Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS50167.roa
File: AS50167.roa (raw, json)
Hash identifier: PUceEMdof4bUS2RoLzqTb42fV62X9cYMJhxGfv2Dcsg=
Subject key identifier: 2D:40:A3:9C:87:E6:2E:1F:7E:78:AC:5E:E9:E7:A0:EE:AA:A2:B8:C6
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2BCEC462F38DC28F6945580EC8426EFA04123D72
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS50167.roa
Signing time: Fri 07 Jul 2023 00:00:09 +0000
ROA not before: Thu 06 Jul 2023 23:55:09 +0000
ROA not after: Fri 05 Jul 2024 00:00:09 +0000
asID: 50167
IP address blocks: 104.234.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ce:c4:62:f3:8d:c2:8f:69:45:58:0e:c8:42:6e:fa:04:12:3d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 6 23:55:09 2023 GMT
Not After : Jul 5 00:00:09 2024 GMT
Subject: CN=2D40A39C87E62E1F7E78AC5EE9E7A0EEAAA2B8C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:ea:33:30:e0:b2:d4:52:5b:69:43:1d:1d:
2c:4c:b8:34:53:20:01:73:c7:78:50:dc:81:e7:b0:
37:bb:97:ff:0b:be:84:f5:4b:26:68:5b:12:7b:fc:
11:12:c0:a5:a5:4d:66:d4:e5:17:23:cc:35:27:27:
86:0f:a7:5d:a9:d4:a8:de:ea:be:ec:03:39:63:65:
1a:8e:22:8f:0e:0f:7e:99:10:9d:a3:ea:86:55:c7:
c0:02:d3:91:37:d3:af:e2:1d:97:54:77:4b:5c:21:
a5:81:3d:51:f5:bf:a5:a0:d6:72:96:21:55:1e:31:
37:36:ff:6c:62:58:9f:6b:a0:9b:49:8c:7f:b5:72:
f8:78:9d:0d:2d:0d:2d:13:e8:11:28:6e:75:93:c9:
0a:c6:df:a9:6b:d1:ab:10:e5:1c:24:e6:21:48:3f:
99:41:c3:06:e1:e4:b4:92:2f:ed:b1:96:19:53:87:
38:e2:c9:d4:ce:78:31:fd:e0:aa:04:ab:0c:0f:dc:
c2:52:ec:bc:82:b5:92:ca:d8:2e:29:38:74:40:7e:
0d:43:57:f0:07:29:fd:60:ef:ae:ca:c1:2b:78:60:
cf:90:64:71:13:df:4e:a0:e3:5a:2e:0f:fa:8b:be:
aa:25:86:90:11:98:8b:25:07:ad:f3:66:5b:84:8a:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:40:A3:9C:87:E6:2E:1F:7E:78:AC:5E:E9:E7:A0:EE:AA:A2:B8:C6
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS50167.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.201.0/24
Signature Algorithm: sha256WithRSAEncryption
79:04:1d:a1:45:19:49:4e:63:54:c3:d1:a9:18:45:a9:a1:3e:
81:5b:33:5e:9d:22:58:01:fd:d2:a7:cf:a0:26:2f:d1:8e:f4:
d2:fb:d8:95:36:4c:4f:23:13:df:a7:c1:24:f8:f7:9f:72:31:
23:08:45:83:15:14:20:ce:6a:fb:f1:eb:2b:b2:89:70:b9:77:
b7:df:5e:ac:3d:7d:80:75:14:19:bb:49:97:4a:b7:aa:3a:b0:
a8:ef:90:83:b2:f7:0f:82:5e:fe:2a:6d:65:7e:77:97:12:77:
41:f0:09:b7:42:78:9a:e4:a4:58:e6:81:a3:42:78:77:88:cf:
c1:27:69:d5:40:84:5d:6d:f3:d5:82:11:5e:89:28:60:d9:d0:
c7:31:e3:06:e2:a8:af:dc:2d:5c:95:3c:60:fd:d6:37:22:37:
53:4c:60:b7:85:92:f7:01:70:7a:0a:49:27:a7:01:41:8e:22:
1e:fc:c6:5d:f2:da:0c:e7:1a:30:14:01:5d:a6:29:d0:db:ce:
55:99:78:65:91:bf:8b:22:3e:ad:58:33:1d:81:48:5d:19:33:
f2:eb:55:c2:3a:52:16:dd:23:77:d2:dd:30:97:55:9f:60:8d:
85:51:7c:85:10:7b:31:c7:d8:bf:93:a5:b0:9a:a2:d6:d4:36:
fc:db:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 03:15:18 2024 by rpki-client on console-ams.rpki-client.org