Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e2033333230.roa
File: 3135372e3235342e3231372e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: Z/HyjnoHFdtz8mBsC9q5PZUvtuM3BCrJ1Pj7D4ekaU4=
Subject key identifier: 52:68:AA:EA:CD:85:49:2D:8F:7C:72:EF:4F:05:B4:AA:3A:8D:2A:9E
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1C74E7E7A7356BD0F1AD89BFC907334F53C687DA
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e2033333230.roa
Signing time: Sat 05 Aug 2023 15:43:51 +0000
ROA not before: Sat 05 Aug 2023 15:38:51 +0000
ROA not after: Sat 03 Aug 2024 15:43:51 +0000
asID: 3320
IP address blocks: 157.254.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:74:e7:e7:a7:35:6b:d0:f1:ad:89:bf:c9:07:33:4f:53:c6:87:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 5 15:38:51 2023 GMT
Not After : Aug 3 15:43:51 2024 GMT
Subject: CN=5268AAEACD85492D8F7C72EF4F05B4AA3A8D2A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:d8:dd:d6:81:31:43:08:44:01:95:64:8d:
f9:23:23:b6:75:87:2d:3d:64:18:5a:ff:2f:28:92:
d5:34:d1:f3:08:1a:9e:a2:4d:f4:8e:07:14:a6:9d:
07:c6:ee:27:52:0c:c9:b2:51:c1:d7:71:d5:67:ce:
08:09:07:b5:68:70:2e:84:b6:6d:24:58:bb:2d:e0:
76:2b:4c:27:01:1f:b7:7a:f0:96:e4:e1:cc:70:88:
99:4f:f7:f6:e7:b5:c6:0e:a7:ce:bd:e1:3b:4a:03:
07:98:67:50:f5:9d:c4:5f:cc:c1:dc:89:d1:0e:0e:
3e:9d:cd:9b:a4:f4:84:40:30:da:4f:f1:cf:a3:28:
ad:ac:9f:29:f4:bf:82:3a:cc:9b:d7:9b:1e:b5:99:
58:50:79:d1:80:2c:af:c3:ef:8b:58:9a:e7:91:39:
f2:a5:1c:bd:41:8c:ae:9e:07:f0:28:97:b9:f8:86:
e2:14:df:ef:71:c9:6d:2a:0b:52:37:fc:1c:7c:4d:
2c:76:41:12:be:b1:83:2f:d5:63:c5:0a:9b:6a:23:
fd:62:9d:8e:26:b2:2a:95:4c:7d:ba:89:ec:71:c5:
69:26:07:4d:d3:34:6b:97:93:1d:77:aa:cb:ec:f8:
36:52:9d:f0:61:bb:3d:e1:76:19:56:d7:54:6f:f1:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:68:AA:EA:CD:85:49:2D:8F:7C:72:EF:4F:05:B4:AA:3A:8D:2A:9E
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231372e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:be:23:30:b2:f2:33:ec:58:4f:7c:0b:c9:a4:37:5c:50:93:
48:2c:f4:74:c1:8b:4c:bd:ee:f7:7a:d1:c9:1a:d5:9f:9a:6d:
e9:9d:31:6e:eb:9d:f2:04:8b:1b:ff:1e:64:76:ac:7e:c8:d4:
73:0f:88:37:b5:b0:cf:47:66:16:bc:7f:fe:a2:7e:0c:44:ac:
e6:08:21:96:e2:79:0f:00:1a:e5:c8:b8:e4:c3:75:53:07:3a:
c1:13:4a:46:8c:2b:77:0b:0e:65:fd:c9:b5:d1:e1:87:a2:f9:
70:f1:2c:5e:ee:99:bc:06:be:43:7d:19:c8:28:5d:a9:70:b2:
1f:6e:bd:e2:c6:94:aa:d9:c9:fc:7d:76:6b:20:ce:11:d8:ef:
43:d2:36:36:6f:dc:d3:c0:6b:80:6b:82:92:b5:27:56:cf:40:
df:1c:22:dc:4e:a5:11:f4:60:e3:2e:af:ba:eb:80:20:6c:fa:
b2:17:40:28:25:88:35:4f:db:b9:1b:9c:1c:15:8b:a0:93:ee:
25:13:e1:d7:e0:30:88:01:c0:68:d9:a5:cf:0c:d7:31:84:92:
f5:35:71:16:27:85:ff:31:00:4b:25:87:19:1e:07:df:3e:c2:
1d:d0:d0:80:ad:88:3b:a9:56:44:cb:10:c5:07:2d:f1:88:49:
b4:13:28:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org