Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa
File: 3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier: 922Tz4/YG+fvcb/c0rBvTuBrCJvyzsMOe6QsQIYy3f4=
Subject key identifier: 06:69:5E:B6:CE:9E:6A:DD:4A:7F:22:DF:69:2F:80:4B:1C:EA:E6:0C
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2ED836BD9565CEA0220C1645227D40D026255661
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa
Signing time: Fri 30 Dec 2022 19:54:19 +0000
ROA not before: Fri 30 Dec 2022 19:49:19 +0000
ROA not after: Fri 29 Dec 2023 19:54:19 +0000
asID: 396356
IP address blocks: 157.254.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d8:36:bd:95:65:ce:a0:22:0c:16:45:22:7d:40:d0:26:25:56:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 30 19:49:19 2022 GMT
Not After : Dec 29 19:54:19 2023 GMT
Subject: CN=06695EB6CE9E6ADD4A7F22DF692F804B1CEAE60C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:60:ae:b2:c1:87:02:52:63:db:72:75:3b:
6f:98:49:83:33:fa:b4:08:96:5e:36:26:e5:d2:b9:
d3:f0:98:70:7d:4b:b5:05:14:ac:ef:d2:be:93:2d:
d9:1b:da:eb:c9:43:f4:d8:94:f2:72:7e:ca:98:8c:
82:9f:3d:42:a9:cf:e4:3a:46:f8:91:f0:6e:80:ee:
47:2b:ba:18:cb:08:86:5f:07:31:ff:39:14:6a:43:
f5:a8:c9:ab:86:98:47:94:de:59:e0:b2:21:97:71:
06:2c:c8:60:07:be:59:0a:41:a0:85:19:54:e8:46:
51:15:27:a1:71:14:4f:46:26:57:1d:f8:99:cd:6a:
77:44:91:69:ab:75:a1:31:e8:bf:52:8d:8e:59:02:
de:89:a2:13:df:df:99:a8:c5:ce:ad:49:b5:2c:91:
62:ec:a6:a9:f2:fc:6e:82:6d:e1:ee:71:65:81:c7:
cf:01:c4:4b:41:07:f8:a9:00:dd:bd:d7:a8:1b:c1:
b0:d1:e8:ee:98:15:9e:f0:41:b4:a6:ce:0f:45:01:
f9:2d:44:9c:85:c1:48:fc:7a:9d:95:e7:7e:cd:5d:
2a:17:00:31:ba:a9:72:93:ac:98:06:de:29:d7:5f:
36:5c:78:a7:95:ac:35:2f:60:98:d7:99:e1:8b:b2:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:5E:B6:CE:9E:6A:DD:4A:7F:22:DF:69:2F:80:4B:1C:EA:E6:0C
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3137332e302f32342d3234203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b4:fe:1d:27:89:ff:c5:cd:07:a9:84:77:47:1b:9d:07:75:
ff:e4:84:96:57:9c:dc:64:cb:da:91:e5:fb:0e:70:22:5a:cf:
5a:4c:83:53:bb:77:3c:5d:d1:f2:0d:5f:bd:1c:88:b7:96:f7:
45:54:37:ad:f4:b8:1b:88:8f:cb:a4:17:a9:53:6b:79:23:30:
1f:d5:b1:e5:8b:f6:45:ae:8b:d2:65:68:14:47:b4:3e:03:56:
aa:de:bc:b2:27:63:7d:1c:38:6c:76:08:79:b5:f1:8b:9f:68:
69:11:4d:00:aa:33:1c:a0:00:59:ca:de:7f:33:56:7a:0e:54:
8a:b3:38:3e:a3:3b:22:3c:ab:88:aa:82:93:f6:d3:7b:3e:fa:
da:7c:47:f4:b6:14:80:f4:5d:be:27:8a:db:7f:74:22:9b:00:
b6:35:6f:16:4d:a7:cb:c4:57:b7:c2:78:00:5c:d6:5e:3f:c8:
16:05:c8:58:ed:db:41:f5:fb:6f:3c:41:a8:43:14:8f:83:25:
97:df:8c:a9:29:42:16:a6:5a:a4:13:4d:3a:20:ef:49:bf:da:
83:82:45:1b:6e:44:6c:8c:12:68:d6:b2:90:e3:29:a0:5c:f1:
c0:30:8a:47:97:ed:59:9d:01:4e:19:a5:04:7d:cd:0d:d8:be:
07:08:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org