Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa
File: AS57043.roa (raw, json)
Hash identifier: /72kDQ44GdvafdQJVCOuoIPhqGAbwuhCY95P2AdKRnE=
Subject key identifier: 24:D3:9D:4C:6D:C5:2C:88:52:A5:DB:F5:09:B1:3A:42:25:30:1D:28
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 64F9FE749B6C10BAA36CA6EB4EEE1FC9BADE23C9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa
Signing time: Fri 05 Apr 2024 13:47:34 +0000
ROA not before: Fri 05 Apr 2024 13:42:34 +0000
ROA not after: Fri 04 Apr 2025 13:47:34 +0000
asID: 57043
IP address blocks: 104.234.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 19:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f9:fe:74:9b:6c:10:ba:a3:6c:a6:eb:4e:ee:1f:c9:ba:de:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 5 13:42:34 2024 GMT
Not After : Apr 4 13:47:34 2025 GMT
Subject: CN=24D39D4C6DC52C8852A5DBF509B13A4225301D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:38:92:4f:f9:96:94:6a:ec:9d:19:b4:12:
9f:2a:f1:07:9c:15:d8:02:03:bc:1a:90:45:d7:f7:
63:de:e2:b1:a3:43:6b:ab:3b:b8:f7:d7:31:e1:c3:
04:16:37:e5:e6:2e:ec:41:9d:b6:0d:6b:75:01:09:
a0:97:2c:b9:18:65:cd:3f:5f:31:24:85:55:2a:98:
63:31:08:ec:47:49:1c:7a:d0:af:86:40:e5:cb:fa:
ac:c4:2c:e5:de:c6:2d:9f:19:e4:25:a8:47:3f:d3:
a0:4c:65:0c:a9:35:2c:80:48:f1:54:b2:a5:ff:76:
79:92:ab:f3:e3:93:55:e7:f7:b0:aa:e9:a0:cb:09:
90:de:85:49:2c:32:55:fe:a7:34:47:7e:22:a6:8e:
f2:9e:e5:22:4b:ea:2c:d4:8a:c9:72:3a:59:91:71:
a6:47:b1:26:b8:32:ee:9c:e3:b1:50:1f:1e:6c:cb:
d0:28:28:81:6d:2f:9b:f9:89:26:59:b0:7b:d0:c6:
b0:23:36:a9:85:1c:8b:68:e2:54:2e:90:4c:11:3b:
84:12:74:46:1d:99:7b:b1:51:9e:02:13:a6:6d:01:
39:31:cc:e5:ab:a0:cb:81:b7:2e:1d:b7:bb:73:2f:
88:10:3c:a7:a1:81:01:50:f4:7d:d3:bf:82:7f:3e:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:9D:4C:6D:C5:2C:88:52:A5:DB:F5:09:B1:3A:42:25:30:1D:28
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS57043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:53:6d:07:17:bd:2d:dc:c6:11:d1:37:6d:60:c8:8d:2f:54:
4e:df:e5:d1:c7:4e:59:0f:e9:83:95:c7:4c:86:5b:00:c5:f8:
c7:13:ba:b6:6d:89:bc:ec:e7:9d:f4:02:9b:85:3b:d3:e2:3a:
88:bd:a4:86:2b:19:1b:25:37:81:71:b4:28:d4:60:76:71:8f:
b6:d1:f2:23:00:68:a8:a1:d6:35:48:e5:8e:0c:2d:5f:2f:5b:
be:86:90:6c:4e:59:b6:62:3d:14:9d:f4:1b:91:2d:bd:55:66:
b3:fc:64:a0:56:32:19:0d:e8:f8:9e:f2:6d:8c:a6:92:7f:67:
18:14:02:45:b1:ae:46:29:9e:1c:6d:2d:40:31:a5:5c:76:8c:
3f:cb:f4:34:aa:14:14:52:11:5a:92:20:07:fc:2b:e1:be:cd:
38:be:ad:75:ce:a9:14:3a:ae:df:10:45:3a:34:03:95:99:fd:
a6:d9:f0:62:28:b4:87:93:b0:fd:2f:ff:b0:01:83:29:ee:b5:
d4:77:b3:b4:7e:0c:68:46:7b:d5:1b:3f:33:2f:d3:2e:70:79:
58:e4:42:71:cc:dc:c8:1c:bb:ab:23:a2:41:05:58:2a:2f:24:
ff:5b:49:46:c8:92:76:b6:2c:a4:30:b7:1b:91:1e:7f:cd:ce:
4e:b0:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 20:35:13 2024 by rpki-client on console-fra.rpki-client.org