Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
File: AS61302.roa (raw, json)
Hash identifier: vEfuB647hL9fxZ+5vl8woiQ3DUQ82CvrXd+tPaJEK/E=
Subject key identifier: 8F:BF:23:E7:8D:61:15:7A:A8:A1:9E:13:DE:4B:4B:99:4C:21:A2:66
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 22D76FA10189CD6B234CD9A2A1FCD7E3D294EFB9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
Signing time: Fri 03 Mar 2023 16:00:27 +0000
ROA not before: Fri 03 Mar 2023 15:55:27 +0000
ROA not after: Fri 01 Mar 2024 16:00:27 +0000
asID: 61302
IP address blocks: 104.234.12.0/24 maxlen: 24
104.234.48.0/24 maxlen: 24
104.234.125.0/24 maxlen: 24
104.234.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d7:6f:a1:01:89:cd:6b:23:4c:d9:a2:a1:fc:d7:e3:d2:94:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 3 15:55:27 2023 GMT
Not After : Mar 1 16:00:27 2024 GMT
Subject: CN=8FBF23E78D61157AA8A19E13DE4B4B994C21A266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:84:49:17:f0:95:ae:a5:c8:18:d2:94:b6:
98:d2:24:1e:89:19:35:d0:a4:7a:5c:c2:5e:a9:07:
fd:7d:96:2f:af:5c:48:e3:e7:9a:ca:05:ff:cb:94:
47:fe:27:26:74:76:ac:3b:09:b3:e8:1a:ca:4d:59:
de:fc:78:2c:2e:0e:5c:8a:fd:26:06:c6:cc:ee:db:
9b:c3:47:f8:92:7c:11:22:dc:c6:59:9e:6b:5f:5d:
8e:42:c0:9d:e3:67:b7:2a:7f:53:cb:27:84:5a:ee:
e5:8f:d3:f9:f4:81:97:6b:34:0f:99:e2:83:59:c7:
c8:9f:b4:1e:ea:a2:eb:f5:64:df:fa:4c:33:11:39:
1c:9f:88:e9:f2:04:b8:28:83:2d:82:1b:2e:fc:68:
8f:36:7b:76:c1:af:bf:79:e0:38:c5:45:eb:74:af:
9c:44:66:65:9a:2f:07:d4:af:bc:3a:1f:a4:17:22:
79:b3:46:4e:95:dc:c7:6a:c4:68:18:c0:28:c0:fc:
d3:56:57:e8:d2:40:7c:fe:87:f3:d3:76:cf:00:a4:
77:4c:87:ef:12:cc:df:d4:92:39:57:28:4f:ba:c1:
04:45:f4:04:40:13:94:0e:e3:15:21:79:34:51:62:
9b:51:43:a4:53:dd:0d:6a:db:cd:15:b5:2a:e6:58:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BF:23:E7:8D:61:15:7A:A8:A1:9E:13:DE:4B:4B:99:4C:21:A2:66
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.12.0/24
104.234.48.0/24
104.234.125.0/24
104.234.127.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e0:e6:0f:13:2b:fd:d4:92:64:ec:00:d2:28:08:17:4f:88:
bc:14:85:d9:2c:7a:d0:01:b6:de:5b:96:2c:bd:44:2d:2e:8d:
b1:a9:69:00:b2:c0:64:15:c8:ba:b3:e3:19:f8:c6:02:33:f2:
17:98:b3:0f:be:99:f1:ab:f6:9d:e9:2b:01:b2:4c:c8:ef:f0:
31:91:d7:85:d5:8a:fa:3e:a8:a0:e4:73:73:33:4e:b5:e2:00:
9e:12:4a:72:ae:ab:7f:90:81:21:2f:bf:90:1a:ae:68:6d:5d:
80:b6:7d:ce:8c:30:e0:c1:dc:3d:7d:5d:da:74:08:32:46:2f:
d3:9d:37:83:57:50:32:f6:31:ec:51:80:22:2d:80:84:0d:fc:
32:c6:ce:32:c9:af:75:44:34:9c:10:95:5c:7e:1f:78:89:e9:
ee:4b:f6:ec:b5:c3:f2:d2:fa:79:ae:76:1b:71:db:fd:4c:59:
1b:cf:86:f1:b6:d4:37:b1:a0:fa:15:0f:af:4c:79:a3:e4:75:
41:e4:b5:b8:41:98:a6:fa:28:a8:a5:7b:f4:82:ec:eb:df:07:
5e:e6:42:25:f8:ed:66:5d:28:a1:95:0c:ec:9b:40:a7:be:ce:
ec:02:84:c9:01:99:52:31:21:e0:fd:ea:00:8a:2f:ae:04:98:
5c:25:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-fra.rpki-client.org