:6e:18:c6:b7:13:5c:25:92:7b:d7:67:87:
90:a6:65:ee:1b:1b:d2:ca:6b:bf:d5:56:13:b3:9a:
cd:a8:88:4d:18:e2:b0:fd:df:5a:d3:de:bc:1e:0a:
b9:fc:7e:5e:9f:80:24:b5:e7:ce:23:0d:db:fe:78:
4c:40:59:ec:9f:a6:99:5f:2d:26:c8:d5:2b:a1:72:
ed:93:fd:e9:a0:32:4f:6d:78:92:5d:3c:b5:97:ae:
f2:e2:f1:28:05:d2:19:c8:79:29:ca:b4:4e:09:09:
0f:49:72:53:22:49:6c:4e:ad:ed:99:d1:31:dd:a1:
60:f2:40:58:41:94:12:fb:e5:9a:cf:1a:bd:8b:5d:
36:b0:41:28:4f:3c:26:6a:cc:c6:0c:83:59:30:09:
64:d4:2a:7d:04:6e:33:21:5d:3a:6e:20:e0:06:51:
f5:17:40:b2:d6:da:b1:a6:14:d5:72:64:b0:83:c5:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:C9:E7:0C:FB:CE:1A:71:D7:76:22:BC:52:83:2F:8C:3E:32:53
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:89:d6:c7:56:59:6e:38:87:ad:b1:c9:60:44:d4:99:62:35:
b9:d5:3a:10:e5:0c:76:82:63:db:16:df:ad:fc:55:d1:e9:3d:
1c:c4:a8:d2:60:2d:82:dd:b8:0d:16:c2:6a:81:37:9a:b9:fb:
9c:bb:f8:8c:d0:c1:07:47:be:21:77:3b:94:57:86:d6:0c:55:
c0:d3:45:03:8b:f2:38:53:e8:0e:21:24:5e:c0:14:6a:50:99:
f6:91:9e:8a:aa:52:51:5d:24:ce:46:66:d3:30:28:a4:a7:fd:
c9:25:ec:6e:cc:40:27:76:8e:57:3c:15:d7:5b:87:ac:90:82:
f9:43:50:82:b5:fd:fe:78:a1:21:78:3c:06:26:76:ec:d1:0c:
66:c7:a2:28:77:80:1e:bb:03:20:6a:0e:a4:6f:84:87:70:b5:
de:16:44:60:b0:7d:65:32:1f:50:73:54:a5:54:20:e4:34:26:
e9:f6:cf:57:70:63:02:ed:6e:7c:cb:d4:3f:76:f3:7e:0e:1f:
d6:70:8c:1a:c1:f4:55:a0:00:eb:05:6d:c0:0f:bf:63:46:44:
8f:ab:7b:aa:43:b2:4c:f5:73:74:c9:d7:be:b6:95:80:ae:70:
c2:76:77:77:80:76:47:97:cb:a4:47:c1:11:c8:9b:1a:17:53:
20:9a:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:37:47 2024 by rpki-client on console-ams.rpki-client.org