Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa
File: AS397373.roa (raw, json)
Hash identifier: QKs9VAJAWGMqmW++K9spd9Nd62iYXeOztLNpP6e6qBE=
Subject key identifier: 35:A5:D2:6D:14:60:16:4C:EC:22:7E:C6:98:01:88:0D:73:E3:F9:CE
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 0332D4E2D67EB9FB6E4F4CD8276BE09BDD0CB844
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa
Signing time: Wed 28 Jun 2023 21:21:55 +0000
ROA not before: Wed 28 Jun 2023 21:16:55 +0000
ROA not after: Wed 26 Jun 2024 21:21:55 +0000
asID: 397373
IP address blocks: 104.234.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 10:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:32:d4:e2:d6:7e:b9:fb:6e:4f:4c:d8:27:6b:e0:9b:dd:0c:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 28 21:16:55 2023 GMT
Not After : Jun 26 21:21:55 2024 GMT
Subject: CN=35A5D26D1460164CEC227EC69801880D73E3F9CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:d9:bc:38:1a:6e:42:8c:fc:81:10:c9:79:
c0:4b:bd:28:41:e7:64:ea:93:8b:60:b7:8a:96:a9:
2b:c3:e4:75:6a:b3:06:47:f8:95:51:7b:b9:e6:e3:
a4:c7:54:c9:90:25:7e:19:c0:e8:00:01:5f:28:c3:
3f:28:bc:b7:0a:0b:b2:61:ca:c3:76:9e:fb:aa:77:
0f:16:04:0c:5d:b0:90:22:62:eb:e8:72:cb:b4:ee:
85:ba:5a:16:c9:be:fc:a4:e7:1d:62:89:0a:dc:36:
d0:2a:18:a8:7e:00:e5:00:f2:9b:d3:22:22:df:cd:
8c:30:59:8e:7b:0c:bb:bb:01:6e:ca:31:53:f6:b4:
31:ac:6c:0f:ac:52:32:ff:4a:7a:55:ab:ce:26:dd:
e4:36:09:e4:02:29:7a:8c:78:46:0e:83:4e:6f:48:
44:94:de:b2:ce:78:d0:b1:c9:8d:4d:de:fe:82:04:
a1:32:03:58:67:59:db:f1:13:94:52:08:8d:8f:5f:
19:a7:63:01:cd:8b:69:e6:a7:7b:73:0f:04:f6:fb:
8c:75:77:93:5c:d6:ee:6d:55:cd:4e:ac:b0:81:4e:
1d:0e:a7:e9:c0:cf:4b:c1:33:a4:1d:f8:15:24:ed:
d5:f0:17:cb:f2:34:af:81:4f:e4:18:3c:cc:9b:00:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:D2:6D:14:60:16:4C:EC:22:7E:C6:98:01:88:0D:73:E3:F9:CE
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ce:98:96:e6:2f:aa:07:a4:e3:f1:76:97:8f:ce:76:bf:1a:
2a:6a:40:ac:71:24:56:9c:22:58:20:16:09:87:d0:d0:59:07:
9d:2b:b2:ce:34:d2:e8:1f:6b:be:54:e8:4d:75:cd:a7:b8:70:
09:4b:b3:91:eb:56:f9:af:78:93:be:d4:d0:26:e1:16:b7:9a:
5c:cb:14:50:52:5d:97:a5:1f:38:e9:b7:17:f8:75:f0:e7:b8:
65:2a:4b:ea:28:a0:ae:6f:0a:51:46:e2:99:e5:75:00:fc:02:
08:62:12:af:fa:d7:5b:e2:39:ee:14:c6:4e:b5:6c:ea:75:54:
19:d8:44:53:63:cf:f3:28:58:95:28:01:67:7e:70:00:04:19:
80:64:ec:a6:9d:ac:32:3c:1f:1d:a5:f2:d3:69:63:6e:56:8e:
2d:d1:80:ea:40:af:fa:0a:e1:69:83:65:5e:da:36:b5:d6:1d:
4f:4b:da:75:00:8e:34:6b:55:34:d6:3f:48:39:e7:71:4e:fb:
36:aa:02:2c:26:54:40:ca:c8:ba:b1:24:67:42:89:1e:ed:a9:
38:69:b6:4d:9a:61:91:44:8a:f7:f0:b3:d1:49:8f:3a:5e:3b:
bd:f5:1f:3a:f1:c2:03:02:f6:7a:34:ed:40:b2:9c:9d:73:1b:
6d:d8:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org