Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33601.roa
File: AS33601.roa (raw, json)
Hash identifier: JtoM8RvA5KmOydgti3TRWbtntnufxAXCDicLHI8tGKE=
Subject key identifier: 20:35:D1:55:71:C8:D6:9C:94:05:E0:57:8B:BE:39:4B:F4:37:F0:3B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 17F33421166E5470D45B8FA6452A3D26FB026A31
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33601.roa
Signing time: Thu 15 Feb 2024 07:01:14 +0000
ROA not before: Thu 15 Feb 2024 06:56:14 +0000
ROA not after: Thu 13 Feb 2025 07:01:14 +0000
asID: 33601
IP address blocks: 104.234.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 10:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f3:34:21:16:6e:54:70:d4:5b:8f:a6:45:2a:3d:26:fb:02:6a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 15 06:56:14 2024 GMT
Not After : Feb 13 07:01:14 2025 GMT
Subject: CN=2035D15571C8D69C9405E0578BBE394BF437F03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:f6:74:e4:19:83:67:8e:2a:3b:01:de:9b:
8f:1a:7c:36:9b:70:1a:0a:fc:05:22:7a:3d:99:38:
77:4f:4e:a0:84:02:e6:23:d7:8a:6f:92:fa:6d:d2:
c7:2c:ed:b4:0f:13:f6:34:59:25:3b:cd:86:a6:be:
50:10:79:a4:a3:61:08:9f:29:1b:35:82:80:9d:f0:
16:8f:1c:10:4a:40:bc:3b:3a:35:5b:be:96:17:b7:
33:65:c5:c4:ce:e6:02:fd:2e:bf:57:fe:95:8c:1f:
d9:af:2a:47:c1:81:85:75:f5:31:f9:6e:50:59:28:
6e:09:fc:30:b5:cc:62:50:bd:99:91:d1:f0:2e:ea:
03:f4:c4:50:69:71:fa:da:bc:69:77:72:41:69:f5:
6e:d6:a7:3b:f9:26:e9:5e:7b:cd:66:e5:67:4f:7a:
2b:37:ec:d2:95:45:09:e9:f4:27:1f:c6:40:e3:57:
75:7d:da:04:1e:37:ef:5c:61:ca:e6:8b:10:a0:ce:
d9:02:69:2b:b8:e8:41:19:3a:54:d3:16:7c:70:85:
60:47:79:60:60:36:69:fd:5f:69:26:a7:3c:c9:c5:
85:1d:45:de:31:7d:b0:a6:5d:67:6c:da:0f:b6:b1:
02:87:75:fe:8f:54:79:9a:df:97:5f:99:74:71:8e:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:D1:55:71:C8:D6:9C:94:05:E0:57:8B:BE:39:4B:F4:37:F0:3B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
80:45:40:92:44:b1:b9:92:2d:ab:36:c0:66:ea:aa:85:4d:b8:
df:33:d3:5e:23:8b:6d:56:ca:2c:28:31:5b:49:68:ce:48:14:
9b:78:f1:be:a5:e8:72:ae:7d:92:ac:95:09:01:70:14:10:ed:
e0:48:0b:65:88:46:46:97:25:de:ea:5c:b6:b3:f6:25:49:4d:
d4:49:b4:f8:2e:da:4c:fa:82:69:42:45:8a:b7:3d:f0:12:b0:
08:75:3c:54:b1:98:50:33:99:32:9a:76:ae:96:c1:4a:e2:4a:
ff:ec:4b:6e:37:ef:9e:e7:c3:33:9e:09:02:e8:87:f4:11:32:
2b:72:78:cb:44:d8:17:2c:c8:2d:42:66:40:1c:e1:9c:18:76:
9e:49:ea:50:f8:96:98:d9:c9:a5:b8:a8:77:95:12:46:0c:7c:
bc:29:1b:4f:8d:24:4f:dc:c0:1c:c2:46:d4:1d:fe:1d:df:a6:
9a:37:2e:b9:f8:39:23:7b:16:2f:c9:0b:fa:c3:e0:f2:b5:f2:
13:c7:c8:ae:5d:26:cb:29:40:ca:c3:3e:8f:9e:25:86:62:ee:
3d:b2:ba:0c:4f:e3:6c:bb:09:40:8c:11:72:1b:85:f7:ab:39:
be:c0:1c:ef:89:78:ff:74:34:79:04:e1:24:77:c7:da:90:a9:
58:46:bb:69
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUF/M0IRZuVHDUW4+mRSo9JvsCajEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjE1MDY1NjE0WhcNMjUwMjEzMDcwMTE0
WjAzMTEwLwYDVQQDEygyMDM1RDE1NTcxQzhENjlDOTQwNUUwNTc4QkJFMzk0QkY0
MzdGMDNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf72dOQZg2eO
KjsB3puPGnw2m3AaCvwFIno9mTh3T06ghALmI9eKb5L6bdLHLO20DxP2NFklO82G
pr5QEHmko2EInykbNYKAnfAWjxwQSkC8Ozo1W76WF7czZcXEzuYC/S6/V/6VjB/Z
rypHwYGFdfUx+W5QWShuCfwwtcxiUL2ZkdHwLuoD9MRQaXH62rxpd3JBafVu1qc7
+SbpXnvNZuVnT3orN+zSlUUJ6fQnH8ZA41d1fdoEHjfvXGHK5osQoM7ZAmkruOhB
GTpU0xZ8cIVgR3lgYDZp/V9pJqc8ycWFHUXeMX2wpl1nbNoPtrECh3X+j1R5mt+X
X5l0cY7gqwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCA10VVxyNaclAXgV4u+OUv0
N/A7MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzMzNjAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOoJMA0GCSqGSIb3DQEBCwUAA4IB
AQCARUCSRLG5ki2rNsBm6qqFTbjfM9NeI4ttVsosKDFbSWjOSBSbePG+pehyrn2S
rJUJAXAUEO3gSAtliEZGlyXe6ly2s/YlSU3USbT4LtpM+oJpQkWKtz3wErAIdTxU
sZhQM5kymnaulsFK4kr/7EtuN++e58MzngkC6If0ETIrcnjLRNgXLMgtQmZAHOGc
GHaeSepQ+JaY2cmluKh3lRJGDHy8KRtPjSRP3MAcwkbUHf4d36aaNy65+DkjexYv
yQv6w+DytfITx8iuXSbLKUDKwz6PniWGYu49sroMT+NsuwlAjBFyG4X3qzm+wBzv
iXj/dDR5BOEkd8fakKlYRrtp
-----END CERTIFICATE-----
Generated at Wed May 8 14:39:15 2024 by rpki-client on console-fra.rpki-client.org