Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa
File: 3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier: NdvVYAjdk0WGaB8seqKDEXmSc6/EVp/FKJKvZAUiOPw=
Subject key identifier: 4C:D0:1C:F9:D4:8A:C7:57:00:1A:FC:6A:32:25:B4:7E:07:72:1D:C3
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 398E9DDA2B0A7B603322DAC8E8A62C5B7164C9F3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa
Signing time: Sat 08 Jul 2023 08:50:31 +0000
ROA not before: Sat 08 Jul 2023 08:45:31 +0000
ROA not after: Sat 06 Jul 2024 08:50:31 +0000
asID: 206505
IP address blocks: 157.254.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8e:9d:da:2b:0a:7b:60:33:22:da:c8:e8:a6:2c:5b:71:64:c9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jul 8 08:45:31 2023 GMT
Not After : Jul 6 08:50:31 2024 GMT
Subject: CN=4CD01CF9D48AC757001AFC6A3225B47E07721DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:1c:3f:29:51:0e:fa:eb:02:53:80:c9:b6:
18:b4:1f:f1:80:30:84:e5:73:ab:46:0d:b2:8f:60:
77:bf:9b:cc:ed:54:23:ce:2d:60:5d:cd:f9:9b:0a:
e6:73:cf:84:4a:e8:97:4f:80:a5:9c:45:fa:5b:23:
9e:6a:00:b5:13:eb:ff:d5:46:39:f2:8e:af:71:de:
7b:ac:e8:d2:1e:ce:fb:0b:2a:3d:b1:74:b3:e7:b4:
13:0c:8f:f8:d3:0f:a9:d5:5d:4a:d6:c9:9a:c8:b1:
04:31:7c:cd:a0:38:44:aa:42:f2:af:aa:b9:ef:f2:
a1:a0:75:c0:36:3d:45:a2:76:4f:de:1f:24:c6:c7:
9d:ef:50:c5:78:fc:77:eb:2a:ba:d1:f4:b2:a4:db:
b0:13:ae:45:5e:1e:4e:de:e5:2e:a4:f2:8e:f0:c3:
34:49:80:57:e8:63:46:41:73:3c:83:33:df:6e:43:
d0:2d:20:a6:6c:dd:d7:23:76:7a:b1:b5:79:ab:c6:
ae:c1:01:6e:c4:6a:56:25:30:fb:23:df:04:3a:16:
07:ef:5e:46:e2:6d:32:13:2e:f9:08:c4:0a:45:9b:
b9:28:e7:56:12:02:ce:1d:4c:1e:28:5b:48:45:5f:
ab:90:68:02:7b:e7:97:1f:f6:ba:a4:41:13:4d:10:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:1C:F9:D4:8A:C7:57:00:1A:FC:6A:32:25:B4:7E:07:72:1D:C3
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231382e302f32342d3234203d3e20323036353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:0e:04:a7:4a:86:c8:70:86:ad:45:05:97:92:2b:6e:9e:fe:
56:5c:ec:85:94:2b:38:25:6a:fe:6d:78:0e:54:f1:26:71:e0:
0c:26:00:c3:3f:16:0f:df:f8:a9:e0:98:8d:d3:a1:fd:af:e9:
50:eb:91:9c:5c:c7:9a:8f:dd:7b:91:5c:a2:5c:6d:19:b1:15:
76:d6:a2:22:25:c1:3a:bb:d7:07:8c:d7:ee:1d:0e:23:7d:06:
86:44:08:83:3f:e7:fb:ba:6a:43:0a:31:f0:6f:4d:b8:f4:be:
9c:ba:e8:0b:ee:64:8c:6e:61:2b:0a:a7:19:5c:3a:97:23:69:
6f:8f:15:d1:39:9b:c1:70:ab:da:1a:00:bf:ab:28:73:7e:3d:
d2:60:06:53:d3:17:c3:38:9d:e4:8e:18:77:7e:66:e5:db:4e:
55:ed:88:f5:a1:b2:dc:d9:71:e0:6f:de:9e:b8:d4:33:70:f2:
d0:80:aa:6b:0b:d6:cc:ec:d3:54:1e:56:d4:ea:2a:82:bf:83:
4c:b5:48:14:d3:f6:9b:12:2f:03:02:f6:09:a8:49:12:a0:0a:
0a:96:83:c1:af:4a:cc:42:5b:b5:96:5c:57:ec:24:0b:90:4d:
ff:50:3e:db:13:69:cf:8b:6f:08:98:e6:22:c2:34:86:00:ac:
62:fe:d7:af
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUOY6d2isKe2AzItrI6KYsW3FkyfMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwNzA4MDg0NTMxWhcNMjQwNzA2MDg1MDMx
WjAzMTEwLwYDVQQDEyg0Q0QwMUNGOUQ0OEFDNzU3MDAxQUZDNkEzMjI1QjQ3RTA3
NzIxREMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+YcPylRDvrr
AlOAybYYtB/xgDCE5XOrRg2yj2B3v5vM7VQjzi1gXc35mwrmc8+ESuiXT4ClnEX6
WyOeagC1E+v/1UY58o6vcd57rOjSHs77Cyo9sXSz57QTDI/40w+p1V1K1smayLEE
MXzNoDhEqkLyr6q57/KhoHXANj1FonZP3h8kxsed71DFePx36yq60fSypNuwE65F
Xh5O3uUupPKO8MM0SYBX6GNGQXM8gzPfbkPQLSCmbN3XI3Z6sbV5q8auwQFuxGpW
JTD7I98EOhYH715G4m0yEy75CMQKRZu5KOdWEgLOHUweKFtIRV+rkGgCe+eXH/a6
pEETTRDiUwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEzQHPnUisdXABr8ajIltH4H
ch3DMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjMxMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzYzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/towDQYJKoZIhvcN
AQELBQADggEBALEOBKdKhshwhq1FBZeSK26e/lZc7IWUKzglav5teA5U8SZx4Awm
AMM/Fg/f+KngmI3Tof2v6VDrkZxcx5qP3XuRXKJcbRmxFXbWoiIlwTq71weM1+4d
DiN9BoZECIM/5/u6akMKMfBvTbj0vpy66AvuZIxuYSsKpxlcOpcjaW+PFdE5m8Fw
q9oaAL+rKHN+PdJgBlPTF8M4neSOGHd+ZuXbTlXtiPWhstzZceBv3p641DNw8tCA
qmsL1szs01QeVtTqKoK/g0y1SBTT9psSLwMC9gmoSRKgCgqWg8GvSsxCW7WWXFfs
JAuQTf9QPtsTac+LbwiY5iLCNIYArGL+168=
-----END CERTIFICATE-----
Generated at Thu Aug 31 08:37:59 2023 by rpki-client on console-ams.rpki-client.org