Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20343030373538.roa
File: 3135372e3235342e3137312e302f32342d3234203d3e20343030373538.roa (raw, json)
Hash identifier: QsgqNXB3APVSni7VFG0/hNycraAwYTSE1BAODbSvZTA=
Subject key identifier: 09:87:63:2D:E7:7C:35:6A:19:EC:BB:45:20:FC:D9:33:77:77:14:D1
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 753A5ACD7D4D6947E9D08BA3A1AC027AB525B6A5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20343030373538.roa
Signing time: Thu 09 Mar 2023 20:35:53 +0000
ROA not before: Thu 09 Mar 2023 20:30:53 +0000
ROA not after: Thu 07 Mar 2024 20:35:53 +0000
asID: 400758
IP address blocks: 157.254.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3a:5a:cd:7d:4d:69:47:e9:d0:8b:a3:a1:ac:02:7a:b5:25:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 9 20:30:53 2023 GMT
Not After : Mar 7 20:35:53 2024 GMT
Subject: CN=0987632DE77C356A19ECBB4520FCD933777714D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:d0:23:40:05:73:43:74:3a:a2:10:5f:c7:
c5:30:e5:09:7c:4a:f9:f0:f8:ee:a9:ff:ae:79:be:
16:b3:d7:31:d7:00:ef:9c:28:a8:8d:5d:48:79:22:
da:79:0c:2a:6b:cb:50:9a:4e:ee:23:4b:4a:27:aa:
db:b1:a1:84:aa:6f:b8:21:dc:ed:ef:a1:0f:ae:e2:
93:41:b0:7f:b6:db:fc:58:c5:d7:e0:d6:fa:fb:5e:
39:e5:70:0f:7a:92:e8:bd:12:ad:7b:5d:11:27:76:
4f:13:6a:2f:db:ae:c2:43:d3:67:e2:04:fa:d5:03:
57:50:f1:e2:79:8f:55:3b:fe:84:64:ac:c3:54:e2:
b2:74:6d:e7:80:90:11:9b:ae:b4:09:86:16:0d:72:
4b:14:b2:59:95:00:27:86:78:61:2e:d5:6c:6c:28:
4e:34:a1:9e:d9:36:25:3c:85:34:8c:7b:06:26:d1:
77:4e:61:76:87:3f:26:ab:3f:ff:24:ba:6a:42:9d:
b7:7c:9b:16:07:56:8c:b3:47:59:b1:1a:3b:31:88:
12:7f:fd:53:71:e9:14:8e:8f:3c:6e:e3:6e:c8:be:
dd:9c:c8:5c:c7:17:38:86:af:c2:b0:f7:84:16:f1:
04:4a:09:13:69:ae:4e:c7:32:2c:eb:5d:72:ac:c0:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:63:2D:E7:7C:35:6A:19:EC:BB:45:20:FC:D9:33:77:77:14:D1
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e20343030373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a4:57:53:92:59:fc:f8:2f:aa:e4:cf:80:26:d8:35:9e:c2:
0a:a6:b2:c0:f7:fb:d9:6c:71:09:da:a7:e4:6a:30:f9:02:f4:
fe:ac:ca:ed:27:da:90:a2:21:31:54:13:ac:da:3e:21:4b:f4:
b7:60:76:6d:73:1f:75:ea:56:b0:c1:e0:e7:1c:db:07:0b:20:
57:88:f5:0d:a7:77:b1:8d:b2:7f:9d:33:ec:c8:9f:0d:8f:69:
34:66:35:2a:6b:94:9a:21:f8:d2:c7:07:e5:81:ca:25:65:e7:
0d:9b:50:15:95:00:05:90:62:b1:76:d5:90:ef:75:32:10:07:
ab:c1:e3:7b:a6:cf:75:8d:d6:e5:54:d8:83:11:c2:c1:c1:f9:
e7:3a:3f:cc:77:1d:5f:f7:db:48:40:81:e8:74:21:a5:77:5e:
f0:5f:07:d5:9c:42:d2:18:c0:d3:b1:58:5b:9e:42:f4:80:8d:
09:b8:0f:ec:46:d0:03:5f:ba:11:3a:71:d6:31:ce:b1:51:01:
97:d0:71:76:db:c2:4a:9c:53:27:74:d8:4b:59:e3:9a:24:7b:
48:2e:28:2c:56:23:99:1a:b3:3c:16:0a:e4:a2:d4:f8:ff:a5:
5c:4d:99:ed:b0:59:51:cc:cb:c1:2d:b0:97:52:4d:11:9d:12:
f1:07:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org