Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32332d3234203d3e20333936393938.roa
File: 3135372e3235342e3136362e302f32332d3234203d3e20333936393938.roa (raw, json)
Hash identifier: auJ036B3NduaGU07fNS1dcIzXEoRD1jxbxAT7En8IPI=
Subject key identifier: 9C:57:5D:4D:D1:B2:DA:55:5F:F6:7C:DB:17:02:93:D2:17:09:B2:9C
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 0AE753F5AD81F78AA942DFA2F0633BEC7A73694F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32332d3234203d3e20333936393938.roa
Signing time: Sat 01 Apr 2023 17:13:10 +0000
ROA not before: Sat 01 Apr 2023 17:08:10 +0000
ROA not after: Sat 30 Mar 2024 17:13:10 +0000
asID: 396998
IP address blocks: 157.254.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e7:53:f5:ad:81:f7:8a:a9:42:df:a2:f0:63:3b:ec:7a:73:69:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 1 17:08:10 2023 GMT
Not After : Mar 30 17:13:10 2024 GMT
Subject: CN=9C575D4DD1B2DA555FF67CDB170293D21709B29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:71:98:16:c3:97:40:0f:eb:d0:2a:95:4f:
d9:a6:a5:62:c3:8c:91:fb:02:bf:01:d5:61:2c:38:
5d:08:f7:2c:fe:1a:62:65:c9:46:3c:e9:95:48:22:
ef:e9:e0:f9:78:38:e2:b2:c9:3b:c2:e4:c8:2e:68:
fd:23:75:18:af:3f:20:4c:31:3c:d7:c6:f4:11:ff:
de:7b:f9:20:56:40:ae:f3:91:6a:2e:59:eb:7d:8c:
31:71:e1:47:11:51:3a:3a:b7:e5:d0:68:78:e0:8f:
b6:e8:5c:40:4d:69:c3:c9:76:e2:e9:a4:11:8f:dc:
92:9c:e0:e7:de:bf:83:02:36:2f:41:a2:f8:f7:55:
8c:a3:cb:96:12:cc:ba:60:31:da:38:a5:dd:8c:93:
85:72:ca:05:0e:db:2a:37:01:bd:27:e7:03:28:ef:
6a:54:68:b3:c3:8b:4c:a3:89:f1:dd:76:82:4a:8f:
cf:f1:9b:ad:b2:61:a6:61:7c:f8:a9:02:4a:39:14:
66:e0:47:61:10:c2:c3:bc:87:91:69:b9:38:6c:08:
db:0a:a6:fb:b2:6b:dd:8b:c3:8e:1f:72:ca:29:9b:
8a:38:82:27:40:11:95:f8:bf:11:1d:50:f5:2b:c5:
bd:fa:c6:02:ca:8c:a7:85:b7:6a:81:b1:1b:b5:c8:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:5D:4D:D1:B2:DA:55:5F:F6:7C:DB:17:02:93:D2:17:09:B2:9C
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136362e302f32332d3234203d3e20333936393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.166.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a9:6f:f6:b1:58:33:3d:0f:f6:01:b8:83:37:bb:c1:73:90:
90:45:ca:21:f1:af:43:28:c6:46:01:6e:4f:3e:70:e2:d1:e3:
66:1b:b2:2d:18:ab:c1:85:58:d4:93:10:40:2a:c4:21:3f:2c:
37:09:fa:06:df:4c:ce:9a:e5:26:b1:29:c7:f3:99:72:2f:75:
22:9d:75:e2:af:dd:18:5e:fa:4c:02:16:5a:8a:51:b3:f1:cb:
17:d4:6c:d4:89:8e:73:d6:d4:0f:53:ab:0b:89:77:99:7a:57:
4f:db:ee:55:b1:60:9a:5f:bf:d1:e8:36:72:ce:08:d5:cb:b2:
e0:94:14:a4:e5:58:7c:bd:84:61:0f:0e:84:27:65:e4:b6:c3:
cd:f0:51:d8:5a:9e:3c:79:c5:2a:42:a5:f7:c8:e5:fd:ef:8b:
9c:50:e2:1c:f5:39:b5:95:61:4c:8c:8d:61:2e:06:ba:ab:8d:
c9:03:17:db:6b:7a:47:d7:af:72:ce:cd:60:11:e9:ae:88:2b:
12:34:36:2b:55:0c:25:09:d5:ad:97:eb:38:5e:b6:32:51:9c:
54:35:20:64:b7:3b:e6:30:48:9d:a2:e8:29:fe:23:19:ea:14:
3c:17:b9:21:3d:9e:8e:7b:f7:08:13:fb:d5:46:70:74:43:53:
90:e4:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org