Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55720.roa
File: AS55720.roa (raw, json)
Hash identifier: pZmxg+HpLnpYNm+3SP/QAgSVz3jySeaDZjQOh8lYSi4=
Subject key identifier: 40:19:05:13:D4:3C:43:66:19:43:5F:26:93:23:7F:95:AE:CF:0F:79
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7AAEAA899D3F4946F8846112BEAE72C63A1DA94F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55720.roa
Signing time: Wed 15 Feb 2023 11:06:17 +0000
ROA not before: Wed 15 Feb 2023 11:01:17 +0000
ROA not after: Wed 14 Feb 2024 11:06:17 +0000
asID: 55720
IP address blocks: 104.234.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ae:aa:89:9d:3f:49:46:f8:84:61:12:be:ae:72:c6:3a:1d:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 15 11:01:17 2023 GMT
Not After : Feb 14 11:06:17 2024 GMT
Subject: CN=40190513D43C436619435F2693237F95AECF0F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:73:4b:d9:53:26:15:75:38:9b:e6:04:db:
0f:11:6e:78:24:f2:8c:bf:5b:10:11:7a:37:0c:e1:
1d:30:97:ff:69:5b:e5:d5:b6:f2:7d:16:61:3c:5a:
c8:3d:4f:cb:9b:73:2b:c8:1e:d4:12:c7:14:e7:89:
d0:c8:78:49:07:4c:63:1c:8d:f3:57:21:aa:30:67:
e2:4f:55:0e:ce:14:24:4b:13:f5:9c:b0:33:4b:e8:
c2:6b:75:e9:4f:fa:5a:dc:d4:8e:2c:8d:54:12:af:
15:f5:e8:c9:56:34:5e:84:d8:dd:d7:f4:b5:b4:23:
06:9b:12:2e:95:dc:62:a5:2b:a7:b1:8e:97:56:fc:
62:d3:6c:d8:af:48:39:19:0b:71:01:b7:43:c7:9a:
84:8b:59:ec:35:83:23:b7:6b:c2:51:87:9f:ef:bb:
48:7f:e5:9e:15:6e:6c:33:b4:0f:a4:07:d9:2b:c2:
2e:50:11:10:2e:28:ef:39:20:9e:cc:ba:46:08:3a:
58:94:d3:06:ed:50:86:04:d5:56:8e:72:77:bb:52:
62:a5:75:c4:f2:c3:7e:73:24:1b:80:dd:ac:16:68:
42:d4:f8:ee:ed:18:9b:60:7b:2b:cf:a9:a4:a2:3e:
40:6f:1a:10:9d:15:f8:64:f8:e5:fd:00:24:17:1f:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:05:13:D4:3C:43:66:19:43:5F:26:93:23:7F:95:AE:CF:0F:79
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS55720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.68.0/24
Signature Algorithm: sha256WithRSAEncryption
65:94:93:84:a3:95:02:8a:e1:f6:3a:b3:4a:f7:91:78:75:ea:
a7:f9:96:0b:d1:52:d9:84:14:0e:a5:39:ff:e8:c5:78:44:62:
bc:21:62:e6:cd:b7:12:db:d9:84:15:e8:ce:fa:b8:23:64:61:
1a:b6:0c:ca:03:9b:60:af:05:6a:49:e7:e1:a8:c6:38:55:4d:
be:8d:c2:88:7b:8c:42:dd:53:47:fd:a1:39:c5:c7:a9:1e:73:
15:14:11:67:9e:02:83:f8:2d:cc:5e:83:24:21:b8:d6:30:dc:
69:09:8b:a7:22:d4:1b:7e:40:a8:6d:3d:2a:98:1e:36:84:d1:
cc:c2:f8:c2:4b:4c:9d:94:9f:b2:0c:58:f7:a9:b6:db:60:7f:
c6:ec:aa:c4:20:bc:c6:86:6f:53:20:1e:95:86:93:95:30:40:
3b:e9:da:b7:5c:34:0a:7e:a0:28:c4:e7:f0:66:e0:0f:ee:9b:
10:ea:76:66:cc:72:44:1e:9b:d1:c4:58:a9:3b:09:45:f6:f0:
6b:cf:19:b4:d8:83:f3:e7:6f:c3:c3:a9:09:67:47:29:fd:c5:
8b:8c:4e:78:30:82:10:07:1f:92:12:74:4b:3d:5b:7c:6a:a1:
2e:23:12:00:60:e1:08:3c:88:52:16:74:18:39:aa:ad:5f:49:
2e:31:e7:4c
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUeq6qiZ0/SUb4hGESvq5yxjodqU8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwMjE1MTEwMTE3WhcNMjQwMjE0MTEwNjE3
WjAzMTEwLwYDVQQDEyg0MDE5MDUxM0Q0M0M0MzY2MTk0MzVGMjY5MzIzN0Y5NUFF
Q0YwRjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXVzS9lTJhV1
OJvmBNsPEW54JPKMv1sQEXo3DOEdMJf/aVvl1bbyfRZhPFrIPU/Lm3MryB7UEscU
54nQyHhJB0xjHI3zVyGqMGfiT1UOzhQkSxP1nLAzS+jCa3XpT/pa3NSOLI1UEq8V
9ejJVjRehNjd1/S1tCMGmxIuldxipSunsY6XVvxi02zYr0g5GQtxAbdDx5qEi1ns
NYMjt2vCUYef77tIf+WeFW5sM7QPpAfZK8IuUBEQLijvOSCezLpGCDpYlNMG7VCG
BNVWjnJ3u1JipXXE8sN+cyQbgN2sFmhC1Pju7RibYHsrz6mkoj5AbxoQnRX4ZPjl
/QAkFx/NQwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFEAZBRPUPENmGUNfJpMjf5Wu
zw95MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzU1NzIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpEMA0GCSqGSIb3DQEBCwUAA4IB
AQBllJOEo5UCiuH2OrNK95F4deqn+ZYL0VLZhBQOpTn/6MV4RGK8IWLmzbcS29mE
FejO+rgjZGEatgzKA5tgrwVqSefhqMY4VU2+jcKIe4xC3VNH/aE5xcepHnMVFBFn
ngKD+C3MXoMkIbjWMNxpCYunItQbfkCobT0qmB42hNHMwvjCS0ydlJ+yDFj3qbbb
YH/G7KrEILzGhm9TIB6VhpOVMEA76dq3XDQKfqAoxOfwZuAP7psQ6nZmzHJEHpvR
xFipOwlF9vBrzxm02IPz52/Dw6kJZ0cp/cWLjE54MIIQBx+SEnRLPVt8aqEuIxIA
YOEIPIhSFnQYOaqtX0kuMedM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-ams.rpki-client.org