Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: 2fiBM5EGUZmBRC/uc+QiEvC40rwX9Eyy8XEubAWn2zw=
Subject key identifier: E2:7D:DA:A4:A2:39:2B:1B:07:6F:B8:FE:C4:57:0F:83:03:AA:7D:BB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5EE946BBC253BD2162F086ADCD134A6FF9F7F3FB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa
Signing time: Mon 17 Jul 2023 01:30:06 +0000
ROA not before: Mon 17 Jul 2023 01:25:06 +0000
ROA not after: Mon 15 Jul 2024 01:30:06 +0000
asID: 61138
IP address blocks: 104.234.172.0/24 maxlen: 24
104.234.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e9:46:bb:c2:53:bd:21:62:f0:86:ad:cd:13:4a:6f:f9:f7:f3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 17 01:25:06 2023 GMT
Not After : Jul 15 01:30:06 2024 GMT
Subject: CN=E27DDAA4A2392B1B076FB8FEC4570F8303AA7DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:5c:b5:09:71:b5:f4:d0:99:84:dc:e9:26:
5c:20:04:9e:23:72:df:bc:de:64:ff:90:9b:04:c5:
a5:8b:91:58:20:b4:59:9d:46:46:7e:6b:b5:f4:73:
e7:c5:1a:32:ce:01:fe:63:c2:dc:f4:17:78:47:1d:
20:5a:f9:5a:77:0a:fe:37:94:ff:15:ac:81:33:8d:
78:32:fe:35:d9:0e:3b:48:c2:1e:99:df:2d:70:a5:
c1:ce:0e:2c:d0:f6:08:27:71:44:e3:df:23:36:63:
38:23:3e:e2:70:78:0a:c8:06:5f:fb:13:de:7b:15:
68:b6:97:30:fb:10:c3:da:47:d3:38:f3:16:1e:94:
be:2b:41:33:85:48:be:b2:ed:38:cb:21:1e:5a:e2:
66:8c:11:43:ce:44:8d:eb:41:e8:11:03:1f:f4:7d:
fb:73:56:23:e8:83:c5:66:ba:61:2e:f1:28:8f:21:
52:07:56:95:b0:7d:83:81:3f:87:ea:94:4d:79:f0:
a4:df:89:01:75:35:70:2b:6e:2c:4d:f1:da:74:46:
bc:5f:11:cb:98:b0:ad:e0:d2:86:4c:ab:60:3d:2a:
1d:f3:85:a3:1b:b6:4d:e5:32:86:2e:9c:79:7e:be:
80:6b:19:e6:cc:0e:97:91:c2:aa:d2:9a:45:24:a8:
c7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:DA:A4:A2:39:2B:1B:07:6F:B8:FE:C4:57:0F:83:03:AA:7D:BB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.172.0/23
Signature Algorithm: sha256WithRSAEncryption
50:47:61:27:9f:c7:fc:9b:e1:dd:e6:53:1e:a5:1e:0c:ae:07:
7e:75:f1:f9:37:14:a9:7c:3c:a2:5a:68:32:ea:a6:49:24:4c:
ca:8d:f6:f6:68:dd:0c:bd:f8:cd:9c:81:35:7c:2e:60:ab:ea:
d7:45:99:a6:fc:48:54:de:4a:71:c3:b7:a1:92:eb:2e:6f:60:
67:43:f0:7b:1e:26:75:b9:b3:cb:3b:f7:fb:39:64:29:09:6c:
28:b3:e7:3b:da:bf:3d:cb:a9:0d:28:56:e2:0f:6e:df:42:02:
bd:e4:5d:e6:e3:8d:f6:ae:03:84:ed:68:a5:5a:34:be:0c:59:
95:a0:c3:3f:c1:e0:c7:00:1e:38:32:87:f4:3c:83:d0:da:03:
5e:4d:f7:b3:be:6b:f8:fe:83:d3:99:c8:7c:4d:c0:c3:57:91:
77:b5:1e:b7:d5:fe:a6:c1:65:06:3c:b0:b8:84:da:3c:7b:c7:
62:c8:2f:13:5e:10:e1:22:c5:c6:8d:00:8b:99:e5:a8:c3:55:
ad:67:61:6c:25:d8:fc:3b:eb:63:bf:9d:81:86:ea:a0:12:b7:
a3:f6:37:7f:cd:13:88:4d:da:69:68:6b:d2:31:9d:f3:6f:85:
8e:cf:b7:c0:35:ea:ad:f4:eb:65:ee:77:9b:a0:03:bc:23:c3:
72:03:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:54 2023 by rpki-client on console.sobornost.net