Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54009.roa
File: AS54009.roa (raw, json)
Hash identifier: ZeH9Bb+/PyZifjD5BlQIlbm4Rqqh92gOyH3SngdGdOc=
Subject key identifier: E7:9F:10:19:54:24:25:32:04:9D:B9:EE:8A:FC:72:4E:51:58:9C:CC
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1B5C26DE3173282AE6AC6CF537F2A755DEBDE277
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54009.roa
Signing time: Wed 08 Mar 2023 13:23:08 +0000
ROA not before: Wed 08 Mar 2023 13:18:08 +0000
ROA not after: Wed 06 Mar 2024 13:23:08 +0000
asID: 54009
IP address blocks: 104.234.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5c:26:de:31:73:28:2a:e6:ac:6c:f5:37:f2:a7:55:de:bd:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 8 13:18:08 2023 GMT
Not After : Mar 6 13:23:08 2024 GMT
Subject: CN=E79F101954242532049DB9EE8AFC724E51589CCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:43:62:a0:c1:b9:63:24:60:81:d1:37:ec:
89:ff:4e:aa:9b:0e:96:dd:a8:e3:3c:30:20:82:09:
2d:eb:ba:5f:06:bf:22:9e:f7:19:e0:65:d4:f4:94:
8e:e9:f8:8b:29:f0:23:c4:25:59:d4:e6:58:1f:3e:
bf:ce:aa:e0:47:f3:3e:ee:fa:aa:05:49:f2:76:a0:
e4:75:35:4c:c8:39:e9:d1:65:01:bd:fa:3e:eb:26:
e2:08:d9:84:36:0c:45:7f:dd:16:04:af:df:f7:c4:
cf:86:b6:74:06:21:b7:5f:fc:44:69:d5:ef:96:8f:
80:79:c4:30:e3:6e:41:41:68:65:fd:95:c0:a7:0a:
cb:36:b7:1d:d0:8b:14:90:2e:db:73:b2:13:f6:a0:
b0:60:f5:55:be:bd:93:f2:a2:10:d9:1a:ea:01:43:
35:6b:6a:09:01:d6:08:cf:b3:a5:96:32:e8:e8:70:
bc:c6:c6:78:03:71:e8:9e:f8:dc:20:f5:f6:21:d2:
ca:68:7a:f7:d5:3a:1e:c2:ff:6b:55:8a:fa:fd:54:
45:ac:47:d6:94:90:6f:7e:21:b8:d4:a3:f9:a0:7b:
7d:01:14:d0:35:ee:6f:a5:a1:86:b6:25:f9:02:42:
ab:28:90:c3:41:d6:65:bf:c3:b4:4d:16:a5:1c:4e:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9F:10:19:54:24:25:32:04:9D:B9:EE:8A:FC:72:4E:51:58:9C:CC
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8b:5d:4f:0c:f7:93:c9:68:e4:e2:99:18:57:f1:74:d9:ad:
f7:fd:20:f8:96:33:ba:22:94:1b:16:1c:94:d4:87:0b:70:b8:
66:cd:b7:8d:43:e1:c1:1f:55:0a:d1:f9:7d:91:7c:6c:32:e4:
a8:a2:c8:59:19:d0:ce:70:cc:ea:4d:12:cd:e0:7c:21:da:c4:
fb:ad:6e:7a:4a:8b:e6:51:e0:37:64:d4:73:70:de:de:f2:2a:
ec:34:3e:23:3f:4b:32:9b:1f:49:26:26:82:b1:77:09:d6:19:
23:d4:07:df:02:36:7c:70:1d:f1:ef:c3:5e:23:82:1f:a6:19:
ed:28:67:3e:71:25:ff:07:3e:9b:b2:62:6f:23:6e:08:11:65:
7a:31:ba:49:e7:dc:9c:70:6f:62:b7:40:ac:03:9a:7a:e9:96:
58:c4:c2:bc:c4:88:b0:ae:45:e6:2f:fe:e2:9e:e8:92:9f:ec:
23:dc:d6:ff:89:88:3f:1a:87:fd:41:3c:6a:02:05:7b:83:36:
14:ce:d5:61:6b:32:38:c0:03:7e:73:c4:70:f1:96:ff:97:06:
ad:d2:94:62:ab:17:f7:7e:f9:72:9d:99:09:da:2a:91:31:8c:
8c:e9:4e:52:16:b6:f1:8a:44:f7:33:11:91:a3:28:52:c2:06:
b6:3d:eb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org