Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
File: AS61302.roa (raw, json)
Hash identifier: Rh8rBOpOxT/76uekkrpfnYIxqtqItkQWgN/M7oPfaVY=
Subject key identifier: FC:9A:C0:C3:6B:FD:52:EC:83:34:D6:D3:F7:3C:B1:F7:07:FA:C0:39
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 45B95C8DCB11F13F818A1476DFC57848053316E7
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
Signing time: Tue 28 Feb 2023 14:33:20 +0000
ROA not before: Tue 28 Feb 2023 14:28:20 +0000
ROA not after: Tue 27 Feb 2024 14:33:20 +0000
asID: 61302
IP address blocks: 104.234.12.0/24 maxlen: 24
104.234.48.0/24 maxlen: 24
104.234.125.0/24 maxlen: 24
104.234.127.0/24 maxlen: 24
104.234.184.0/24 maxlen: 24
104.234.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b9:5c:8d:cb:11:f1:3f:81:8a:14:76:df:c5:78:48:05:33:16:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 28 14:28:20 2023 GMT
Not After : Feb 27 14:33:20 2024 GMT
Subject: CN=FC9AC0C36BFD52EC8334D6D3F73CB1F707FAC039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:df:7b:52:de:4c:be:a6:8f:2e:9f:eb:f8:
fa:7b:70:ef:cc:f2:03:16:e8:44:7d:78:5d:9a:d5:
7d:49:e2:3b:61:74:bc:19:71:5e:02:b6:9d:1e:e0:
af:fc:48:62:be:ce:40:b2:41:1d:e8:a1:44:bf:53:
08:e0:67:e2:98:43:10:a6:b1:1f:49:fb:47:02:9e:
15:be:88:28:f0:96:84:35:4c:58:f5:ad:49:0a:d9:
e2:86:cc:16:47:be:d8:0a:03:08:8c:45:db:fb:2d:
06:44:e7:8e:60:32:21:2a:a1:be:45:61:e9:58:3e:
60:72:35:10:1c:09:60:41:fa:01:ef:a9:2e:4c:cf:
df:b9:1b:37:62:6f:fc:50:4c:7d:ce:d2:67:46:a9:
03:0f:d4:58:ce:8d:4c:f7:44:01:a4:2f:f5:c2:71:
91:2f:d8:06:75:12:69:38:ed:2c:85:df:32:70:b4:
76:1b:b1:74:b4:5a:51:a2:20:6d:fd:0c:cf:41:f1:
7d:27:7d:19:a3:75:ca:db:15:5e:24:58:80:e2:3c:
df:47:31:be:dd:ce:e9:ca:e8:33:84:57:78:fa:d4:
af:a7:38:26:ce:73:2b:e6:bf:32:29:04:e1:33:ec:
ca:ed:f3:1d:e6:d1:ed:3d:bc:60:d2:8c:e4:40:5d:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:C0:C3:6B:FD:52:EC:83:34:D6:D3:F7:3C:B1:F7:07:FA:C0:39
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.12.0/24
104.234.48.0/24
104.234.125.0/24
104.234.127.0/24
104.234.184.0/24
104.234.188.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7e:99:61:a8:55:2e:93:b6:7c:68:5f:9b:2d:fb:2b:d3:45:
f4:d7:6d:08:5e:7e:0f:bf:f5:3e:df:c2:7c:d1:32:9b:97:1a:
c6:06:57:9f:a5:c7:e5:77:74:ed:51:32:06:79:ca:48:90:4c:
31:7a:d8:1c:c0:99:71:be:0b:f5:ab:e3:5c:c0:6e:85:5a:e1:
72:1d:c5:6c:c6:e0:48:60:00:2d:8f:65:68:17:6f:55:e0:95:
20:f4:8b:dd:4c:e4:4e:c0:1d:a1:2c:28:ae:8d:fe:10:8e:1e:
0b:6c:53:41:dd:7e:93:0a:12:d7:91:ca:75:cf:d1:6b:f5:9d:
f4:bb:bf:76:3b:02:1f:6b:61:15:06:cc:6b:4d:b9:f5:b2:bb:
2e:f1:bc:1b:b1:fe:df:e3:50:b2:38:8a:69:ad:a3:a5:86:ca:
be:3f:72:b6:c2:fd:98:3e:b0:ab:80:a9:89:31:a7:66:9b:f9:
44:25:a2:3b:c8:ee:78:5d:b0:e1:a0:37:83:5f:b7:db:bf:cb:
db:a7:e7:93:8f:13:a5:17:2d:6c:0b:ad:d2:30:db:ad:5d:88:
e9:37:38:1c:31:b1:4b:37:ce:be:dd:92:51:bc:62:d1:aa:c4:
36:34:4a:e0:a5:8e:02:04:74:87:0d:11:c6:64:d3:a7:c4:4d:
2b:5d:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:54 2023 by rpki-client on console.sobornost.net