Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401103.roa
File: AS401103.roa (raw, json)
Hash identifier: fM/7XJ4l51G/IGcDVTa5CCG85/FTniXGDRLRHfOKhGY=
Subject key identifier: B9:0E:A4:06:D6:B7:6C:9B:A1:7B:94:FE:54:EF:22:68:F8:4A:02:7F
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3A0FEC29C805314FA067F4A72C1C828B32824ACD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401103.roa
Signing time: Wed 27 Nov 2024 15:35:29 +0000
ROA not before: Wed 27 Nov 2024 15:30:29 +0000
ROA not after: Wed 26 Nov 2025 15:35:29 +0000
asID: 401103
IP address blocks: 206.53.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Dec 2024 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0f:ec:29:c8:05:31:4f:a0:67:f4:a7:2c:1c:82:8b:32:82:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 27 15:30:29 2024 GMT
Not After : Nov 26 15:35:29 2025 GMT
Subject: CN=B90EA406D6B76C9BA17B94FE54EF2268F84A027F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:e8:24:dc:4a:ed:2d:32:6c:b0:2d:f1:87:
97:db:be:c6:b2:d7:1f:e3:8c:28:da:0b:17:28:71:
ff:a4:45:08:d1:13:4d:ec:9d:cc:6b:5f:b7:84:67:
8c:fc:47:47:db:db:23:a2:eb:a2:fe:79:0e:d6:6f:
a9:52:c8:94:d8:d4:03:f1:4d:03:7f:20:e9:d7:91:
97:68:1e:d9:5d:99:3c:51:2d:1d:f5:8d:89:40:9b:
19:37:16:ba:dc:23:8b:ba:57:85:7f:45:94:42:62:
01:e6:0b:00:2a:bd:ba:ef:0d:8c:44:b1:65:4e:9a:
d2:34:33:32:d2:ed:4c:a4:a5:a8:54:b4:3b:7d:3d:
5b:da:f9:76:62:01:c4:63:9c:a1:cf:46:77:2b:a6:
f7:7c:b5:02:6d:d2:b1:fe:1a:ca:ca:07:fc:36:a4:
65:93:b2:01:87:3c:d3:49:09:49:e3:39:cf:c7:63:
3e:d1:58:8d:ee:f1:15:20:e6:19:ba:d1:aa:92:02:
df:e6:b6:8a:b2:65:2a:c8:7c:83:1d:17:9a:a7:d5:
0b:1b:45:fe:81:d0:47:24:f0:3d:49:14:ca:a5:cb:
1b:9d:a3:89:83:1b:6f:d4:b0:a9:61:5f:40:ac:99:
75:4d:f7:3d:2c:5f:60:88:f6:ce:1b:24:0d:b5:e9:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0E:A4:06:D6:B7:6C:9B:A1:7B:94:FE:54:EF:22:68:F8:4A:02:7F
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.57.0/24
Signature Algorithm: sha256WithRSAEncryption
be:73:2e:85:f7:a2:ef:3d:a4:e1:98:65:87:7b:3a:10:fc:24:
d2:3f:f2:ef:c5:99:82:79:03:14:dd:29:5e:d2:c5:5f:be:5e:
b4:c0:43:53:5c:57:d4:90:a0:80:3d:af:48:dd:99:41:d2:7b:
62:34:15:a8:a7:97:ab:b8:19:ee:53:f9:d5:61:ea:18:d1:aa:
bd:ad:9e:67:65:5b:d9:60:cf:dd:54:a4:c1:56:ca:a7:49:69:
5a:e4:35:13:93:43:bb:ce:8f:a5:8b:c6:81:0a:d3:5f:85:90:
7a:a4:13:3a:7f:91:28:84:6c:7a:97:f3:b1:de:02:43:27:f7:
ca:e1:aa:12:e0:b2:b4:c6:98:f8:79:39:23:31:a2:c4:b6:d8:
00:da:f3:9f:a3:43:a4:90:d1:46:37:08:1d:a2:e0:f4:5a:22:
af:98:b8:60:ef:d8:73:bc:39:24:34:ed:f4:a6:8d:68:ed:7c:
61:4e:9d:3f:30:5d:3c:f4:e2:a0:51:6f:12:fc:5e:14:98:03:
d3:99:0e:e4:87:e9:60:51:37:98:f2:26:a0:0c:e7:b6:04:97:
0c:56:16:f3:9e:c8:d9:ab:a8:d9:d7:7a:34:5d:04:58:95:41:
13:3e:bf:02:90:b2:ba:99:29:23:9a:32:b7:53:1a:94:cd:ab:
d4:9a:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:41 2025 by rpki-client