Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS39600.roa
File: AS39600.roa (raw, json)
Hash identifier: K5QcbPNZjWvOqz4k9SNEfJFyQoZ2r2MTvnLYOhxdDVA=
Subject key identifier: BB:87:65:91:B2:C7:21:18:7C:F7:36:B3:B1:68:29:8E:2C:88:BE:95
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6273770A0C41105A36ADD38682460376178DADDB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS39600.roa
Signing time: Wed 11 Oct 2023 06:50:14 +0000
ROA not before: Wed 11 Oct 2023 06:45:14 +0000
ROA not after: Wed 09 Oct 2024 06:50:14 +0000
asID: 39600
IP address blocks: 104.234.206.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:73:77:0a:0c:41:10:5a:36:ad:d3:86:82:46:03:76:17:8d:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 11 06:45:14 2023 GMT
Not After : Oct 9 06:50:14 2024 GMT
Subject: CN=BB876591B2C721187CF736B3B168298E2C88BE95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:ea:e6:ef:fb:e2:2e:ec:00:4b:0d:16:1d:
41:3d:b1:bd:3e:ee:86:0f:25:5b:44:f6:1d:d4:34:
9c:e4:60:d9:c1:11:95:a8:74:2b:e9:66:f5:0d:1f:
46:36:da:40:85:f2:b2:a8:b3:ae:8e:2f:d4:14:37:
f0:09:13:3c:be:de:dd:3d:ba:d3:9a:55:90:47:86:
5b:75:8b:a7:c3:07:79:db:24:48:b6:85:f7:ed:21:
39:17:c5:55:00:de:cd:cf:1c:33:2e:4e:3f:bd:6d:
e7:4f:86:95:92:45:5b:e0:b7:cf:0f:1b:16:63:8e:
72:c4:07:67:70:b0:5c:56:ef:e1:cc:74:b3:7b:a8:
37:8f:40:7c:37:79:3d:a8:26:7a:b6:83:7d:e4:66:
5b:ff:fb:d3:c2:85:76:a3:3b:23:4b:20:10:f6:1f:
97:ac:16:57:42:d6:82:94:99:85:1c:28:ec:d2:9b:
57:c0:27:9e:77:df:7d:54:7a:86:26:e8:23:c8:16:
10:f7:0c:59:9a:43:4c:aa:5f:6b:78:b7:5e:c4:49:
8f:f7:9e:f4:28:28:90:09:79:67:f8:10:dc:ae:1d:
21:d2:61:65:44:e3:4b:e5:5a:9f:b7:c7:39:06:d7:
dc:05:ef:2f:c8:de:17:11:ae:f3:57:68:15:de:d2:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:65:91:B2:C7:21:18:7C:F7:36:B3:B1:68:29:8E:2C:88:BE:95
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS39600.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.206.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:79:55:94:f5:72:fd:1a:bd:0f:03:6a:74:cc:9a:b7:7f:fa:
5e:1f:1f:cc:da:3b:18:0f:27:24:bf:99:2b:ae:b5:82:66:d5:
a7:ae:89:26:04:ac:f6:97:db:a6:46:27:2b:ea:ed:c0:3b:ed:
f2:be:cf:4d:c9:10:12:ba:fb:07:64:f0:35:cd:26:01:28:58:
f2:98:1d:41:14:e6:c2:96:e1:6b:23:7b:52:c5:dd:a4:4e:f0:
97:17:87:44:91:f6:25:b7:51:f9:0f:de:5d:d4:cd:97:7a:9e:
e8:31:35:71:ec:fa:30:cb:4a:59:65:16:b0:de:c3:ff:a7:b0:
37:bc:97:07:02:07:d7:b0:ed:cf:72:a2:8c:7e:10:69:34:83:
16:d3:9c:50:7a:72:07:a0:d7:66:85:0a:ac:18:ab:be:b7:84:
09:e0:4d:e9:63:74:d1:e6:20:77:47:da:3f:1f:56:fb:2e:fd:
82:63:21:c0:82:b0:ab:37:fc:47:dc:f7:6a:be:00:d5:4d:4a:
04:ff:01:90:de:f1:eb:76:51:3e:96:64:0a:e0:24:b2:f5:8c:
33:60:aa:fd:2e:32:a1:64:41:79:63:89:2c:8a:59:9a:b5:71:
eb:6b:fe:2d:96:86:93:94:a6:b4:45:a2:8c:4f:d0:05:c5:bd:
f1:16:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 00:34:04 2023 by rpki-client on console-fra.rpki-client.org