Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa
File: AS7203.roa (raw, json)
Hash identifier: OuOqPmp8F5YwSBFdXajkPzAy0+/U4tbF4itTxmGfrCM=
Subject key identifier: 8B:29:07:B6:1B:24:9A:B6:17:19:0A:E1:11:69:70:5A:BA:96:F0:E1
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 620CE1CF33F71C7D4B233F8696EFD779F763FD0F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa
Signing time: Tue 29 Oct 2024 11:49:02 +0000
ROA not before: Tue 29 Oct 2024 11:44:02 +0000
ROA not after: Tue 28 Oct 2025 11:49:02 +0000
asID: 7203
IP address blocks: 104.234.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0c:e1:cf:33:f7:1c:7d:4b:23:3f:86:96:ef:d7:79:f7:63:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 29 11:44:02 2024 GMT
Not After : Oct 28 11:49:02 2025 GMT
Subject: CN=8B2907B61B249AB617190AE11169705ABA96F0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:83:38:9e:23:aa:e5:93:24:7d:c1:fb:a3:
d6:cc:b2:45:b3:e3:15:2c:63:a5:e8:0c:70:5f:a1:
d4:63:78:ee:74:84:10:5a:47:66:3f:94:c8:27:ff:
24:6a:59:02:93:42:4f:75:56:15:a1:69:46:c3:4d:
85:a8:2f:e1:92:11:0d:d5:2b:fa:a3:68:4a:f9:0f:
2e:20:7d:a9:3e:f4:ea:da:ca:6a:61:1c:c5:b1:10:
fe:66:6f:aa:5e:a0:4f:3f:bd:8a:df:fb:a8:e5:a6:
6d:98:11:98:df:ce:a9:0b:9d:e3:93:7c:55:52:23:
77:e4:49:82:f7:55:a1:58:4b:aa:07:1b:98:dd:be:
6a:08:c3:f4:cb:2c:e2:9b:43:47:53:ac:74:16:2e:
41:2d:6c:6a:c0:33:09:87:fa:e1:c6:af:8f:7e:39:
7f:67:13:2d:b1:8c:71:32:c0:f4:40:89:aa:ed:19:
79:d2:7d:40:d2:cb:10:4e:d8:d6:b6:01:d0:c0:5e:
79:da:ab:05:91:da:92:86:9c:6b:79:30:97:56:b2:
2a:97:98:58:ac:f3:19:b7:f9:a5:1f:e1:d9:c0:f2:
ac:e2:bb:14:75:75:3c:24:48:00:77:7d:f1:9a:1e:
54:6a:a6:31:04:a4:a5:45:e4:ac:24:8b:74:e6:8c:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:07:B6:1B:24:9A:B6:17:19:0A:E1:11:69:70:5A:BA:96:F0:E1
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7d:06:02:39:18:41:03:21:b2:4d:8f:27:c4:9d:4d:d5:74:
42:53:24:41:5d:c6:94:86:e7:22:19:5c:85:de:b8:ff:11:45:
d0:c1:24:3c:ff:10:a1:c2:dd:f0:0a:f1:95:d4:15:32:65:df:
d5:1d:ed:81:1e:61:67:98:e1:bb:3e:4a:1c:e8:d5:ae:a8:c6:
ea:3b:2f:48:9e:f4:8d:54:34:27:72:b7:c1:5e:04:86:3a:1e:
bb:01:4d:7c:09:70:4d:0c:ee:15:66:2f:48:e5:b1:2d:44:c6:
72:cd:84:47:7a:00:e9:c7:81:05:78:2b:20:62:0d:a8:65:af:
5a:c8:bb:41:6f:4c:9f:ea:fb:f0:86:d3:8a:5a:84:db:f8:1a:
47:1e:4f:0b:e5:ac:0f:5c:0e:6a:48:53:d0:65:ab:e1:40:e8:
5a:0b:75:09:9c:6b:56:c1:0b:cd:15:97:6f:10:22:72:7e:bb:
d0:4e:c5:df:f8:be:5a:fc:fd:d1:07:6f:05:84:b5:35:a0:89:
af:29:fe:72:d5:a8:45:cb:c1:ee:20:8b:7e:e4:60:ca:00:fa:
47:df:e8:08:7f:94:eb:80:76:d3:f9:66:23:e1:fc:38:42:b9:
6b:17:7c:8e:fa:fb:7f:a5:2b:3f:5d:f2:93:d0:3c:ac:1e:88:
0c:2a:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:29 2025 by rpki-client