Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323030343832.roa
File: 3135372e3235342e3135362e302f32342d3234203d3e20323030343832.roa (raw, json)
Hash identifier: kd5dOivJQRoGoH22EkekUf+XuiGp6kFFSVM2wiRcjRE=
Subject key identifier: 50:BE:9D:66:B4:5F:B2:95:39:E5:93:C9:52:74:10:CF:E9:A3:07:8C
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 792AE8DF13AAA2FECA1799B516F4866A98B0AF9D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323030343832.roa
Signing time: Wed 01 Feb 2023 15:44:26 +0000
ROA not before: Wed 01 Feb 2023 15:39:26 +0000
ROA not after: Wed 31 Jan 2024 15:44:26 +0000
asID: 200482
IP address blocks: 157.254.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2a:e8:df:13:aa:a2:fe:ca:17:99:b5:16:f4:86:6a:98:b0:af:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 1 15:39:26 2023 GMT
Not After : Jan 31 15:44:26 2024 GMT
Subject: CN=50BE9D66B45FB29539E593C9527410CFE9A3078C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:62:43:03:ab:a4:15:e5:e8:f1:7b:18:65:
89:8a:5b:da:64:58:43:0a:33:a6:8b:0f:d4:de:ae:
ec:c8:e7:cc:73:d5:1c:96:95:f5:d8:27:94:f0:0f:
01:e0:9e:02:89:ab:dd:9e:b8:d4:17:dd:66:d3:39:
a4:55:92:82:78:a2:d3:9e:5a:f4:e9:65:15:bd:19:
48:69:93:3b:62:82:2a:78:56:d4:bd:2b:dd:7d:8d:
e8:56:6a:70:dd:f4:e0:93:79:19:04:3d:7a:08:53:
e9:e0:91:a1:e0:43:a8:2a:6e:3e:f7:4d:ec:a3:a9:
d8:f7:3a:ab:3f:08:d5:b6:3d:48:78:b2:ea:c2:47:
7b:c5:ba:99:21:92:22:9c:83:a0:5a:e8:9d:e3:35:
5f:73:f7:6b:de:65:5e:82:3e:42:8e:f6:f0:17:68:
5b:26:6c:d8:88:5b:bc:6a:a3:a7:1b:62:79:d9:7d:
64:0d:5c:29:b1:ad:1d:4f:bf:d2:0a:4c:b5:f4:c1:
94:a2:4d:16:f0:c3:8b:38:10:5c:3d:8b:0d:cf:b9:
de:8d:31:7b:58:58:35:bf:44:89:78:98:0c:b2:c5:
6e:24:a9:c5:6a:c1:80:70:0c:27:63:f7:41:0c:4c:
6e:fa:fe:20:a5:c7:78:f9:34:dd:9d:6b:65:e8:c9:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BE:9D:66:B4:5F:B2:95:39:E5:93:C9:52:74:10:CF:E9:A3:07:8C
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135362e302f32342d3234203d3e20323030343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.156.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f8:30:84:59:af:3a:9d:e3:7c:f7:7d:e9:8d:b6:6e:ec:e3:
18:cd:da:93:eb:37:33:0f:fc:f3:2a:8e:bf:1e:b0:83:8e:5d:
1d:4f:96:72:d1:7c:52:3c:50:17:5a:4c:cc:d2:80:c6:cf:3c:
0b:22:c8:f9:36:5c:a8:f0:a9:93:9d:4d:8c:fc:09:77:26:0d:
7b:af:d0:24:4d:e1:5f:98:02:22:23:f7:00:11:9f:06:a1:be:
0c:82:97:a7:9e:69:dc:b1:e8:a4:f9:bc:83:ab:d2:85:4e:c4:
8a:13:a3:16:be:07:aa:42:66:c6:c3:0f:0a:ea:c0:41:36:54:
2d:08:b2:98:81:94:ce:b6:f0:18:d6:27:ab:37:77:00:6f:1b:
8a:61:54:21:6a:4b:23:a0:3a:5f:0c:5a:61:df:ba:c0:94:a8:
0e:76:6f:a8:20:3c:33:a8:10:5b:ea:cf:5d:31:74:64:a1:98:
db:85:8b:e7:78:3f:47:01:bf:a7:31:f1:83:01:2f:ba:fb:1a:
af:dd:8c:2e:b9:48:b4:78:7c:72:97:13:fa:08:06:ad:e5:35:
d8:56:55:37:52:48:42:1e:fc:a0:16:42:4f:58:2e:b9:97:11:
10:6f:76:a0:eb:1c:5c:78:00:80:24:7e:4c:fc:2f:88:3a:6e:
e4:6d:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org