Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4515.roa
File: AS4515.roa (raw, json)
Hash identifier: eXftcTlngy7D04TFQ8E36pVZwVRH5BXANJW0FlwbxHE=
Subject key identifier: 5D:9C:09:98:55:BB:60:33:34:E9:17:02:97:6E:53:C2:C7:7A:78:02
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 03393B6238D4EEBE41C46B5C5A6535451B5B5CF4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4515.roa
Signing time: Sun 26 Jan 2025 14:39:21 +0000
ROA not before: Sun 26 Jan 2025 14:34:21 +0000
ROA not after: Sun 25 Jan 2026 14:39:21 +0000
asID: 4515
IP address blocks: 104.234.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:39:3b:62:38:d4:ee:be:41:c4:6b:5c:5a:65:35:45:1b:5b:5c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 26 14:34:21 2025 GMT
Not After : Jan 25 14:39:21 2026 GMT
Subject: CN=5D9C099855BB603334E91702976E53C2C77A7802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:80:49:5e:17:3a:13:5a:a2:cb:51:a8:0a:
3b:92:75:a6:29:73:d9:6f:30:5b:b8:49:55:6f:ad:
0f:50:ef:7f:4a:53:36:db:7e:7f:1f:ee:6c:6e:3a:
7c:5b:15:30:7e:5d:e1:aa:6b:44:ff:4a:50:42:0e:
e0:40:e2:cb:c0:1a:9f:a6:1d:ed:bc:35:6d:3e:95:
d8:c0:5c:82:41:06:2c:47:4e:16:bd:97:70:46:0d:
7e:d3:e2:63:88:92:67:60:ef:49:fc:98:cd:26:3a:
17:96:fb:fc:25:ec:2b:c9:a0:1b:ba:6d:23:6e:f0:
a9:cc:fe:1e:ab:c6:95:e9:66:87:1d:a6:33:04:e1:
d4:be:18:39:bb:b6:5b:a4:62:dc:a4:85:59:4b:a6:
37:c6:d9:7c:c3:cc:ee:49:8c:e0:98:da:c6:6b:41:
c3:93:08:46:e4:17:03:90:f9:dc:1e:f1:b3:1f:78:
a4:0a:67:b2:2e:b2:bf:8e:32:5c:bb:53:69:f4:15:
29:a9:5e:3d:8b:97:68:bb:77:4a:04:ae:a5:20:fc:
c9:87:be:58:85:f7:6b:e9:e5:0b:03:1a:78:14:ad:
0c:d8:90:74:8f:f0:ee:fa:9d:96:bf:76:37:4d:7b:
6c:2a:92:51:b3:6d:e6:54:7f:d3:fb:d7:77:11:a3:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:09:98:55:BB:60:33:34:E9:17:02:97:6E:53:C2:C7:7A:78:02
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.236.0/24
Signature Algorithm: sha256WithRSAEncryption
96:70:9e:60:bd:5c:06:28:60:c7:95:78:9c:e8:b5:d0:7d:a9:
53:b6:4a:5c:8b:da:e5:9e:12:e6:9d:4e:55:06:9b:83:af:70:
99:5c:23:d0:57:bc:aa:44:59:76:23:16:65:5d:d4:ea:98:db:
ef:d0:91:37:a1:7c:4f:8b:29:c9:ad:cf:10:10:e4:e6:19:e1:
8b:b1:08:23:0c:12:91:19:32:e0:8d:4c:b5:22:b1:f8:3b:24:
c8:85:9c:d9:41:13:5c:af:eb:42:00:46:dc:8a:db:13:f1:2f:
bd:46:e5:fa:e1:cb:e6:d0:e9:85:41:54:73:95:50:0b:f6:ff:
de:ae:d9:6e:73:61:a6:ff:ff:09:fc:3a:c9:f4:c2:95:dd:52:
4b:a0:8b:c1:02:1f:fe:24:65:64:32:f8:d3:dd:7f:fc:36:76:
90:2d:ad:39:00:f1:2e:fb:08:be:55:fa:25:b2:15:e3:2b:47:
8b:a5:71:64:19:f6:52:6f:a6:32:d1:fb:a9:70:dc:1d:8f:8e:
fc:58:dd:d1:c0:f2:23:f8:31:2a:29:87:20:56:5a:8c:6b:b6:
54:36:65:bc:e2:12:bd:8c:ec:8b:66:de:52:74:c5:3b:c8:2b:
db:89:bd:ed:b3:ad:00:f3:61:22:9c:05:62:5c:72:f8:b9:78:
7d:da:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:46 2025 by rpki-client