Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: cqMUY9I7iueSu7FsZKSXkVsp/Az0Ch+UwYqZ0XwwvFk=
Subject key identifier: 91:B5:C1:B5:33:BC:A7:F6:17:67:4A:8F:9A:1A:6A:05:29:1D:24:AB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 062B16912561C39CD4385531B4318DBC4FA7E4DD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time: Sun 26 Jan 2025 14:39:21 +0000
ROA not before: Sun 26 Jan 2025 14:34:21 +0000
ROA not after: Sun 25 Jan 2026 14:39:21 +0000
asID: 9304
IP address blocks: 104.234.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 00:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2b:16:91:25:61:c3:9c:d4:38:55:31:b4:31:8d:bc:4f:a7:e4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 26 14:34:21 2025 GMT
Not After : Jan 25 14:39:21 2026 GMT
Subject: CN=91B5C1B533BCA7F617674A8F9A1A6A05291D24AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:b4:b1:49:d4:30:a0:23:0b:94:9d:c7:37:
c7:99:7f:97:e6:2d:36:e4:8b:8f:0c:c7:f4:2d:76:
e8:8c:9c:e2:b8:4c:70:12:98:b7:a6:27:47:a3:90:
fc:2b:64:6a:e7:03:23:f5:36:7c:15:47:fc:5c:90:
fb:76:53:f0:ae:25:ea:22:cd:17:b3:15:c2:59:72:
ad:c9:c3:0d:8d:7d:76:3d:c7:5f:3b:ef:f5:76:70:
31:87:92:12:07:b5:ee:3d:66:ac:de:8b:d0:c2:0d:
79:23:52:a4:5d:1b:56:c9:cf:35:c6:34:9a:9d:28:
a6:53:6b:6c:59:96:21:f4:d0:40:b5:45:1d:9e:1f:
b4:42:9a:df:38:dd:5a:17:bd:a5:ee:fa:6a:5a:a4:
e8:c0:62:3f:ba:3a:b1:48:bd:de:cd:74:ca:73:d8:
f5:98:bf:09:d0:a2:5a:6b:63:5e:eb:f0:cd:ef:30:
18:9f:39:45:9a:42:d9:ff:3a:f5:6e:35:7e:d0:f9:
34:4f:37:05:4c:ce:b0:af:cc:d9:bb:57:39:08:d4:
c0:d3:4f:94:26:9d:09:f1:79:2f:e0:7a:4f:f4:cb:
10:33:98:25:e4:dc:91:03:23:8d:db:99:4a:f0:1d:
92:7e:4c:67:c3:7f:fe:ed:69:a0:96:69:62:e0:0e:
ea:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:C1:B5:33:BC:A7:F6:17:67:4A:8F:9A:1A:6A:05:29:1D:24:AB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.236.0/24
Signature Algorithm: sha256WithRSAEncryption
84:38:da:3a:bf:28:84:67:9b:24:ca:3c:48:5a:bf:72:b5:3f:
b9:0a:ec:f2:00:0c:8c:53:ed:ac:9d:67:b6:3a:94:98:0c:78:
04:e4:a0:72:a4:88:1b:e3:f6:8e:ba:c7:a9:0b:78:1f:40:ce:
8a:29:cf:5a:33:56:51:76:c0:73:33:0b:5f:20:d1:25:6b:76:
c8:0e:19:b4:3f:64:76:02:89:52:3f:d0:af:e9:7e:5f:81:60:
48:ff:a9:12:55:44:f1:6d:20:e6:4c:b6:a8:99:2b:0b:f4:b8:
4e:ad:a6:c4:85:e6:8c:1e:84:63:6b:03:2b:22:62:36:55:87:
57:c8:d9:6a:f9:18:07:6e:95:48:05:bc:65:86:45:70:e8:2a:
5d:97:aa:4e:a2:32:4a:db:54:c2:82:c5:48:dc:ea:a4:77:13:
19:f3:ee:93:bd:c0:f2:80:4e:ce:7e:f2:a9:c7:3e:e0:47:61:
06:f9:f0:d9:c1:58:a4:2a:77:99:a3:8b:c6:74:0c:08:19:9e:
da:db:b2:e8:8b:af:5e:84:c2:c5:0e:76:f7:3c:16:9e:51:8e:
7a:d6:61:3e:4c:ea:a8:08:fd:c2:48:78:0d:d2:b2:8e:bd:6d:
f4:10:ee:eb:77:f6:8e:86:00:75:b9:ca:6b:1a:80:0f:ad:0e:
04:c6:ee:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:23 2025 by rpki-client