Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: UnU7q2p8HOUdvi01vrxTY0Uxs+6iGTCuDO/Ro4NjC24=
Subject key identifier: C0:47:4B:5A:3C:06:0C:03:EC:4A:8D:4D:01:2A:71:AA:2E:E7:76:50
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 27FC7EF0F748CF68DE437FAD28DF1F7AB8A5DC22
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63902.roa
Signing time: Wed 18 Sep 2024 00:01:11 +0000
ROA not before: Tue 17 Sep 2024 23:56:11 +0000
ROA not after: Wed 17 Sep 2025 00:01:11 +0000
asID: 63902
IP address blocks: 107.172.152.0/24 maxlen: 24
192.227.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fc:7e:f0:f7:48:cf:68:de:43:7f:ad:28:df:1f:7a:b8:a5:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Sep 17 23:56:11 2024 GMT
Not After : Sep 17 00:01:11 2025 GMT
Subject: CN=C0474B5A3C060C03EC4A8D4D012A71AA2EE77650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:c1:ca:c4:24:d4:2a:9a:3e:64:c5:57:77:
20:e4:da:5f:a9:63:ff:fe:eb:89:30:10:e6:47:f1:
e3:1f:36:59:df:b1:ef:5a:af:ea:b8:f9:df:75:2c:
dd:e6:a6:78:c2:2c:6a:d8:81:8a:c9:aa:21:ba:76:
34:f5:d7:6b:a6:24:74:22:6d:f3:0c:4b:1f:94:88:
3c:06:c8:04:23:c3:b4:66:b2:93:dc:d0:53:ce:88:
1e:c7:73:6a:1d:3e:57:ed:ee:c0:a9:65:9b:4c:c2:
ec:69:a9:e5:44:3c:e6:39:21:25:9c:a5:5c:ac:05:
36:b6:6e:00:51:f8:46:5c:95:23:96:bb:a0:72:f4:
55:58:43:5a:b9:36:08:4d:51:c9:1f:98:45:fb:c5:
e9:bb:c3:86:63:10:70:d0:0e:a1:40:4c:df:10:35:
18:40:b5:3b:41:18:e5:8c:85:ec:1a:2e:01:bc:94:
c8:c3:25:ea:a3:5d:d0:ba:df:a4:d1:d9:96:84:16:
a3:ed:e0:e3:5a:6b:b0:bf:f2:4b:6c:37:43:91:5a:
b8:b1:9a:f7:12:32:c5:82:72:f3:25:0c:96:50:4b:
b1:0f:49:2b:8c:0d:7a:28:ec:97:3f:9b:9c:e9:41:
f0:14:6e:04:84:4e:86:9c:61:1a:fa:5d:d1:b3:16:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:4B:5A:3C:06:0C:03:EC:4A:8D:4D:01:2A:71:AA:2E:E7:76:50
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.172.152.0/24
192.227.250.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fb:50:6b:0c:ef:82:61:ca:fb:d4:00:09:8e:6b:31:32:f5:
d2:0a:d2:c9:f5:f4:54:15:a2:d0:62:ba:4d:97:70:5a:b9:4c:
7d:7b:b5:b7:d9:2c:dc:1c:d2:b6:b0:aa:1f:72:b7:fb:d5:c2:
b4:60:33:3e:17:5d:86:18:f1:86:ad:0f:5a:39:a2:b1:40:9f:
be:ac:44:89:4a:80:b3:01:26:45:6a:c4:a5:9b:88:cc:68:57:
a0:1a:16:2a:5e:4b:ab:09:b0:36:90:a8:e9:34:1b:2c:2f:2e:
f0:7b:ef:10:23:de:41:b2:a4:31:78:bc:45:b3:f0:5f:62:22:
4d:7d:fe:21:f6:cf:e2:01:29:9a:b0:00:b6:f0:54:52:bc:9d:
34:83:6d:a5:b5:c0:24:7a:02:0b:85:2b:b7:c6:81:c2:16:23:
f2:d7:b1:b3:a2:18:62:6d:21:4f:f8:fe:7f:78:ed:e8:42:53:
36:c8:6c:ca:4f:d0:c1:43:ec:f2:49:1d:4c:42:0d:27:69:3b:
b0:53:03:04:ee:63:f2:25:65:3a:6a:79:48:16:f6:36:b8:61:
e8:73:c6:30:6d:de:6e:ff:3d:f0:6a:06:cc:b1:0b:c9:17:32:
5f:6c:9b:f2:d5:ee:77:bb:81:a9:2d:6d:b6:5f:3f:3c:cd:41:
7f:0a:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 02:44:39 2024 by rpki-client on console-fra.rpki-client.org