Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203439393939.roa
File: 3135372e3235342e3137312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: lQjeh63YVcSy/mpC1mOj6f2r2H2iS9bMf7G2uHJJe/g=
Subject key identifier: 1F:6C:42:65:0D:59:FE:3A:E3:AB:B1:10:87:08:D6:4D:4B:8E:11:E7
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 04F99A8A7EBB000CA7AA86093380353ACCA7BE56
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203439393939.roa
Signing time: Thu 09 Feb 2023 10:20:37 +0000
ROA not before: Thu 09 Feb 2023 10:15:37 +0000
ROA not after: Thu 08 Feb 2024 10:20:37 +0000
asID: 49999
IP address blocks: 157.254.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f9:9a:8a:7e:bb:00:0c:a7:aa:86:09:33:80:35:3a:cc:a7:be:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 9 10:15:37 2023 GMT
Not After : Feb 8 10:20:37 2024 GMT
Subject: CN=1F6C42650D59FE3AE3ABB1108708D64D4B8E11E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:f2:d0:5d:98:fa:61:4d:ce:68:78:1d:98:
f6:53:10:13:dd:d7:48:88:36:f7:57:66:14:af:f6:
66:1f:ba:98:a8:5e:2d:9f:92:f4:ba:fc:b1:8a:a1:
70:0a:f4:11:76:54:4b:81:99:c3:e8:24:72:ea:1a:
5f:e0:b4:75:08:b7:4a:c7:72:92:10:47:83:a8:27:
08:cc:94:12:e6:88:a0:2a:0f:46:76:9c:22:87:f9:
aa:48:c6:10:d9:f5:ae:8f:26:2d:98:b8:28:df:c9:
e6:65:23:10:e9:c8:a7:61:45:52:80:8e:80:97:ba:
55:84:b1:0b:33:7f:b2:72:11:62:9b:c3:45:47:4d:
d1:73:ec:68:cf:ed:f7:71:a3:59:cd:1c:97:8d:8d:
91:2f:9d:c3:79:25:eb:59:3f:4f:9d:85:a2:2d:fd:
f4:dc:d1:be:22:73:e9:4d:39:f5:73:40:e6:b0:0e:
73:14:f5:12:c4:6a:51:00:c5:6d:ba:80:64:02:14:
4d:c8:73:0f:09:e7:37:28:08:e6:fd:a8:41:22:5b:
c2:aa:bf:de:a2:76:13:6b:50:fa:98:a8:8a:82:b6:
c9:7b:65:84:fc:9c:d7:a7:a5:90:dd:f0:32:6d:cc:
9e:8b:05:41:5d:d1:e7:25:e6:66:17:fd:8b:66:1a:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:42:65:0D:59:FE:3A:E3:AB:B1:10:87:08:D6:4D:4B:8E:11:E7
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137312e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:93:3d:21:dc:53:c6:a5:ed:22:d5:91:8d:5d:29:f2:f2:62:
06:fd:10:ea:b4:91:c8:02:a1:59:70:88:59:f6:49:d1:34:02:
bf:d4:40:5b:c5:4f:09:32:43:36:c6:86:47:21:86:b3:d2:75:
c0:05:f8:e7:c6:ca:75:16:1e:8e:17:da:67:38:83:9b:8f:60:
2a:86:3f:a0:68:c8:63:69:e0:0a:a2:14:6c:6f:8f:9b:28:10:
1c:ee:9c:93:1f:1c:80:0a:de:72:c2:5e:54:2a:54:c3:ad:b0:
7d:6e:0c:9c:c2:58:33:42:48:03:3b:f0:aa:19:ea:6c:4e:ca:
c1:ef:a5:75:dc:40:a0:d2:f6:73:d8:01:9f:11:cd:cd:7e:ec:
52:a1:95:ed:69:ac:47:67:0b:a1:25:5f:10:f8:d7:3f:4a:7f:
37:90:6d:fd:cb:f7:8e:8b:14:3d:82:e3:af:f0:69:a6:e8:ec:
02:cb:84:2c:2a:a2:bc:e4:3b:59:5a:95:78:2e:a0:f8:dc:01:
f2:bc:99:89:0c:14:97:60:a7:1c:8e:65:2e:f1:7f:7a:88:ef:
c3:ef:01:79:23:69:fc:4d:73:b6:1b:40:46:a2:b3:6f:06:68:
22:da:39:30:1d:45:da:18:2e:28:a1:c8:d4:b4:bc:f8:4c:64:
4c:9e:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org