Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136372e302f32342d3234203d3e20323036303932.roa
File: 3135372e3235342e3136372e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier: YkE74txTTGSla7TinIg1egeA9aRyPTi1pTnaxOpEcnw=
Subject key identifier: BF:39:E1:82:18:57:78:DA:C2:8B:03:CA:C1:35:2C:1E:DE:71:AE:96
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 6B468A675E6509F902ADFEBA40FA938487C8506C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136372e302f32342d3234203d3e20323036303932.roa
Signing time: Fri 30 Dec 2022 19:54:18 +0000
ROA not before: Fri 30 Dec 2022 19:49:18 +0000
ROA not after: Fri 29 Dec 2023 19:54:18 +0000
asID: 206092
IP address blocks: 157.254.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:46:8a:67:5e:65:09:f9:02:ad:fe:ba:40:fa:93:84:87:c8:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 30 19:49:18 2022 GMT
Not After : Dec 29 19:54:18 2023 GMT
Subject: CN=BF39E182185778DAC28B03CAC1352C1EDE71AE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:1d:51:3c:9b:25:b8:b7:f5:f7:39:a8:52:
f7:f3:14:47:98:05:d5:8a:3a:24:26:60:7e:50:c9:
13:58:fc:63:57:15:1e:af:31:69:94:d8:14:09:1f:
42:10:b2:03:d8:30:d4:75:43:5e:5a:c9:7a:2d:fb:
a3:68:9e:f1:e2:9e:fc:83:1e:79:71:a5:00:bf:55:
45:33:25:0e:9e:17:c1:f2:36:1e:e5:63:f9:96:18:
c3:f8:76:6f:4f:05:3e:f1:0d:12:2a:2a:6d:ac:60:
ef:76:cb:57:2d:f2:87:86:5a:bb:98:55:31:5e:66:
ad:49:ad:cf:d0:2f:cc:c3:cc:be:f8:31:5f:79:ca:
96:13:1e:9f:81:b7:9f:64:e2:1b:2e:b5:c6:77:95:
19:51:ff:8e:82:3e:df:a8:84:66:15:83:90:6b:92:
f9:23:7f:4f:1b:20:4b:67:88:1e:ac:34:42:0b:1a:
17:a6:4a:57:25:76:6e:23:fa:05:13:ff:f7:52:bd:
1e:7c:25:da:73:c5:56:23:1e:b9:46:1e:8d:3e:1c:
f5:b0:26:22:b7:98:7c:85:bc:7e:db:9b:66:66:2d:
17:31:cb:fe:d8:1d:d0:fa:aa:41:76:4e:28:03:e1:
16:e4:a4:8d:bd:36:b3:76:21:7c:29:ec:9a:10:97:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:E1:82:18:57:78:DA:C2:8B:03:CA:C1:35:2C:1E:DE:71:AE:96
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3136372e302f32342d3234203d3e20323036303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.167.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ac:87:0e:3a:34:94:6e:05:1e:29:ac:8c:04:18:3c:3f:a2:
1b:3d:b0:4d:05:f5:fa:a8:af:b8:28:38:9b:c8:2b:88:82:8b:
f0:8d:82:f5:e7:29:fa:4a:9b:53:1e:00:92:7a:66:53:31:5c:
72:f9:3c:68:52:31:c9:e1:25:58:11:48:45:55:57:fb:f2:be:
7e:30:59:b3:44:7e:c8:b2:1b:94:b6:2f:a2:5a:87:19:c4:cf:
70:76:b6:e1:c1:03:51:c7:19:10:af:3c:27:b8:71:bd:fc:dd:
f2:9b:8e:fa:dd:92:f6:19:10:a5:ac:c7:f7:bd:27:7b:0b:8e:
94:aa:6a:43:77:48:27:a7:85:ad:19:9a:6d:b9:a3:08:8c:be:
69:cb:e6:aa:97:8e:b8:1d:63:9a:e0:e8:db:9a:9b:82:f5:e8:
90:2a:7a:fe:39:d2:fe:93:08:64:7b:da:b0:8e:6f:ea:53:52:
4c:37:32:11:ef:a2:b0:a8:f5:19:9b:cd:11:56:9b:46:06:28:
38:69:94:09:99:f6:35:8f:c8:b2:84:de:c3:fb:23:ba:3f:9b:
b4:be:7d:57:d2:a5:b4:2e:fa:f3:a3:49:49:c4:02:96:3d:52:
fd:6a:95:4c:05:71:89:1b:1d:05:ca:47:9b:80:95:20:50:4f:
48:a6:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org