Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136342e302f32332d3234203d3e20333939343836.roa
File: 3135372e3235342e3136342e302f32332d3234203d3e20333939343836.roa (raw, json)
Hash identifier: DeKwx89f/wPNxfDJ2DdFKZ0Htz1Dv9tCy3zI9ZmUOvo=
Subject key identifier: D0:9E:83:1F:B8:AE:33:88:7F:22:ED:DC:E1:15:5B:E2:3A:66:20:E3
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 76F210B8512A4EC4C86D0638ACB69550834B558A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136342e302f32332d3234203d3e20333939343836.roa
Signing time: Mon 06 Mar 2023 14:18:59 +0000
ROA not before: Mon 06 Mar 2023 14:13:59 +0000
ROA not after: Mon 04 Mar 2024 14:18:59 +0000
asID: 399486
IP address blocks: 157.254.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f2:10:b8:51:2a:4e:c4:c8:6d:06:38:ac:b6:95:50:83:4b:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 6 14:13:59 2023 GMT
Not After : Mar 4 14:18:59 2024 GMT
Subject: CN=D09E831FB8AE33887F22EDDCE1155BE23A6620E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9e:80:d3:ec:7e:17:2f:70:d6:40:b5:61:1e:
cd:d4:9d:94:54:73:80:b8:0a:32:80:33:70:2a:08:
f2:bf:bd:0f:01:44:19:2f:43:2c:02:1c:23:5b:b2:
4b:a6:4d:18:58:fa:a8:97:d8:4b:96:44:c2:a7:89:
8c:c1:41:6f:eb:8d:9c:da:32:9f:3c:d8:1c:9e:40:
e1:a2:16:f8:ab:9b:22:34:66:41:cf:26:d5:f5:de:
31:4b:e3:49:96:06:52:d8:d6:d4:50:83:35:da:94:
8d:5b:45:67:ee:b7:a6:3f:ca:78:10:95:ba:b5:09:
b9:18:2d:af:27:25:15:7d:cf:92:4d:2e:38:8e:97:
c1:c1:ef:47:09:8a:99:ac:b8:6b:dd:f3:2f:14:a4:
eb:d6:03:47:cf:8b:87:b7:cb:5c:64:61:0c:90:27:
ca:5a:03:1b:27:12:cf:d5:e9:5e:05:48:d9:7a:59:
b8:f2:23:10:99:6b:ab:07:35:a5:f7:8a:b7:fd:4b:
ea:22:7a:e0:6e:ba:2a:dc:f0:c4:ec:40:2e:12:eb:
bd:98:ee:b8:09:82:1f:74:37:13:77:18:a4:75:26:
1f:4d:a4:7f:18:09:e1:8c:b7:97:52:db:c9:7f:01:
ad:a8:63:90:c0:e8:9c:01:e4:da:db:b9:a6:b9:9a:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:83:1F:B8:AE:33:88:7F:22:ED:DC:E1:15:5B:E2:3A:66:20:E3
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136342e302f32332d3234203d3e20333939343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.164.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:d5:86:9f:9e:a3:ea:f6:a5:63:5c:8d:3b:74:2a:5a:75:87:
8f:21:53:85:a2:bf:83:fa:92:48:86:9b:a3:1b:d7:47:25:5e:
16:46:8e:f4:13:d1:ae:aa:3b:03:b9:1a:16:5b:fd:4a:64:7d:
5c:28:e4:6f:ba:91:2e:75:62:06:16:b4:62:66:b9:e3:67:78:
ca:61:a3:cb:e9:11:7e:84:6f:b2:53:62:8d:93:94:bf:72:e6:
58:75:e4:6c:79:4c:55:21:e2:5d:1c:c5:8f:2a:a9:7c:a9:a7:
47:62:9e:6b:be:45:db:7f:b6:97:2e:56:e3:d5:ab:37:31:76:
9c:80:ea:f7:5d:c1:7f:b9:61:20:31:58:c5:b2:cc:48:d4:de:
86:f8:56:b1:a4:f0:c1:3c:40:a4:fb:7d:05:72:b8:3a:21:70:
13:ff:17:79:d4:9f:79:f3:56:db:f1:a7:1d:84:f4:1e:41:cc:
a0:ce:57:19:e7:e6:fd:1b:5f:85:0e:b5:fc:ec:1d:21:33:e8:
0a:8a:ca:8c:0f:d9:e1:c7:5d:bb:eb:4d:15:34:c6:84:9c:e3:
c1:41:32:71:92:12:12:ab:e9:75:41:82:9e:ab:90:b1:97:fb:
81:80:3b:e2:f1:60:63:3a:80:83:38:f7:b9:5d:84:01:fb:45:
80:3e:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org