Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53397.roa
File: AS53397.roa (raw, json)
Hash identifier: jt6ntTM8MBw4r5KKkb3SxpnuiAD9JaQ43BqLgJiUQww=
Subject key identifier: 73:C7:1A:CE:C0:25:A9:B9:6E:20:D6:1D:F1:E3:F5:73:9F:54:8C:F3
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 42408C4BFE1D797F9CF4D2C786C25D2037BF7C6E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53397.roa
Signing time: Wed 20 Dec 2023 18:01:11 +0000
ROA not before: Wed 20 Dec 2023 17:56:11 +0000
ROA not after: Wed 18 Dec 2024 18:01:11 +0000
asID: 53397
IP address blocks: 104.234.26.0/24 maxlen: 24
104.234.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 00:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:40:8c:4b:fe:1d:79:7f:9c:f4:d2:c7:86:c2:5d:20:37:bf:7c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Dec 20 17:56:11 2023 GMT
Not After : Dec 18 18:01:11 2024 GMT
Subject: CN=73C71ACEC025A9B96E20D61DF1E3F5739F548CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:57:35:41:da:00:5d:f9:87:d1:5f:32:30:
6c:40:25:fb:e5:e2:3e:45:3d:34:52:b4:e8:65:c6:
68:6e:6e:b5:9c:f1:90:66:8b:40:ca:fb:4b:cd:41:
8e:6d:8a:d8:4f:4a:4a:b6:79:06:e8:42:63:9f:4e:
f4:81:88:b9:7c:8e:d6:05:b8:09:72:ca:28:86:f4:
2e:ef:c9:66:be:98:7d:d6:94:74:f7:1b:21:d9:16:
79:a3:f7:45:69:25:23:33:af:2f:d3:eb:46:06:dd:
ba:00:53:96:a8:b8:7a:bf:f9:98:ac:b9:f9:a1:eb:
ed:32:6d:71:4f:2b:8c:2c:64:0a:31:4d:d6:11:33:
82:bb:ec:d7:f1:1b:d4:4d:93:0e:a9:bb:73:43:d3:
76:40:0d:01:0c:74:7c:c8:59:2a:6e:9c:a7:95:bb:
e4:83:65:68:71:cf:13:5c:5e:b3:b9:46:73:5b:03:
ce:f3:33:0f:62:fb:35:ec:d4:f1:a6:f6:6e:d7:46:
da:eb:3b:47:51:91:51:ef:fa:b7:e4:db:d3:f4:c5:
2a:be:02:e7:0a:94:78:55:c6:45:85:1b:b4:cf:5a:
92:57:54:ee:ec:cf:a2:ca:16:13:a3:42:0b:6d:05:
02:57:0b:91:5f:b5:86:96:90:6d:b0:cb:db:49:4d:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:1A:CE:C0:25:A9:B9:6E:20:D6:1D:F1:E3:F5:73:9F:54:8C:F3
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53397.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.26.0/24
104.234.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d6:3c:c6:cc:43:36:ab:0c:68:f0:76:c7:19:41:56:1a:9b:
a1:01:c2:00:cc:39:8c:02:15:80:ed:cd:c0:af:1a:19:e4:c8:
64:a1:12:08:c4:84:c2:7f:b2:47:49:88:65:99:26:8c:4a:93:
b4:12:8a:38:46:7c:35:84:61:3c:42:d4:71:6a:be:f6:ba:41:
76:9b:88:4c:92:1d:57:f4:92:d5:9c:53:5f:50:a8:74:0f:1a:
76:2f:01:fa:c8:1d:e9:4a:15:1d:03:58:84:f7:26:2a:85:b5:
bf:84:da:fb:1b:12:10:8e:24:c6:de:30:ad:85:58:cf:d8:85:
7c:97:a1:bd:40:2d:b1:6a:63:62:c6:69:58:f8:3f:61:ab:bb:
6b:77:9c:b7:32:15:6e:9a:f3:54:09:21:e8:4c:87:3c:da:2d:
04:7e:4f:3e:b5:25:3b:f4:6c:a2:12:bc:fd:8f:c6:25:23:35:
af:c5:53:fb:57:e6:68:59:55:a3:b5:60:60:54:bb:46:af:56:
d3:3b:5d:ee:09:c8:44:c6:32:34:d5:a1:ae:90:80:43:49:11:
2f:58:af:07:55:2d:ed:7f:57:fa:36:f3:8d:1c:cc:9b:ee:08:
03:f7:87:e1:34:bf:ce:b5:0d:ed:37:c6:03:4e:65:fd:c7:d8:
eb:7c:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 02:21:58 2024 by rpki-client on console-ams.rpki-client.org