Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa
File: AS400298.roa (raw, json)
Hash identifier: o8D9uDyXmRGNmKjGVOkZtm0PkVpYpRNugyltDjo/Md0=
Subject key identifier: FF:8C:2C:A7:0D:E0:C2:C5:21:04:4F:3B:CD:47:B5:8F:23:F0:52:90
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3DC8A4100515BC7D1DEB9C953D88AF150A87DB4D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa
Signing time: Wed 16 Apr 2025 07:22:51 +0000
ROA not before: Wed 16 Apr 2025 07:17:51 +0000
ROA not after: Wed 15 Apr 2026 07:22:51 +0000
asID: 400298
IP address blocks: 104.234.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Apr 2025 21:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c8:a4:10:05:15:bc:7d:1d:eb:9c:95:3d:88:af:15:0a:87:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 16 07:17:51 2025 GMT
Not After : Apr 15 07:22:51 2026 GMT
Subject: CN=FF8C2CA70DE0C2C521044F3BCD47B58F23F05290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:7a:31:01:cc:3b:5e:c7:fa:c9:a2:9c:94:
d0:fb:b8:9d:f9:98:ba:a2:f5:66:94:7d:b4:66:dd:
a4:96:8c:12:3b:26:d0:d5:ac:ed:69:97:2b:72:94:
2a:37:b7:0b:9d:0a:6e:f7:c7:67:2f:c6:fe:6e:d1:
e9:1d:ac:51:fe:c1:b6:23:8b:65:cb:97:c6:8d:69:
54:fc:be:47:21:d9:af:4b:d9:1d:46:6e:48:73:1b:
19:c8:32:c6:93:5e:c8:2b:85:d0:73:3e:09:a7:a7:
d4:14:59:a4:00:f9:bf:b3:c2:f5:2a:df:31:a2:67:
8d:c8:67:eb:1d:d7:f8:0a:22:2b:a9:15:ca:d8:02:
ca:5c:e0:29:03:c6:95:3a:16:d4:42:5a:a6:2b:ec:
42:f7:81:4c:9a:f9:dc:8e:53:a5:e4:84:d1:3d:32:
c8:9b:6c:65:14:e8:65:61:00:53:55:40:a5:f2:dc:
b9:a2:a2:0f:26:f8:e4:35:a8:0a:fa:9e:fc:8f:17:
41:53:c1:4f:23:81:08:ec:3d:e4:ca:b1:78:da:51:
d2:19:fb:6f:0e:36:07:26:3c:91:80:27:a8:98:05:
3f:20:6b:0c:3f:fb:04:a8:e6:90:1f:23:f7:73:87:
84:a4:a2:cb:39:32:a0:87:30:ff:79:7a:32:09:29:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8C:2C:A7:0D:E0:C2:C5:21:04:4F:3B:CD:47:B5:8F:23:F0:52:90
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:9d:ba:ea:9b:28:fc:79:28:3c:20:38:c6:18:92:43:71:
1f:5b:fa:49:db:60:01:f7:d2:e2:9a:66:cb:7e:d7:fd:94:47:
75:2e:a9:da:7b:50:b9:d7:b5:f4:f7:9d:d1:54:d9:61:b7:d4:
86:ab:ea:54:a4:ec:a0:9d:11:e9:08:c5:35:b2:c8:79:6a:1f:
bd:d6:7b:db:a2:a9:ec:a8:61:8c:2f:e6:a2:34:a0:6b:23:1a:
a1:9c:8a:83:f0:54:4a:20:0f:28:e7:69:b3:87:d6:f7:00:93:
74:07:23:20:c7:51:ff:94:f8:5c:58:f1:a8:85:98:46:b9:82:
04:60:c3:4e:e1:0d:67:f9:4a:35:be:08:a4:af:03:56:06:f8:
82:c4:ca:0c:14:2b:37:69:3f:81:0e:e0:d5:b8:c9:81:76:ff:
af:8f:cd:ef:59:c3:35:48:f3:67:5f:d0:38:61:aa:d2:68:ef:
d0:c4:ff:40:db:09:24:92:ae:b0:c9:b5:e0:a7:2d:b6:32:8e:
71:f6:09:04:0d:ef:b2:b3:6b:a6:f6:07:7d:9b:aa:ae:d9:13:
75:90:81:1e:68:83:34:38:c1:63:66:6e:b4:d1:e9:6b:62:3c:
01:c9:3f:a2:63:b5:90:66:2e:65:69:02:36:5c:15:11:b3:29:
02:3f:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:38:33 2025 by rpki-client