Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59895.roa
File: AS59895.roa (raw, json)
Hash identifier: Tj3sCTZEB6sRuoXC65uQA7fAz+eyhUWqnyjX8qtPn6Q=
Subject key identifier: DA:31:EB:ED:08:34:0B:C2:AB:47:53:A6:E0:5A:C5:CB:6E:1F:5C:1C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4D43FA4FD4380BA05660984A1FF2D5592F8C8E41
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59895.roa
Signing time: Thu 21 Mar 2024 00:00:04 +0000
ROA not before: Wed 20 Mar 2024 23:55:04 +0000
ROA not after: Thu 20 Mar 2025 00:00:04 +0000
asID: 59895
IP address blocks: 104.234.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:43:fa:4f:d4:38:0b:a0:56:60:98:4a:1f:f2:d5:59:2f:8c:8e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 20 23:55:04 2024 GMT
Not After : Mar 20 00:00:04 2025 GMT
Subject: CN=DA31EBED08340BC2AB4753A6E05AC5CB6E1F5C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:be:4d:b4:ad:ac:ca:f1:23:7d:de:02:8e:
2d:ec:1b:dd:eb:89:65:04:75:56:50:85:8f:f0:27:
21:4f:50:95:54:5c:97:ad:72:6a:fe:fd:d4:a4:51:
ce:e9:cc:d8:57:6e:83:e3:0f:3e:32:26:be:34:b7:
90:96:3e:67:ec:85:64:4a:bc:75:82:5f:fd:c2:84:
97:51:c8:e4:c5:97:08:79:0d:4e:0c:1a:07:c4:67:
5a:ea:95:ac:82:c0:99:60:c3:dc:c5:b3:9f:6b:a3:
a2:eb:aa:f9:f2:06:c9:9b:4f:ff:ff:be:5c:63:f9:
fc:0c:d9:65:14:11:cc:d4:47:80:50:a0:9a:3f:82:
31:56:44:80:cf:3c:6e:90:1d:d4:f4:3b:a5:51:e3:
bd:72:d9:c1:27:db:fc:1d:cf:8e:a2:fb:08:86:16:
ae:29:13:ab:a9:fa:d2:69:f5:31:d8:bf:52:90:08:
1c:87:8c:b5:a1:c5:70:00:70:31:13:fd:98:f7:32:
8c:fe:b0:85:73:9b:26:73:4d:af:ac:b3:56:1a:28:
93:1a:2b:14:1a:ef:dc:82:30:a1:4e:0b:7b:c6:88:
cc:25:e5:2a:19:47:f2:72:01:34:93:04:5e:97:31:
c4:ff:db:15:cb:f9:53:81:15:fe:4c:7d:09:b5:eb:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:EB:ED:08:34:0B:C2:AB:47:53:A6:E0:5A:C5:CB:6E:1F:5C:1C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS59895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9e:e6:fd:e4:2f:a0:17:46:04:66:be:c6:3c:9a:bb:cc:40:
9b:d3:1a:5d:a0:33:ec:a4:30:46:13:eb:38:e1:df:77:74:21:
19:ba:84:f9:0a:02:dc:70:7e:6b:d5:68:ee:3e:10:e5:07:34:
92:45:d0:c5:00:46:fc:35:18:60:34:6e:6b:07:7e:34:c9:e4:
69:22:e6:69:fc:45:3f:0b:50:9b:9a:b6:da:20:cd:b0:bb:42:
7f:9b:a2:d7:13:2c:e6:67:3f:0c:c5:9b:e6:5f:ce:86:73:2d:
4c:00:59:24:7c:07:cf:61:d0:0f:a6:0d:40:99:e3:30:e2:56:
e9:26:da:a0:20:76:16:7a:8c:0a:6f:69:86:6c:8a:30:ce:08:
1e:11:07:55:6f:23:cd:74:1e:ad:85:ed:ad:27:7b:ba:78:99:
9c:d6:25:52:dc:24:ab:65:65:c4:40:ef:b5:86:46:3a:eb:1a:
50:07:98:61:a1:2a:43:6d:e6:1f:7d:a5:c0:a7:67:5f:c3:74:
6a:e9:23:6b:21:26:3b:95:c3:1c:8e:f6:aa:e8:07:8f:0e:00:
4c:04:bb:1f:23:11:e1:f9:e5:fd:e6:5c:a6:79:2e:c1:50:d4:
12:4b:1e:3f:e0:20:e0:04:57:4c:80:74:f8:77:98:3f:dc:17:
a8:45:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 01:22:47 2024 by rpki-client on console-fra.rpki-client.org