Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59253.roa
File: AS59253.roa (raw, json)
Hash identifier: MZpWCztID7l3cr5tVe57QiE6kahH1n8FNEuuk2upvD8=
Subject key identifier: D2:FF:29:51:9C:11:79:6A:37:3F:D6:B2:75:91:05:59:33:94:E8:2B
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2E3D20E86813F98BA97481B15EACE53D74D2D096
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59253.roa
Signing time: Tue 10 Oct 2023 23:48:11 +0000
ROA not before: Tue 10 Oct 2023 23:43:11 +0000
ROA not after: Tue 08 Oct 2024 23:48:11 +0000
asID: 59253
IP address blocks: 104.234.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3d:20:e8:68:13:f9:8b:a9:74:81:b1:5e:ac:e5:3d:74:d2:d0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 10 23:43:11 2023 GMT
Not After : Oct 8 23:48:11 2024 GMT
Subject: CN=D2FF29519C11796A373FD6B2759105593394E82B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:39:cf:c9:79:38:9d:ce:89:cd:da:25:94:
76:db:cd:12:74:c1:69:6c:9d:18:7b:01:bd:38:85:
e7:84:8f:27:f6:18:47:21:a5:b2:a5:db:53:9c:58:
36:f1:68:20:ca:67:1e:e3:82:b8:39:a9:1c:d5:51:
82:17:d9:a6:2f:cb:4b:8e:50:ac:84:ba:d9:91:28:
80:d3:8f:61:c4:21:2d:7f:12:96:53:39:34:ba:c0:
59:81:91:a4:49:e2:88:69:94:b4:76:4b:b4:3f:ff:
f2:34:d1:f4:8b:ca:36:24:1a:4a:57:03:3a:ec:d2:
14:54:cc:64:f1:44:72:e1:9c:ff:0d:9e:73:87:b2:
cd:1f:6a:b4:a6:73:27:37:cf:20:ab:3f:4e:eb:b5:
26:b8:39:ee:34:68:41:77:05:9b:db:97:0c:64:48:
a0:e4:95:0f:35:47:28:c3:eb:88:9d:09:f0:55:13:
4c:15:36:f4:11:76:9e:8b:5f:26:b1:17:33:6f:54:
fa:4e:ea:4a:18:46:b5:e6:51:1e:33:a5:fb:ff:86:
96:e2:2b:10:ad:16:ef:56:0f:1b:e8:18:8f:30:ab:
72:68:86:6d:96:e6:bd:f4:4c:58:e1:c3:0a:75:e5:
28:17:c1:27:6d:6d:22:45:e3:69:35:1a:7b:0b:79:
b6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FF:29:51:9C:11:79:6A:37:3F:D6:B2:75:91:05:59:33:94:E8:2B
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.199.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b1:b1:fe:ab:5a:5c:eb:c3:a2:f6:39:e3:be:25:6b:51:5b:
7c:6b:5f:ac:da:ee:69:42:8b:f5:37:1a:04:a1:60:b6:da:de:
ee:6e:03:90:8b:7a:56:04:91:3c:51:94:c2:27:e5:33:61:e7:
d2:7f:89:4d:a1:74:c4:9b:aa:c0:68:12:1b:63:b0:f4:b8:c0:
47:bc:3e:4b:f9:b8:3a:9a:da:bd:97:26:3a:73:1b:17:d4:4a:
bf:a6:ea:6c:bb:d1:61:23:5a:3f:08:c6:c7:fc:03:46:8a:d1:
d0:2d:7c:0a:76:1c:a0:08:2f:45:63:3b:cc:0f:d5:3e:ba:4a:
62:45:e6:78:e1:50:b7:de:e9:72:71:37:35:1a:1b:41:8e:80:
21:11:ce:b2:c2:f5:59:39:c7:45:e7:0a:7d:eb:b6:cd:09:9c:
9a:51:20:89:a0:10:13:c4:7b:a4:09:7d:f3:ff:7b:18:f0:03:
ef:6f:a0:a5:b2:5b:d0:28:8a:d7:5c:7f:4f:0a:61:df:6a:f2:
d5:f9:c0:d2:e4:4e:5a:56:7f:db:9d:96:0e:cd:76:c9:ae:e8:
dc:a7:55:f1:1b:a3:c3:a9:db:bd:bf:85:ef:6b:19:ea:e0:3c:
c4:ba:3b:c3:78:61:a3:99:93:7c:3a:06:f0:c4:a6:1f:69:80:
14:61:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org