Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395899.roa
File: AS395899.roa (raw, json)
Hash identifier: kdyc9sHRW3m/7EFp2afwhyoFH85a8O7SPp1NqP7TzAk=
Subject key identifier: 45:AB:03:11:25:66:CB:A4:D3:B6:6D:3F:CC:E9:73:C1:12:11:6A:52
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 56CA8A7F0F7597C14E89FFF8365154C23A666E78
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395899.roa
Signing time: Thu 08 Aug 2024 18:02:47 +0000
ROA not before: Thu 08 Aug 2024 17:57:47 +0000
ROA not after: Thu 07 Aug 2025 18:02:47 +0000
asID: 395899
IP address blocks: 104.234.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 02:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ca:8a:7f:0f:75:97:c1:4e:89:ff:f8:36:51:54:c2:3a:66:6e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 8 17:57:47 2024 GMT
Not After : Aug 7 18:02:47 2025 GMT
Subject: CN=45AB03112566CBA4D3B66D3FCCE973C112116A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:95:53:5a:bc:79:15:fa:75:5f:d7:e6:49:
af:82:de:78:1e:63:4a:97:80:54:07:09:57:d9:9f:
11:6f:26:aa:91:0f:a5:ca:8c:79:0b:f9:a4:24:5d:
12:d1:df:fc:02:39:d0:e7:bf:48:e7:35:72:ae:87:
f0:3b:3b:9f:23:1d:98:20:a0:67:b5:13:8a:95:53:
8e:84:81:a2:a2:2c:12:bd:a8:09:8b:db:6e:63:d4:
5b:67:ce:19:95:46:f3:da:09:a9:f3:a0:f8:5a:b2:
0e:16:72:18:c0:69:2c:17:6a:7e:24:c9:ab:e0:27:
7d:a7:37:9d:5e:32:9d:4d:ca:ab:d9:59:88:44:11:
a2:31:51:32:70:a7:52:da:7c:da:02:25:0f:89:9a:
b9:a0:ea:12:aa:b0:95:f4:13:71:55:b5:68:6a:51:
54:a9:c2:0c:90:48:b6:60:79:57:4e:e1:c0:c1:3d:
d1:08:20:c3:e0:cd:e5:fa:9f:ac:e2:c5:b7:62:87:
a6:b9:0a:fd:68:aa:e3:61:54:9f:b7:d1:1c:ec:70:
06:86:bc:7c:19:4f:61:c5:50:f5:5c:4d:7c:5a:ec:
8a:22:e5:db:36:d5:fa:97:9b:00:5e:3f:58:41:09:
b8:27:7d:7a:c9:4e:36:f2:91:d8:81:b1:2a:a2:8b:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:03:11:25:66:CB:A4:D3:B6:6D:3F:CC:E9:73:C1:12:11:6A:52
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395899.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ed:02:e3:81:ff:83:22:29:40:dc:8c:7e:4e:d4:4c:48:5f:
cb:92:46:34:b9:0c:8f:c5:74:06:e8:09:99:fc:0f:e9:0d:bc:
79:35:91:cb:39:6e:85:94:71:bc:fb:5b:c5:73:19:89:f0:69:
3e:52:38:4b:b2:d3:3f:a9:8c:a7:48:fa:c1:ad:a6:ea:1d:2e:
8a:e2:cd:29:0d:47:bb:30:b9:f5:ab:93:64:44:9d:03:f2:26:
15:7c:aa:45:6d:06:f4:34:82:cf:ec:81:dd:d0:90:d8:ed:40:
d2:b0:40:9a:96:a2:b4:2c:f2:c7:82:48:f6:19:6c:b4:65:02:
af:af:c5:19:11:64:cc:24:f1:1d:20:21:52:7b:63:f0:e8:8b:
42:33:1d:bc:b4:fe:5e:39:ab:43:14:94:ce:7b:e4:2c:93:13:
bd:ed:cf:ec:85:a9:29:f9:ed:72:b5:05:cd:93:4d:d9:08:c1:
40:f6:ca:b8:d0:89:43:f1:a7:87:52:03:a9:df:fb:c5:30:d1:
fb:ce:32:da:9e:67:4c:c4:85:c8:c1:97:d3:a1:7f:ca:0e:06:
c9:15:63:9c:31:2c:55:f7:f9:04:f1:5f:c2:4f:77:d6:c7:16:
f7:d9:1b:87:d1:f9:d8:b2:f6:2a:be:dc:bc:65:79:07:b5:3c:
85:0a:f4:e1
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUVsqKfw91l8FOif/4NlFUwjpmbngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwODA4MTc1NzQ3WhcNMjUwODA3MTgwMjQ3
WjAzMTEwLwYDVQQDEyg0NUFCMDMxMTI1NjZDQkE0RDNCNjZEM0ZDQ0U5NzNDMTEy
MTE2QTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt2VU1q8eRX6
dV/X5kmvgt54HmNKl4BUBwlX2Z8RbyaqkQ+lyox5C/mkJF0S0d/8AjnQ579I5zVy
rofwOzufIx2YIKBntROKlVOOhIGioiwSvagJi9tuY9RbZ84ZlUbz2gmp86D4WrIO
FnIYwGksF2p+JMmr4Cd9pzedXjKdTcqr2VmIRBGiMVEycKdS2nzaAiUPiZq5oOoS
qrCV9BNxVbVoalFUqcIMkEi2YHlXTuHAwT3RCCDD4M3l+p+s4sW3YoemuQr9aKrj
YVSft9Ec7HAGhrx8GU9hxVD1XE18WuyKIuXbNtX6l5sAXj9YQQm4J316yU428pHY
gbEqootW8QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEWrAxElZsuk07ZtP8zpc8ES
EWpSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NTg5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqajANBgkqhkiG9w0BAQsFAAOC
AQEAPu0C44H/gyIpQNyMfk7UTEhfy5JGNLkMj8V0BugJmfwP6Q28eTWRyzluhZRx
vPtbxXMZifBpPlI4S7LTP6mMp0j6wa2m6h0uiuLNKQ1HuzC59auTZESdA/ImFXyq
RW0G9DSCz+yB3dCQ2O1A0rBAmpaitCzyx4JI9hlstGUCr6/FGRFkzCTxHSAhUntj
8OiLQjMdvLT+XjmrQxSUznvkLJMTve3P7IWpKfntcrUFzZNN2QjBQPbKuNCJQ/Gn
h1IDqd/7xTDR+84y2p5nTMSFyMGX06F/yg4GyRVjnDEsVff5BPFfwk931scW99kb
h9H52LL2Kr7cvGV5B7U8hQr04Q==
-----END CERTIFICATE-----
Generated at Fri Sep 6 04:24:09 2024 by rpki-client on console-fra.rpki-client.org