Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa
File: AS214828.roa (raw, json)
Hash identifier: X+JeAysSMRJJBDqPS5/b989Qpd+jEvi37fWvT5nFQC0=
Subject key identifier: DB:FE:7A:2D:F6:62:02:02:45:E8:97:BF:18:C6:F1:73:F2:99:A5:1A
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 42875DC2BE9524010B037CD4DB86F424A5B81890
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa
Signing time: Wed 10 Jul 2024 06:43:53 +0000
ROA not before: Wed 10 Jul 2024 06:38:53 +0000
ROA not after: Wed 09 Jul 2025 06:43:53 +0000
asID: 214828
IP address blocks: 23.95.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 00:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:87:5d:c2:be:95:24:01:0b:03:7c:d4:db:86:f4:24:a5:b8:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 10 06:38:53 2024 GMT
Not After : Jul 9 06:43:53 2025 GMT
Subject: CN=DBFE7A2DF662020245E897BF18C6F173F299A51A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:46:c4:36:6b:07:df:25:36:72:54:23:47:
89:01:7d:b6:9a:a0:f0:e6:ba:28:8f:a2:63:79:ac:
a9:63:7e:34:78:7f:74:de:d9:13:d4:5c:4d:58:c3:
57:0a:58:62:8f:e1:da:0f:44:9c:30:91:81:d3:2c:
b1:88:fd:1a:1a:95:24:5c:40:db:fc:7f:7c:a9:d1:
0f:4b:e1:b5:a4:6d:b5:6f:af:86:bd:d4:6d:02:7c:
f3:1f:90:a2:7d:87:da:06:dc:d8:3f:a4:ab:57:2c:
b1:3b:8e:50:1a:52:d1:80:ec:7f:2a:8e:75:59:bd:
7b:50:2a:9c:b6:4c:2c:10:3d:70:1b:30:a0:7b:c9:
58:ba:ae:59:ab:5a:d4:e7:35:f6:ef:f3:0e:6e:70:
ef:a3:4a:ef:b2:05:b8:ab:89:8f:48:6b:30:af:80:
ff:3a:7b:5a:40:fa:de:c8:01:0e:55:2c:8e:f1:78:
13:22:09:a9:e4:10:ec:32:24:f6:9b:bc:be:16:45:
43:05:b5:43:b9:54:b3:bb:0d:fd:61:27:27:c1:4a:
10:9a:ee:ae:07:8d:34:c6:01:2f:4c:07:91:a8:e1:
34:83:17:6f:22:b6:24:01:e0:c1:58:82:a2:66:52:
4b:ae:de:f8:6c:7a:49:32:dd:90:6b:bb:0d:3e:32:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FE:7A:2D:F6:62:02:02:45:E8:97:BF:18:C6:F1:73:F2:99:A5:1A
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2f:91:75:2f:15:81:03:a9:7f:a7:fa:4f:02:1e:d0:12:7a:
ea:54:b5:bc:f2:89:d3:57:94:ce:68:7b:06:7b:6c:57:f3:38:
48:e1:86:9e:b7:3a:68:ab:63:3f:1f:c5:27:51:63:f5:a7:a6:
22:c6:a4:82:79:dc:21:bf:0e:49:6d:22:e3:eb:53:29:cf:34:
33:cb:f8:61:04:a3:e2:86:c0:5e:97:9e:fc:4a:5b:eb:fc:d0:
8e:04:6f:69:ea:75:36:41:fa:67:d0:51:bd:7a:92:17:ef:ef:
45:76:17:b7:6a:cd:3a:ad:26:5b:f3:66:ca:cf:17:1e:38:e0:
44:01:12:7b:c2:56:66:21:ce:3b:a6:38:58:a8:eb:e9:ea:a8:
9f:a9:ac:45:d2:fb:17:f9:87:82:b1:03:3f:31:4b:fc:be:ab:
bd:ac:f4:62:91:2d:90:76:35:af:bf:c8:4f:90:c4:ac:6a:07:
49:58:dc:ba:f1:f9:84:aa:d8:14:4e:3a:f6:ff:30:e0:10:14:
0b:4a:7c:2b:78:2a:1b:1d:eb:0c:7b:ae:f7:44:df:08:3b:23:
75:8c:c2:be:10:30:99:87:32:24:4e:30:bf:33:61:0b:c1:08:
a9:19:9b:1d:59:cc:98:91:48:c5:f0:ab:99:14:b3:c7:22:f6:
5f:35:e6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 02:42:51 2024 by rpki-client on console-ams.rpki-client.org