Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20323132323338.roa
File: 3135372e3235342e302e302f31372d3234203d3e20323132323338.roa (raw, json)
Hash identifier: A4L3h1UYCnJMG/I13SDtbQFraj2Gal60a6fkxiEO0j0=
Subject key identifier: 25:63:2E:88:FA:38:A4:E5:26:15:99:B4:76:2D:32:7B:0F:A2:BF:B8
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 623A83336AAED64A8BD4AF562A166F1ED566AC37
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20323132323338.roa
Signing time: Tue 28 Mar 2023 13:20:33 +0000
ROA not before: Tue 28 Mar 2023 13:15:33 +0000
ROA not after: Tue 26 Mar 2024 13:20:33 +0000
asID: 212238
IP address blocks: 157.254.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3a:83:33:6a:ae:d6:4a:8b:d4:af:56:2a:16:6f:1e:d5:66:ac:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 28 13:15:33 2023 GMT
Not After : Mar 26 13:20:33 2024 GMT
Subject: CN=25632E88FA38A4E5261599B4762D327B0FA2BFB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:8a:fd:7b:fd:09:7f:a8:be:35:30:2d:6a:
39:81:a7:54:47:67:aa:23:a2:66:38:92:08:5b:69:
4c:f6:61:e6:c6:7d:27:66:0d:65:e6:05:a7:3d:32:
8d:7c:71:66:08:44:13:49:0c:db:f8:ba:c9:4b:04:
2e:8d:22:39:bd:ca:44:22:de:c5:21:68:8e:af:86:
0b:c7:ae:af:12:b4:9e:16:0c:50:6e:b2:e2:0f:71:
e8:66:d3:80:ad:c0:2a:d0:9e:ec:81:e9:65:e5:0e:
11:c2:df:d4:63:e1:85:6f:fd:a9:7c:3f:6a:54:13:
bc:cf:f8:d7:03:93:7a:be:c8:e3:2c:ec:a6:84:d7:
62:2a:11:e4:af:d3:cc:e9:94:75:9a:bd:dd:7a:d9:
a5:69:3f:6e:0e:d4:ca:e1:70:9d:b3:61:de:e7:e9:
41:d0:3f:a6:16:74:36:19:76:cb:73:87:e5:f7:e0:
38:df:4f:26:e7:4b:3e:3d:e1:69:bc:8e:c6:7b:68:
dd:e3:02:87:c5:b2:4f:58:07:a5:73:cb:a5:60:85:
1d:04:ab:d6:59:8b:8a:9c:21:64:79:73:41:4f:b5:
e8:ad:78:00:bd:54:37:77:59:21:17:b7:16:dd:a2:
cf:93:89:90:ff:9e:8f:fa:84:2f:a2:6c:42:17:7c:
78:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:2E:88:FA:38:A4:E5:26:15:99:B4:76:2D:32:7B:0F:A2:BF:B8
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e302e302f31372d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.0.0/17
Signature Algorithm: sha256WithRSAEncryption
45:26:f4:14:d2:52:27:9c:cb:4e:1f:52:ae:78:62:f8:bb:f9:
d5:eb:8a:c1:28:32:b7:ac:ee:9c:0e:ec:5d:9c:a3:b5:3e:71:
ff:3e:17:af:25:23:72:8b:13:9a:af:34:e4:6f:e1:78:69:56:
77:b2:2e:1a:b1:7a:d4:66:d1:d7:ac:d9:4f:03:78:dc:67:62:
0d:4e:46:51:b5:5e:60:74:8a:88:66:f1:c9:e6:2a:83:d9:fe:
95:df:9d:23:a4:20:02:88:ce:91:6a:18:e2:33:f0:70:63:c2:
42:bd:11:12:90:04:2b:1f:b3:c4:4a:dd:58:50:4e:f2:a0:1e:
11:7c:b1:58:bf:1a:29:b1:09:1e:2f:15:27:4c:77:2c:22:55:
10:e0:88:b8:f3:e7:4b:f5:0b:e7:17:11:4b:7b:52:97:70:7d:
cb:b6:cd:ed:e4:47:4f:35:3c:89:2d:92:ea:80:a1:53:0d:a8:
cc:f5:e4:61:a4:2d:35:9a:bd:e3:40:af:0e:8c:b4:09:15:3c:
4b:af:47:40:81:68:f7:d7:12:80:6a:3a:be:e4:42:eb:6f:b1:
35:05:82:b8:9a:99:fd:14:9b:f5:96:c6:d4:9d:7d:bd:bc:62:
a9:e3:37:83:06:cc:3f:70:b6:23:46:37:c1:eb:55:16:69:58:
ae:9d:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org