Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: 1ye/xrcN5whRAQY2oFgRqXy4Copu0CrzeafGwwVGOaM=
Subject key identifier: CB:03:3C:A9:D7:EE:49:46:35:1A:77:95:04:94:B0:6D:7A:81:F8:DF
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 046CBF8EC907A4609D8AFADF03654B09BC85FF7C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399073.roa
Signing time: Tue 12 Sep 2023 16:33:46 +0000
ROA not before: Tue 12 Sep 2023 16:28:46 +0000
ROA not after: Tue 10 Sep 2024 16:33:46 +0000
asID: 399073
IP address blocks: 104.234.118.0/23 maxlen: 24
104.234.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:6c:bf:8e:c9:07:a4:60:9d:8a:fa:df:03:65:4b:09:bc:85:ff:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 12 16:28:46 2023 GMT
Not After : Sep 10 16:33:46 2024 GMT
Subject: CN=CB033CA9D7EE4946351A77950494B06D7A81F8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:b4:a7:d1:f5:44:fd:87:5f:88:2c:9e:b8:
39:41:de:45:6c:3b:81:57:8b:9d:b3:a9:84:ba:1f:
f9:52:e1:3f:5e:34:b7:f7:19:fa:1e:09:52:a1:92:
73:27:36:c8:a6:c7:a1:01:29:50:8b:04:63:8b:20:
b9:7d:ac:5c:de:2d:46:d0:04:48:5d:02:4d:3c:d4:
74:49:da:e6:60:d6:cf:5e:93:42:a1:7f:88:a2:e7:
03:4e:1a:a7:03:d3:82:99:46:f7:ba:b8:95:2e:ad:
2b:dc:37:78:4b:48:fc:b7:9b:76:54:40:70:13:c6:
e3:03:1d:0b:e2:2f:be:02:a8:08:ae:7a:d1:d6:40:
bc:0c:17:0c:c2:1a:f6:75:be:ee:6c:71:0c:cb:ad:
d7:d0:f4:fd:7f:f1:2b:b5:b9:ff:d8:44:27:35:49:
0a:0d:b3:6a:e6:84:51:71:6b:66:db:80:30:43:07:
8d:3e:6c:d5:57:2d:7a:fa:b5:42:d9:86:8e:ff:d8:
15:b0:2f:76:81:01:fd:d8:cb:bd:e6:13:0c:9d:31:
ba:66:82:62:33:32:e7:59:ed:ce:36:7c:03:62:65:
7a:a8:9f:54:b1:66:56:a0:c1:14:a8:bd:12:a4:6f:
46:a4:ff:87:2a:19:cc:84:1d:ac:ad:49:e7:f0:a9:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:3C:A9:D7:EE:49:46:35:1A:77:95:04:94:B0:6D:7A:81:F8:DF
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.118.0/23
104.234.172.0/22
Signature Algorithm: sha256WithRSAEncryption
59:e4:6a:ef:10:dc:dc:72:76:7f:7a:ff:7d:cb:bc:5b:66:14:
72:a5:77:e9:11:4b:ce:a0:25:10:53:3f:80:08:dd:07:71:9a:
41:78:e3:3c:47:33:94:4f:4e:64:53:a4:6a:e1:38:30:79:15:
0c:ef:19:85:69:11:0f:f8:ce:5c:d8:71:b5:9b:67:e9:2b:c1:
d5:51:c0:cd:02:f6:87:9a:b9:8f:60:85:45:9f:96:fe:7f:c8:
3c:1a:38:39:6f:b4:82:ab:11:98:52:8f:c3:0b:c1:ee:77:6c:
b4:34:4f:97:b3:c2:96:1e:e7:fc:d4:3f:82:9c:2c:84:65:f8:
81:c9:8f:ba:63:2a:50:b6:82:19:50:8a:a6:06:a7:70:cf:a8:
87:9e:b2:d7:3d:f7:97:73:b3:45:fa:32:01:03:d4:88:32:68:
e9:1c:47:39:64:6d:5f:eb:33:46:a8:33:e0:2a:6d:bc:93:22:
c5:0a:35:8d:69:bf:aa:17:53:d6:7a:67:13:93:36:a0:ef:d6:
e0:9e:0a:f4:54:f8:31:9e:28:02:ed:6a:29:18:1c:2b:05:d8:
7e:cf:4a:68:40:2a:32:87:d2:05:8c:4b:f7:c7:59:ab:99:f0:
4c:fd:d6:45:be:8d:2e:ea:56:cf:5d:a2:ae:43:27:d3:e4:2b:
45:e1:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 00:18:24 2023 by rpki-client on console-fra.rpki-client.org