Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa
File: 3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: TqAE/kGYGBQ73VJAE2wGoHoCgT+a44bQ9/iMiC8ZWOI=
Subject key identifier: 6F:DC:8C:0B:AD:71:17:0D:D8:7C:94:8F:4C:C4:4C:08:12:FE:3C:0F
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 30485D7C0C4208A4D4F4E834CDA77F72FFF92533
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa
Signing time: Sun 30 Apr 2023 13:58:41 +0000
ROA not before: Sun 30 Apr 2023 13:53:41 +0000
ROA not after: Sun 28 Apr 2024 13:58:41 +0000
asID: 61317
IP address blocks: 157.254.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:48:5d:7c:0c:42:08:a4:d4:f4:e8:34:cd:a7:7f:72:ff:f9:25:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 30 13:53:41 2023 GMT
Not After : Apr 28 13:58:41 2024 GMT
Subject: CN=6FDC8C0BAD71170DD87C948F4CC44C0812FE3C0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8a:72:69:6e:8a:e2:58:b7:2d:3b:78:bb:d1:
92:9e:7a:6b:3b:e9:b8:08:8b:0c:d0:29:eb:27:a9:
24:0b:3d:a1:c5:41:ab:c4:08:93:5e:d1:59:3c:ed:
78:ff:0d:3e:bb:9d:68:85:db:51:7f:4e:7f:ee:12:
a3:e7:dd:a5:97:76:a6:2b:04:cd:9d:c2:3e:63:64:
e4:2f:52:9f:1c:f5:f7:db:d5:2b:06:98:9d:61:41:
42:11:de:5f:54:20:ef:03:ba:79:b6:0e:b6:96:64:
9e:47:75:84:2c:95:53:6a:50:c4:41:9a:f1:84:71:
78:9a:59:d8:79:e9:16:4c:88:d4:8b:f3:bb:be:9b:
f5:00:53:df:18:44:09:47:7e:34:7f:5a:2a:7c:42:
df:17:5b:af:c8:2c:74:fa:ac:b9:b3:0d:11:0c:eb:
ad:77:49:7d:85:39:61:a5:64:b3:07:1d:a1:ee:ad:
cd:95:63:61:66:f2:34:24:28:63:c8:b9:a2:94:33:
d7:ba:56:54:81:d0:2d:b8:89:42:7a:ac:da:7f:20:
29:eb:04:2b:bf:ec:03:12:4a:29:49:a3:35:63:46:
50:18:64:50:80:36:f1:d4:29:8b:69:18:c2:8b:0f:
42:34:4a:6b:9a:59:3d:d1:83:c3:1e:9f:d8:ce:c2:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:8C:0B:AD:71:17:0D:D8:7C:94:8F:4C:C4:4C:08:12:FE:3C:0F
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136322e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.162.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:00:9c:0b:3b:cf:63:80:78:15:ec:19:15:d2:4a:19:09:73:
1c:0d:06:d6:a4:67:68:86:78:eb:5e:b2:d8:77:44:be:9b:26:
a5:42:9f:d4:ba:29:76:4b:32:70:50:91:26:5c:0c:a0:9c:fd:
b5:15:79:d3:92:8b:a4:01:6b:05:a9:c0:ee:b5:99:ad:b6:2d:
d2:4f:f6:ef:71:b1:de:c7:3d:2c:4d:96:9b:ed:0e:89:33:1a:
fa:29:08:3a:65:be:82:ba:b1:ea:e3:eb:48:d6:50:52:54:d1:
af:26:53:3b:c7:e9:5c:e1:8f:38:80:65:d0:ee:8b:36:34:dd:
93:07:da:82:81:ce:8b:9d:c1:52:9f:5e:dd:50:f9:5b:c2:36:
6f:c6:93:be:49:eb:75:f6:6d:ab:2c:0f:ca:cf:62:d4:b6:a2:
2c:0a:05:a4:44:6d:73:f4:a2:90:17:31:a8:ed:4e:d5:b6:d3:
94:9d:f0:b0:87:5e:5f:69:87:0b:a8:64:26:e6:4c:31:ba:91:
3f:72:38:93:ee:41:36:ac:63:4a:b1:ed:a1:72:e7:cc:15:a0:
d4:30:50:83:d6:e7:54:ce:9e:ed:25:42:37:c4:76:e7:4d:57:
d9:52:0b:c6:eb:77:1d:0b:fc:a6:87:67:f9:59:a6:a9:d0:1d:
f1:e0:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org