Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401558.roa
File: AS401558.roa (raw, json)
Hash identifier: yxKhf5IicaLuvO6ixhxLKT1YNC3Higuvu+x5yAftY4c=
Subject key identifier: 79:E3:0A:00:EB:26:57:A6:FB:C9:24:A2:34:20:6E:E0:80:0F:47:D4
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2C63D47A5247B8EB0C9EBE590CC66A21EE61EE21
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401558.roa
Signing time: Tue 21 Jan 2025 04:09:57 +0000
ROA not before: Tue 21 Jan 2025 04:04:57 +0000
ROA not after: Tue 20 Jan 2026 04:09:57 +0000
asID: 401558
IP address blocks: 104.234.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 00:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:63:d4:7a:52:47:b8:eb:0c:9e:be:59:0c:c6:6a:21:ee:61:ee:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 21 04:04:57 2025 GMT
Not After : Jan 20 04:09:57 2026 GMT
Subject: CN=79E30A00EB2657A6FBC924A234206EE0800F47D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:e6:aa:fb:43:50:2c:74:96:50:89:1b:98:
27:b3:e6:8b:ac:10:c8:d8:77:53:46:33:e4:a8:98:
b3:d0:0f:07:4a:d0:8d:4e:74:56:dd:7f:01:ee:7c:
90:ff:3e:a7:ff:58:ed:eb:04:8f:ed:cc:b0:53:dd:
2e:94:2d:cf:1e:51:c3:76:63:81:b7:1d:ae:ab:a0:
f4:28:9f:b2:85:71:f9:45:1b:dd:d5:60:40:6c:77:
f3:d7:bf:d6:fd:c5:c7:ff:dc:1c:93:c0:2d:d4:ad:
45:b1:5f:87:a7:85:42:22:4f:3a:68:c8:24:23:56:
8b:ae:7c:f2:ec:84:d9:49:b1:eb:aa:0a:3f:b6:34:
de:38:4f:6b:fa:12:b6:20:33:b5:a5:7f:4d:2e:0c:
e8:90:f1:a6:93:2d:df:40:10:e4:cc:35:ca:5b:7f:
55:7f:d6:9f:73:36:0e:31:f6:26:27:2e:60:60:de:
db:40:c5:ea:ec:58:b1:f2:31:bc:3b:5e:c5:ff:1a:
45:a2:85:dd:dc:7e:53:fa:c6:84:65:a3:6c:98:16:
7a:27:ba:3e:aa:a8:d9:38:fc:96:7c:12:c7:a0:f3:
3e:12:07:aa:9e:ed:f8:b9:6c:5e:be:fc:ca:19:9b:
2e:0e:31:0e:12:22:d2:71:9f:bf:b3:a4:d3:1e:87:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E3:0A:00:EB:26:57:A6:FB:C9:24:A2:34:20:6E:E0:80:0F:47:D4
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401558.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.237.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8a:b4:da:ac:70:ab:c4:16:c0:d4:22:04:60:7c:df:b5:b9:
c1:0f:43:b0:cd:5e:89:de:86:25:71:11:bb:82:ea:99:09:56:
d6:a5:48:ad:bf:6d:1e:15:a3:9d:87:1d:41:e2:fa:03:98:33:
c3:55:1c:69:81:08:59:97:29:75:c7:9a:80:5f:b1:be:59:ac:
03:ef:2e:67:66:57:7f:33:52:d7:dd:f6:e4:55:8e:26:a2:24:
01:d5:bc:2f:b4:26:6b:c3:6d:e3:ea:dd:5c:79:46:7c:4e:e3:
7e:ad:0f:77:5c:05:82:f4:ed:ff:89:18:d3:31:b0:ae:5c:f8:
7e:58:b7:51:b4:32:00:36:c3:de:0d:b6:d5:16:09:7d:30:1e:
b0:67:61:4d:8b:b7:b9:1b:3c:83:f2:8f:10:25:b9:f2:61:37:
1e:36:64:0d:e9:74:d1:cd:bd:af:4b:2f:de:96:20:e4:5b:9e:
57:89:cc:ee:d6:f5:0e:64:e2:e7:4a:9a:39:0e:9f:77:9b:4c:
ad:db:1d:d1:4a:3b:de:f4:b6:5e:f2:21:13:a9:dd:78:2d:f2:
ff:e8:62:46:9b:ce:93:e4:dc:20:92:2e:ea:a0:b9:4f:c3:6d:
c4:df:7a:9f:e5:02:0f:75:7d:38:40:a2:8c:20:22:e7:14:32:
7b:d0:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:02 2025 by rpki-client