Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135372e302f32342d3234203d3e20323132363039.roa
File: 3135372e3235342e3135372e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: N3xb/c8v+eYJIr08BqCGvQx+GzqH4ooxG8dmmBsEEjU=
Subject key identifier: 55:0B:43:E7:38:C6:19:12:92:AF:D9:81:7C:C8:77:BE:FA:E5:1F:F3
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4F63B718568120F7D0356231431232478463DB76
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135372e302f32342d3234203d3e20323132363039.roa
Signing time: Fri 30 Dec 2022 19:54:17 +0000
ROA not before: Fri 30 Dec 2022 19:49:17 +0000
ROA not after: Fri 29 Dec 2023 19:54:17 +0000
asID: 212609
IP address blocks: 157.254.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:63:b7:18:56:81:20:f7:d0:35:62:31:43:12:32:47:84:63:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 30 19:49:17 2022 GMT
Not After : Dec 29 19:54:17 2023 GMT
Subject: CN=550B43E738C6191292AFD9817CC877BEFAE51FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:f4:94:97:4b:c2:0f:9a:44:0f:9a:2c:bd:
fc:ca:f4:cc:f1:5d:cb:9c:cc:b0:2f:42:b5:8c:e4:
53:ac:cb:6a:dc:5d:f0:4b:29:e6:9e:21:e9:b5:6a:
76:2d:71:af:78:be:b9:d0:5d:62:f0:c1:4d:7f:51:
c8:6f:c1:80:30:be:a4:70:e7:fb:7b:cf:b2:fa:87:
98:2c:c7:5b:3e:a9:31:cf:f7:77:51:4f:e0:c6:a2:
e4:fa:b9:05:2a:ab:d2:e7:ee:b8:66:31:92:13:97:
bb:3e:70:7f:c0:10:73:20:32:ba:12:cd:a7:3b:ad:
3d:43:1a:9a:64:fa:00:a4:3c:92:a1:c8:66:22:c6:
ec:ae:23:dd:49:0c:cc:32:d5:cc:13:42:46:68:95:
df:2c:dc:60:4b:c8:d3:90:d0:73:8a:af:ab:da:b2:
6c:8e:6b:57:30:6d:6b:e7:62:38:34:d0:27:69:97:
8b:bc:7a:86:00:83:11:c2:61:14:ec:7b:7f:ae:06:
9e:77:bf:20:be:62:fc:64:c6:3d:e5:11:20:5d:e6:
5d:b6:97:f3:58:f5:fc:78:24:eb:35:fa:cd:0f:0d:
5d:89:e5:38:83:ea:41:83:13:6d:3e:de:64:f1:51:
4c:b4:a7:5c:49:3e:0c:d7:59:ad:ce:d0:14:ec:35:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:43:E7:38:C6:19:12:92:AF:D9:81:7C:C8:77:BE:FA:E5:1F:F3
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3135372e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.157.0/24
Signature Algorithm: sha256WithRSAEncryption
88:38:af:f9:a0:5e:0a:c1:94:55:ed:c0:39:c4:55:16:98:bd:
7e:7d:3f:17:19:59:90:28:b5:71:77:e0:35:7a:a4:fa:6e:4a:
68:d0:c4:ff:d2:d8:f2:79:44:aa:73:8e:bc:c6:e7:63:3c:76:
e9:dd:6f:f5:a2:3b:89:47:93:d8:cb:7b:c8:d8:52:33:5d:ac:
ef:4e:6d:a9:f6:b6:6c:3b:f5:a1:f4:3b:a9:cc:82:59:1c:23:
1a:f5:d4:c6:81:be:fb:31:c0:ce:6d:48:54:34:ba:e4:28:38:
83:03:8d:03:e1:93:28:2c:8e:fc:e1:fb:46:51:8a:d4:d2:7c:
eb:b1:73:d4:00:e2:84:94:30:63:44:e7:2b:ee:02:73:a3:e0:
d1:64:37:dc:6d:24:07:b3:c3:7f:29:0a:7d:f1:8a:e9:d2:9d:
4b:8f:c7:a6:a3:37:0f:15:7a:0c:0f:e3:7d:00:c6:62:56:5d:
c4:72:e9:b7:e3:56:2a:75:6c:a0:67:f3:b7:d2:c8:11:3e:ff:
5f:6c:d9:93:6c:9e:dc:14:c2:ba:4a:a5:01:26:35:d5:e9:b1:
9d:1f:7b:82:d1:c1:a3:9a:0c:a1:df:d1:97:7e:ef:2a:b5:d5:
3a:ce:65:77:a5:3d:14:31:69:9d:52:fd:80:0a:a8:64:f4:5b:
c6:15:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org