Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa
File: AS400890.roa (raw, json)
Hash identifier: DGkw3GwwLxa0Bz6kPekbqdotHJ8Ht82/Og8/3+vMXN4=
Subject key identifier: 76:97:DB:E4:52:6A:69:3A:1D:4C:B3:14:3A:F8:84:74:EF:8A:11:EF
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 127DF681F523241744EDEBD186CBECBD882D72BA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa
Signing time: Sun 28 Apr 2024 00:00:20 +0000
ROA not before: Sat 27 Apr 2024 23:55:20 +0000
ROA not after: Sun 27 Apr 2025 00:00:20 +0000
asID: 400890
IP address blocks: 104.234.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7d:f6:81:f5:23:24:17:44:ed:eb:d1:86:cb:ec:bd:88:2d:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 27 23:55:20 2024 GMT
Not After : Apr 27 00:00:20 2025 GMT
Subject: CN=7697DBE4526A693A1D4CB3143AF88474EF8A11EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:84:f5:53:26:54:d2:00:87:78:dc:f5:3e:
de:2a:3d:8a:15:c4:5b:40:e2:09:cc:67:6a:16:77:
2c:ed:63:ca:81:09:47:88:bc:49:10:c0:60:eb:3b:
77:68:4d:c6:67:59:b8:0c:4c:04:79:9f:21:95:65:
1c:22:55:5a:22:75:29:09:64:c0:b5:8d:ff:34:4a:
af:fc:67:4f:76:c5:f5:41:1d:5c:48:46:50:95:49:
55:31:cd:cf:76:b3:e5:22:3b:0d:b2:09:57:92:8f:
59:b0:1e:c1:e3:48:b0:af:d3:50:24:f4:62:84:1f:
09:6b:87:ed:27:be:da:b1:43:ff:ed:5f:df:80:50:
2e:99:dc:f7:d7:83:dc:f5:16:2d:a9:76:02:ea:2b:
31:3d:f3:7f:9f:fe:c9:f8:13:6b:58:64:d5:6e:24:
05:e6:57:8d:67:d4:51:c8:c8:66:e4:fe:4f:35:2a:
db:a0:b8:ca:af:8c:b0:98:6c:b8:09:c0:44:ff:43:
4f:e6:12:95:86:94:a5:fa:b9:8d:f7:6e:34:42:02:
42:1f:ab:16:78:04:8c:39:47:ec:b9:38:66:88:5f:
e5:b5:c0:2c:1d:ae:1d:57:71:cb:7f:0e:56:f7:fc:
dd:22:de:88:69:75:b5:48:07:d6:83:5f:86:29:d6:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:DB:E4:52:6A:69:3A:1D:4C:B3:14:3A:F8:84:74:EF:8A:11:EF
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.157.0/24
Signature Algorithm: sha256WithRSAEncryption
28:88:69:f7:da:a0:e9:71:d2:1d:b4:89:08:b1:7a:c4:c1:df:
9b:5e:9d:d7:19:e1:27:20:53:a4:99:95:4e:1f:4a:e4:12:b7:
90:82:93:94:94:af:4f:12:42:ea:a9:c1:bd:7a:f0:e8:db:6a:
15:05:47:01:66:ef:3d:41:2c:77:2c:e2:76:42:30:44:74:a4:
32:e2:d3:e4:7f:8c:06:ea:cf:57:9b:05:df:e8:ee:3f:7b:df:
42:40:1e:d1:52:52:94:94:20:ee:fc:5b:fb:43:09:9e:f3:c6:
fb:01:90:2c:19:12:af:50:32:57:af:41:e9:19:02:ca:16:35:
3d:a7:b0:43:ce:e3:06:60:c8:80:73:bd:8f:ca:77:cc:40:6d:
ad:e1:df:35:53:4a:75:31:a0:01:93:5f:4b:28:96:2e:f0:11:
03:77:1c:a4:c9:95:10:c8:b4:6c:0c:db:e4:51:40:d2:d2:e4:
e6:30:21:1a:f0:f0:80:13:6e:cd:d5:b5:46:7b:58:62:82:67:
d6:a0:14:bf:89:15:08:0e:4e:56:80:0e:b9:92:f1:3c:07:79:
fe:e8:51:b2:89:9d:75:8f:be:1c:89:f6:ab:de:b7:97:c5:6f:
75:a4:ab:ea:a4:23:d4:31:1b:8c:0b:e2:cd:7c:3e:65:2e:4f:
33:67:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:23:07 2024 by rpki-client on console-ams.rpki-client.org