Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa
File: AS399646.roa (raw, json)
Hash identifier: kc2gmts2nGi0mvPMKNDJT82cf3zqBXFAfU1gixqInD4=
Subject key identifier: DD:42:70:37:C2:80:DA:EE:65:34:63:10:4E:A7:0C:AB:A8:D6:79:9A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 33C819BD930AEFF004025188573519E63CF69926
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa
Signing time: Mon 08 Apr 2024 16:03:23 +0000
ROA not before: Mon 08 Apr 2024 15:58:23 +0000
ROA not after: Mon 07 Apr 2025 16:03:23 +0000
asID: 399646
IP address blocks: 104.234.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c8:19:bd:93:0a:ef:f0:04:02:51:88:57:35:19:e6:3c:f6:99:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 8 15:58:23 2024 GMT
Not After : Apr 7 16:03:23 2025 GMT
Subject: CN=DD427037C280DAEE653463104EA70CABA8D6799A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:ca:13:c3:65:0c:23:f5:cf:20:c4:84:d3:
7f:cc:8f:e8:4b:50:0c:fb:89:71:67:c8:58:e2:ae:
aa:53:c9:bd:67:2d:3a:af:a3:a1:5c:4d:29:33:33:
55:c8:1e:03:97:5c:87:d9:83:09:b6:ef:b8:8e:9e:
8d:ba:1d:fd:49:c2:36:c1:5e:59:23:f3:4c:1c:bb:
5b:57:df:93:8b:c0:3d:72:82:5c:01:bb:c5:42:07:
29:ca:8f:22:b3:d2:7a:05:f7:c7:60:66:b0:b3:af:
7b:57:b4:4e:59:f0:0a:e0:09:29:79:fa:49:63:80:
05:0a:76:3a:29:96:20:13:95:60:8a:61:21:fd:cf:
bf:8e:65:b2:e8:4f:76:4d:4a:52:2a:b2:ae:ea:a5:
c2:69:27:95:12:e3:d2:74:09:f4:c3:91:9d:65:d3:
00:ac:f8:04:97:81:46:bb:57:fb:61:e2:f5:46:11:
22:9a:bf:51:70:df:a1:cd:fe:c6:2f:85:87:77:73:
dd:3e:f4:e5:e7:64:45:89:7a:cc:2a:56:6c:80:6c:
c1:48:c0:82:d8:c7:be:9f:d4:06:ea:61:42:33:c7:
c8:33:49:24:de:38:42:40:bc:7e:e8:f5:98:c3:00:
c7:86:19:cf:6a:cb:e1:99:44:55:e1:0e:28:fb:fa:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:42:70:37:C2:80:DA:EE:65:34:63:10:4E:A7:0C:AB:A8:D6:79:9A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399646.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.104.0/24
Signature Algorithm: sha256WithRSAEncryption
87:19:13:09:67:ba:c6:7d:71:34:e6:3b:d8:1c:b5:85:e3:60:
99:2f:cc:83:28:00:e7:b6:ab:61:62:60:18:f1:cb:8a:fa:a7:
0c:aa:73:6a:e2:68:89:a2:4c:16:9f:c7:0a:65:a9:96:ff:5b:
62:16:f5:15:eb:ad:10:cd:ee:91:f0:33:9f:c3:43:ea:da:fc:
17:5d:84:eb:6a:66:8a:67:d6:0a:15:7e:28:40:a5:8d:99:c6:
ce:aa:91:0c:90:d4:7f:82:a1:83:be:e7:6e:48:a4:93:ca:bf:
e6:43:7f:71:a9:cb:4a:36:6d:e6:b4:77:52:c9:ea:90:1d:9f:
10:ba:b0:62:54:f8:17:78:2f:58:39:d0:68:e8:3a:0e:36:af:
aa:2d:4f:04:96:b0:bf:7b:5d:a5:ba:fe:88:6f:36:3f:e2:db:
5d:7f:3a:c2:5c:14:7e:21:90:31:36:ac:ab:dc:2b:0e:14:1c:
e1:c5:aa:89:9d:c9:fc:e0:f8:02:d3:14:aa:99:47:94:54:14:
0c:58:bc:cd:18:41:20:8b:0d:e3:da:86:6d:68:2b:df:8a:43:
72:18:1b:07:c1:66:49:6f:f4:d3:f9:a5:f7:94:f5:c7:bf:c4:
56:63:ba:e3:45:f0:1a:2e:ce:97:24:65:cb:f1:85:18:ba:df:
9a:4d:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 01:51:16 2024 by rpki-client on console-ams.rpki-client.org