Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: rbKZFVahi7/8X5fWxGa0Ud3qIjX4McWy+3uEd3ll0GI=
Subject key identifier: C4:FC:5B:A1:57:C7:A3:B5:86:D2:BA:C0:F4:5F:DA:03:64:6B:90:3C
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 7244F1C33DD1CCC92DAFE10220CF5229CF934FAF
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398465.roa
Signing time: Tue 17 Sep 2024 13:38:14 +0000
ROA not before: Tue 17 Sep 2024 13:33:14 +0000
ROA not after: Tue 16 Sep 2025 13:38:14 +0000
asID: 398465
IP address blocks: 67.210.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:44:f1:c3:3d:d1:cc:c9:2d:af:e1:02:20:cf:52:29:cf:93:4f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Sep 17 13:33:14 2024 GMT
Not After : Sep 16 13:38:14 2025 GMT
Subject: CN=C4FC5BA157C7A3B586D2BAC0F45FDA03646B903C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:b7:6e:53:e8:11:68:a2:5b:4f:d1:2e:2a:
2e:d0:22:60:8e:78:7f:68:a7:41:7f:af:9a:4b:f4:
20:3a:63:ac:a3:e4:16:f8:52:bd:4e:56:91:6b:08:
61:e0:76:30:a4:c2:34:4f:e6:81:d1:a0:6f:af:72:
aa:73:50:af:8b:b7:7c:bf:1a:f3:64:6a:55:ca:4b:
df:50:f2:5b:de:1a:c1:4a:4e:ca:69:13:10:f2:a1:
36:e1:a3:b1:01:0b:bc:b3:04:4c:47:19:42:cb:d0:
f5:0f:a5:35:c6:49:25:aa:9c:6a:44:df:02:a4:af:
af:ad:30:a6:2e:3f:95:90:2d:e3:65:10:64:af:be:
b6:81:7c:89:6b:81:02:72:54:bc:80:e7:2e:60:6c:
9b:46:7c:bc:ad:0f:f2:bf:37:9f:32:8b:9b:dd:43:
35:66:65:c1:5f:f6:08:0d:1b:2a:f3:b0:6f:17:c3:
32:fa:42:ae:56:3c:d6:e6:bd:31:a3:de:b4:e6:c2:
21:90:c7:9f:9e:1b:33:eb:40:4c:0c:10:39:9d:c5:
bb:bd:ca:ee:7c:f3:cf:7a:8d:07:d5:00:7c:a4:5a:
01:d3:9a:e0:53:e6:90:72:ff:da:4a:0d:96:6b:22:
71:a9:69:b4:8d:99:98:e5:db:b1:c8:d6:1c:79:ce:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FC:5B:A1:57:C7:A3:B5:86:D2:BA:C0:F4:5F:DA:03:64:6B:90:3C
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.102.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a4:fb:dc:99:fa:cd:6a:a1:80:ba:b3:1c:ee:c9:0c:37:92:
44:ea:24:47:fc:9e:c0:b3:55:a1:26:fa:d4:0b:f7:4f:16:29:
53:7d:e4:97:31:79:ba:82:29:b6:1b:89:c6:9a:c0:c1:0c:16:
ee:75:b5:af:68:04:66:7b:79:d7:3a:c8:a9:ab:62:3d:c7:65:
8a:f8:68:3e:d0:cf:4e:15:63:e3:01:7e:a4:b8:d0:cc:69:c8:
26:06:b3:66:52:1a:96:4e:8c:34:9d:97:1b:85:d7:24:cd:97:
8e:47:08:35:15:6b:b4:b5:71:32:c5:70:e3:d3:76:5f:71:aa:
80:5b:db:6a:f9:0a:07:e4:5e:09:6f:ed:47:06:7b:d4:9c:06:
53:88:75:c6:25:1f:fc:64:01:ab:39:38:ee:0c:3e:a4:8a:4a:
29:38:8f:32:8f:bb:c2:16:bf:8c:22:7a:95:a8:be:56:41:e4:
2d:3c:af:0f:be:60:e7:f6:81:49:05:2c:52:47:ae:90:0b:6b:
59:21:41:57:74:41:51:1a:46:1d:4c:14:90:e6:45:28:ce:e0:
d1:19:8c:60:30:7e:a1:c3:d5:6a:b8:83:1e:00:8e:b8:93:1c:
ba:1f:c1:eb:27:84:36:50:b6:20:a8:58:fa:a9:51:20:76:f9:
a9:8e:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 02:25:01 2024 by rpki-client on console-fra.rpki-client.org