Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
File: AS996.roa (raw, json)
Hash identifier: xN7Gl4KDozY6PesCD+3ys1d2RXu6XLVEKg0NfdDuKco=
Subject key identifier: 48:73:28:11:F0:BA:4D:DC:35:90:88:88:16:75:85:FD:3F:25:BE:AD
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4BA50E12B813A5142BE00B03D2DEE21D1193B59F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
Signing time: Sun 14 Jul 2024 00:48:59 +0000
ROA not before: Sun 14 Jul 2024 00:43:59 +0000
ROA not after: Sun 13 Jul 2025 00:48:59 +0000
asID: 996
IP address blocks: 104.234.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 15:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a5:0e:12:b8:13:a5:14:2b:e0:0b:03:d2:de:e2:1d:11:93:b5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 14 00:43:59 2024 GMT
Not After : Jul 13 00:48:59 2025 GMT
Subject: CN=48732811F0BA4DDC35908888167585FD3F25BEAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:c7:2a:ca:46:29:9e:14:30:c0:b7:ce:be:
c5:18:83:f4:b8:45:f7:4f:e3:8e:15:02:ca:4c:bd:
21:75:95:7e:93:4a:ee:6f:d3:44:d5:8a:1e:6d:da:
4b:91:8c:eb:fa:95:b9:fb:28:df:40:5a:98:48:50:
bd:0f:12:8b:16:1f:e3:b5:68:39:2c:32:39:0e:d3:
a8:41:06:e4:f3:6e:35:88:26:e3:d9:59:36:ff:cb:
c9:0b:bd:c6:79:c0:a1:d8:ae:40:91:fe:22:a9:60:
8a:f2:22:9c:54:7f:7b:c4:13:56:cb:4a:26:58:2b:
4e:40:0e:95:64:ba:b1:08:7f:fb:c9:15:98:53:58:
89:d3:53:3b:97:b7:7e:8e:67:6c:45:d5:4e:5f:ce:
00:f5:59:d6:a1:ad:df:e8:5a:f2:f8:26:64:13:5b:
13:c8:6b:a9:29:e3:1d:be:18:1c:b9:95:d2:f0:4a:
d0:c9:57:1c:14:1f:cb:4c:11:bb:e0:e1:04:38:99:
2c:05:31:ec:9e:6a:68:05:f4:82:4f:d9:6a:60:6a:
e0:d8:bc:81:d6:06:8f:d1:0b:7e:3f:72:0b:41:0b:
94:c0:3a:2e:80:56:ce:4f:73:b0:10:61:bf:a6:0d:
e9:4e:87:08:38:c0:c2:c3:27:34:73:f6:2c:7b:77:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:28:11:F0:BA:4D:DC:35:90:88:88:16:75:85:FD:3F:25:BE:AD
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.250.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:01:19:d7:eb:3f:01:67:d9:ef:4c:f4:09:8e:e8:1b:71:
f1:1a:d5:6d:50:b8:13:41:be:d5:1a:ee:9e:18:68:29:dc:db:
bf:a9:81:a5:07:21:16:04:77:33:7e:2d:b7:02:b6:b8:ab:01:
31:31:b0:28:6d:9b:fa:9e:01:17:e8:46:56:85:4a:59:2e:dd:
bf:09:8a:39:ba:7e:06:87:3a:8d:95:24:21:ea:c0:ae:44:c5:
84:0b:75:b4:d0:cc:e2:b2:ca:51:65:9a:0c:31:75:02:00:89:
ed:41:25:5e:70:03:f0:3a:86:0b:7e:46:b8:a1:ae:01:84:47:
1b:05:2e:cf:1c:38:df:26:ed:1a:35:a3:af:e2:e2:5f:c2:f4:
ec:d3:c4:94:d1:38:17:2a:a5:a2:02:24:6d:25:8c:63:d5:18:
a9:6e:5b:cc:10:26:6a:bc:8c:0c:0c:c0:b7:42:e8:33:1e:c1:
f3:07:91:94:23:a0:a9:44:e6:ff:e4:9c:84:0a:e1:65:8f:ad:
b9:9e:d2:54:f2:f3:32:bc:bf:2e:f7:5b:9b:cd:e8:55:72:ec:
ec:2a:fb:41:cf:b8:b0:1d:a6:1a:f3:b2:46:85:a1:d2:e9:b3:
b2:2d:4b:14:07:df:59:2a:d6:17:a5:f0:0f:c0:a7:24:7d:d6:
dd:04:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 18:41:01 2024 by rpki-client on console-fra.rpki-client.org