Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e20313337353634.roa
File: 3135372e3235342e3132382e302f32322d3232203d3e20313337353634.roa (raw, json)
Hash identifier: BaU7Ppszl7GGeOCOPa3tJGyUbFiAHIOAtKiB5wg8w8U=
Subject key identifier: 2D:AF:C8:9E:43:7B:B7:94:62:DD:1D:19:35:02:FA:D4:5A:22:D2:25
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 621F92FE7267E933B93F03615E257DF0F9189C2B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e20313337353634.roa
Signing time: Tue 30 May 2023 18:39:06 +0000
ROA not before: Tue 30 May 2023 18:34:06 +0000
ROA not after: Tue 28 May 2024 18:39:06 +0000
asID: 137564
IP address blocks: 157.254.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1f:92:fe:72:67:e9:33:b9:3f:03:61:5e:25:7d:f0:f9:18:9c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 30 18:34:06 2023 GMT
Not After : May 28 18:39:06 2024 GMT
Subject: CN=2DAFC89E437BB79462DD1D193502FAD45A22D225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:ea:c8:58:ce:8d:7b:f0:ff:b5:69:f0:a1:
ff:59:58:d1:51:9c:c7:4b:6a:6d:f7:63:a7:80:b0:
d1:af:a2:32:94:56:2c:7d:c3:f7:21:16:cd:e4:93:
d0:93:bf:2e:26:36:6e:84:e1:04:95:c1:78:56:da:
0b:80:c2:2c:ea:76:41:e3:ca:b3:07:85:f1:51:d3:
68:03:a3:60:ce:8e:55:3a:7d:07:ef:5a:65:f9:53:
14:67:e7:93:d6:2d:be:5a:01:72:11:b7:77:93:74:
69:c7:3c:29:af:06:bd:b7:0c:68:6c:ef:df:45:ca:
72:92:be:58:b0:68:e8:df:ee:de:47:57:d0:f6:4f:
a9:32:17:48:cc:1e:a3:03:62:a6:82:a5:0f:23:16:
16:b9:c5:6e:cb:7d:c5:3b:7c:97:d0:16:d1:b6:b0:
d0:46:0c:20:27:b2:11:31:4b:0e:85:04:a1:66:08:
64:99:c9:a3:13:42:16:c2:86:48:13:b3:80:60:75:
ce:ca:ee:f3:35:bb:c9:0f:c5:1b:9b:2c:21:30:75:
a0:13:42:a5:ff:d0:01:e9:b4:82:c0:39:55:65:c9:
63:93:75:88:e4:74:8e:11:28:eb:2a:48:27:12:83:
38:b7:7b:e6:da:63:62:73:77:5c:05:3d:23:c1:b5:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AF:C8:9E:43:7B:B7:94:62:DD:1D:19:35:02:FA:D4:5A:22:D2:25
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3132382e302f32322d3232203d3e20313337353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
70:51:d3:9d:56:10:4e:bc:9f:97:62:02:c1:bf:89:31:25:ab:
42:b4:f7:4c:8b:28:c8:f9:7d:a3:35:ae:76:ea:ae:27:70:05:
59:b0:7e:ac:65:2d:cb:39:cc:76:de:6e:1f:30:4e:e7:83:78:
bd:c0:d6:71:07:06:d5:db:ae:4a:af:3f:dc:a0:cc:19:0c:18:
e6:bf:bf:df:4f:1c:0c:96:9b:89:bd:f5:a5:61:ba:30:a0:36:
74:30:b0:7e:c1:9f:6e:79:f2:81:ec:fe:69:3e:2c:ea:40:74:
cd:d8:dc:20:21:ea:36:c6:b8:2b:79:06:dd:89:1a:53:bd:12:
9b:83:df:c5:9f:86:e7:ad:ad:d9:3f:59:b5:e3:fd:e8:a1:63:
dd:9a:15:e1:b1:71:38:c8:37:1c:0c:00:6c:f6:70:28:2c:1d:
6b:66:25:3b:3c:2f:ab:b2:b4:3a:c6:aa:7c:ce:3b:c5:8e:4e:
f9:f4:0b:6b:d2:61:1c:83:24:df:08:1c:49:e8:a4:48:b7:f7:
52:02:62:fd:3e:3a:83:0c:5d:bf:c3:9f:e8:03:5e:31:a9:2b:
2c:c6:e9:66:56:53:14:88:f7:89:83:3d:55:ed:5d:01:17:c9:
65:62:3b:74:eb:5e:30:bf:34:aa:ca:e8:27:1b:32:8b:c5:5f:
92:39:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org