Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
File: AS8075.roa (raw, json)
Hash identifier: Gz8sBGnIqst410e1NFsb4evQAR04e343PKW6+XnmwBM=
Subject key identifier: 6F:33:5B:DD:CA:EC:4A:9E:E7:BA:E8:DA:A1:38:AA:51:19:09:FF:B0
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 43E08FF41FC44636CE4160C271E9A44590B3E40B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
Signing time: Tue 02 Apr 2024 10:04:05 +0000
ROA not before: Tue 02 Apr 2024 09:59:05 +0000
ROA not after: Tue 01 Apr 2025 10:04:05 +0000
asID: 8075
IP address blocks: 104.234.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 May 2024 14:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e0:8f:f4:1f:c4:46:36:ce:41:60:c2:71:e9:a4:45:90:b3:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 2 09:59:05 2024 GMT
Not After : Apr 1 10:04:05 2025 GMT
Subject: CN=6F335BDDCAEC4A9EE7BAE8DAA138AA511909FFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:de:57:7d:ff:72:33:be:a8:a7:78:df:24:
0e:b2:e9:60:68:50:4a:e9:f6:f2:10:be:4c:22:ed:
cc:1b:cf:b5:a1:68:67:31:ed:da:fd:da:b4:89:19:
b9:74:77:24:55:fd:26:4b:f2:c5:ea:b9:1d:ca:21:
9b:6d:83:72:9e:17:66:eb:fb:c6:7b:32:6e:87:d5:
ff:27:eb:85:0b:b8:27:29:38:1c:ac:79:60:e7:a5:
d7:af:5a:64:fa:97:1a:77:04:0e:fd:f1:87:8c:eb:
9c:ac:24:ca:3b:08:ec:3a:1c:e1:98:02:e5:61:29:
2f:b5:56:b4:8b:07:5e:f4:5a:16:57:c8:87:8a:20:
51:bd:6d:84:db:dc:70:0a:c9:ff:fe:de:83:dc:ea:
29:2d:c4:e8:52:e9:44:59:d6:12:d7:76:e7:46:f1:
bd:c2:11:fe:5e:54:af:ee:08:f1:28:a9:8e:ad:41:
7d:61:3a:8e:3e:db:89:a2:fc:af:0f:b5:32:2f:f1:
b7:65:08:3b:50:2a:4f:2d:71:f4:17:78:94:7a:43:
63:11:f4:c4:59:8c:4f:a8:4f:52:79:9d:80:a9:b2:
dd:2f:7b:45:20:6c:e6:d3:11:83:e9:8a:1f:df:89:
bc:19:18:50:d6:47:f1:44:e7:9c:98:50:c0:1d:2d:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:5B:DD:CA:EC:4A:9E:E7:BA:E8:DA:A1:38:AA:51:19:09:FF:B0
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS8075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:34:90:19:bb:dc:a3:66:ec:3c:ac:29:97:50:fb:41:0b:4e:
f8:93:e7:db:98:47:f2:bd:c4:fe:8e:ed:ac:dd:da:0b:1c:06:
de:58:51:94:4b:d3:a2:60:e1:18:ae:8e:59:89:7b:d4:7d:ba:
f8:1e:25:ad:1b:ca:a4:41:8f:1e:6f:51:90:85:ff:71:2e:14:
28:21:f7:33:b3:15:c1:09:df:90:2b:35:c9:48:8f:fc:2d:87:
33:77:8c:97:b0:22:93:64:4b:e2:23:81:b7:2c:49:04:4f:46:
6b:b7:08:c9:b6:d3:55:3b:cf:b6:75:ac:03:5c:89:08:c0:42:
39:ca:04:d6:dd:a0:a1:43:f4:5a:fe:63:6d:d0:d2:e9:c6:32:
59:24:c4:68:a9:77:52:34:a7:48:7e:52:f1:00:4f:44:66:48:
1e:36:4a:23:36:e3:36:5a:d8:21:da:ed:de:59:1e:9c:c2:35:
87:e3:98:8d:c1:77:c3:af:54:2f:50:cb:26:ec:63:5b:b8:e5:
cc:4d:f9:1c:04:23:23:3e:69:2a:09:74:50:f4:96:dc:57:18:
4e:1c:72:b3:f2:29:9b:65:cc:d9:e9:17:25:f2:81:63:51:d1:
fb:5f:46:4e:ec:98:6b:19:17:3f:3d:0d:a5:b6:99:67:16:6e:
fb:13:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org