Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397563.roa
File: AS397563.roa (raw, json)
Hash identifier: ZaEAzGd/8uPcQhm+mpbb2A6W3jLe0rh9q4c4cFeQj4o=
Subject key identifier: 7A:06:BB:A5:87:84:F5:CC:BF:71:24:59:1C:CA:47:62:E8:14:B5:A6
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 782E19E769DE403C83FE91735EE04BED6E975E16
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397563.roa
Signing time: Mon 31 Jul 2023 11:30:03 +0000
ROA not before: Mon 31 Jul 2023 11:25:03 +0000
ROA not after: Mon 29 Jul 2024 11:30:03 +0000
asID: 397563
IP address blocks: 75.102.48.0/24 maxlen: 24
205.234.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 18:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:2e:19:e7:69:de:40:3c:83:fe:91:73:5e:e0:4b:ed:6e:97:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jul 31 11:25:03 2023 GMT
Not After : Jul 29 11:30:03 2024 GMT
Subject: CN=7A06BBA58784F5CCBF7124591CCA4762E814B5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:f5:0e:43:05:c7:44:8f:a3:31:50:d9:d7:
1e:27:37:62:94:5c:57:65:01:03:92:0b:0b:eb:b2:
10:34:59:91:58:f8:78:4a:c7:55:42:de:16:55:67:
5e:75:b3:73:39:c4:db:94:d5:e2:32:02:85:d9:a9:
e7:cb:8b:c2:a7:04:0e:d3:5c:46:bd:51:fd:07:0d:
80:2b:b4:d9:79:a2:16:58:be:39:4b:99:7c:d4:f4:
e6:d8:9b:e7:78:f9:1f:c7:ac:a2:b1:90:00:49:c3:
c9:d0:85:5e:11:06:6b:b3:13:5b:5f:54:4b:39:bd:
b3:be:5a:4d:dd:89:07:e4:fb:f0:5e:26:a5:5d:8f:
da:96:ca:9f:7b:17:8d:74:68:81:88:96:94:9b:f3:
eb:ad:93:e5:2d:52:27:b2:dd:3f:83:9e:ff:32:b5:
fc:c4:2f:31:1c:da:07:fa:2b:70:18:98:e2:32:fb:
ed:53:2a:67:77:51:78:9f:e9:87:e4:2f:3b:fd:70:
c0:33:ab:24:68:2e:3a:2b:ef:ae:d2:f6:dc:28:05:
db:be:22:90:a4:75:54:08:3d:8a:1e:37:f0:f9:df:
3f:2e:3a:e3:ac:cb:2b:ac:b5:e7:7c:3d:42:70:05:
a0:3a:d8:60:5f:1c:be:d7:81:13:e2:f6:38:cd:f5:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:BB:A5:87:84:F5:CC:BF:71:24:59:1C:CA:47:62:E8:14:B5:A6
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS397563.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.102.48.0/24
205.234.151.0/24
Signature Algorithm: sha256WithRSAEncryption
62:51:4e:0f:96:4d:7f:50:6e:fd:a9:7e:77:7d:48:4e:70:11:
4c:fa:34:ad:e4:62:14:be:fd:08:20:6c:f0:1b:7b:93:6c:f5:
11:a3:39:23:92:55:59:f2:fe:d2:38:b5:f4:dc:d1:ba:21:87:
1d:3b:85:5f:34:64:d1:c3:1e:c0:59:cc:d5:35:a6:a0:f4:aa:
85:fb:dc:2a:e1:41:c6:91:a5:22:70:06:e8:50:c7:b6:9a:ba:
01:3d:3b:63:58:b3:1c:71:84:df:48:16:96:0e:df:39:08:7e:
03:1e:c7:38:2f:87:ee:62:68:f5:11:89:ce:ef:86:5f:81:55:
b5:a1:57:e3:b8:a4:ec:e0:78:59:b3:db:e4:71:b1:69:e8:ae:
9a:36:d8:d8:1f:17:8a:fb:c6:9b:30:3d:9b:25:cc:e5:5f:8a:
34:d9:78:0c:cc:b6:4d:58:ad:49:11:93:2c:b0:ad:36:03:34:
05:8e:74:27:a5:b1:f8:5b:de:ef:5d:aa:e8:fb:85:87:51:83:
55:05:fe:03:31:0c:3e:51:81:12:e6:70:68:30:6c:8d:34:28:
1f:08:46:4d:2a:d7:63:35:e5:04:be:0c:a6:f2:34:57:cb:63:
89:3a:9a:74:a5:d6:14:f2:43:10:b2:cf:62:d8:3f:db:3c:53:
ec:41:4a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org