Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400866.roa
File: AS400866.roa (raw, json)
Hash identifier: dR+UeViKV87w4x+rSJ+qI6MCZoT6YMlCVOESeiqOtmU=
Subject key identifier: 3B:BB:8F:28:75:4C:1D:9C:2F:29:1D:EA:15:F1:E0:CA:61:E8:FB:C7
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5F536C54507463F0D2A545CC2340222C91F8F869
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400866.roa
Signing time: Wed 19 Jun 2024 07:50:39 +0000
ROA not before: Wed 19 Jun 2024 07:45:39 +0000
ROA not after: Wed 18 Jun 2025 07:50:39 +0000
asID: 400866
IP address blocks: 104.234.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:53:6c:54:50:74:63:f0:d2:a5:45:cc:23:40:22:2c:91:f8:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 19 07:45:39 2024 GMT
Not After : Jun 18 07:50:39 2025 GMT
Subject: CN=3BBB8F28754C1D9C2F291DEA15F1E0CA61E8FBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:29:9c:c1:0c:ba:aa:ac:3d:c8:26:8d:1f:
ca:15:b0:60:8a:f7:35:ad:aa:42:3e:e7:68:be:76:
04:b5:49:8b:96:89:7f:79:6e:ba:1c:95:6f:d1:97:
3d:d8:40:24:a9:b9:50:bd:9c:22:35:12:99:ec:7a:
9c:b7:3b:ae:f3:68:6b:50:0d:a8:fc:b7:3b:7a:77:
92:e2:67:9a:1c:e5:a0:49:85:df:ad:6a:00:46:92:
94:c8:ae:af:e9:35:83:0d:33:2c:6c:34:cc:52:d8:
87:a3:df:71:46:1b:9d:6a:0f:81:75:14:87:ad:93:
a5:9d:91:09:bb:e0:c0:73:1c:c6:d9:67:46:b4:90:
53:1a:dc:c1:57:44:dc:46:28:d8:98:80:42:69:33:
ed:73:7e:f8:48:0d:0c:0a:84:38:a8:c2:f8:15:b3:
c8:ed:a3:ef:69:70:fe:8a:34:05:ec:9d:7e:11:c5:
f7:dd:ea:0a:7a:e6:55:2d:96:c0:ff:9e:e3:78:27:
5d:bf:0d:49:e1:9d:51:31:85:6d:af:45:03:a3:8d:
a8:7f:d9:f5:1c:51:8a:88:6d:be:6b:e8:a4:12:35:
86:91:22:cb:19:af:e7:02:60:f6:92:f5:67:0e:db:
7c:00:6a:34:8d:a9:fd:ef:e8:7e:4a:10:99:d0:68:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BB:8F:28:75:4C:1D:9C:2F:29:1D:EA:15:F1:E0:CA:61:E8:FB:C7
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400866.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2c:0c:60:25:59:60:75:c1:ab:d4:94:2c:47:7d:6e:48:26:
d4:e0:b4:03:94:e5:43:86:49:90:06:2a:f0:37:41:09:27:ad:
8c:03:ed:a1:a7:a2:27:b2:a3:d7:ba:f1:7e:3e:e2:77:1d:32:
4f:4d:ff:c6:9c:79:8e:3b:fe:1f:41:36:f8:b3:5d:a8:2e:c6:
da:b5:a6:c0:5e:16:fd:16:92:26:de:c3:6d:1c:ff:7a:df:a6:
f5:c9:29:55:a7:eb:e8:03:e6:a0:ca:9c:a6:0d:56:c0:44:d6:
f8:80:f8:3c:d6:ef:5f:fa:92:b8:85:18:c7:ec:27:4d:a8:d0:
ee:09:b9:74:35:d5:e4:d6:3a:8a:41:f9:d2:99:49:5a:81:98:
f9:b6:ab:3b:48:3f:ec:f2:9b:b8:73:e8:a9:94:54:a0:e3:b0:
8f:05:05:5e:ba:19:56:5b:c4:9f:78:be:4a:0c:98:09:5a:d4:
66:84:8c:58:86:0a:d7:9b:9e:22:8c:c9:c8:13:23:4f:dc:92:
fc:71:25:9d:a6:cf:1e:e4:f1:a0:a1:d1:ca:a8:a3:38:5f:0e:
88:c6:05:2e:70:70:d5:de:d2:99:db:7d:19:0e:4d:15:3e:ee:
74:b4:cb:34:1c:9f:3c:86:e1:7c:02:01:e0:e1:e1:89:bd:05:
0b:a6:47:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 02:19:45 2024 by rpki-client on console-fra.rpki-client.org