Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232342e302f32342d3234203d3e20313339363630.roa
File: 3135372e3235342e3232342e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: MH/JbRdq3wLIyR14G0IaEIBFwFM3UveDElNeJk7IAz0=
Subject key identifier: EC:21:73:CD:8D:52:4A:A7:53:32:89:5C:B2:26:13:1F:69:8C:75:F3
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 537C278D60C174E94D585D1857D5E731602F0F20
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232342e302f32342d3234203d3e20313339363630.roa
Signing time: Thu 09 Feb 2023 06:03:00 +0000
ROA not before: Thu 09 Feb 2023 05:58:00 +0000
ROA not after: Thu 08 Feb 2024 06:03:00 +0000
asID: 139660
IP address blocks: 157.254.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7c:27:8d:60:c1:74:e9:4d:58:5d:18:57:d5:e7:31:60:2f:0f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 9 05:58:00 2023 GMT
Not After : Feb 8 06:03:00 2024 GMT
Subject: CN=EC2173CD8D524AA75332895CB226131F698C75F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d3:70:84:48:d3:12:64:26:f9:4c:bc:16:a5:
ef:da:1f:9b:1e:21:7e:fc:19:61:88:63:d4:28:01:
55:b1:56:62:9c:de:b0:c8:e7:ae:fe:19:0a:c5:66:
5d:0d:c4:55:4c:78:0b:c4:c2:51:0f:ae:99:51:58:
cf:57:f6:d2:18:5b:73:b8:63:58:17:9b:26:c8:8f:
8a:88:42:9b:a6:8e:0c:a4:b2:7d:3b:54:c0:fb:a7:
c8:3f:31:bb:20:57:bb:2d:dc:ef:0c:bc:5e:04:08:
46:98:d7:93:aa:91:a8:cc:a8:02:39:31:d5:3a:59:
38:2d:6a:d6:57:b9:2c:1e:a5:4f:47:97:71:d7:87:
a1:b4:b2:31:b9:8f:b8:88:a6:10:a5:c7:94:20:55:
df:e2:e9:b4:66:e7:fc:7e:7b:c3:5c:42:45:e2:8b:
b8:2f:71:3c:22:12:d0:60:0b:78:63:d3:30:44:16:
b2:93:1e:35:06:b6:cd:b0:a2:3d:eb:a0:2e:88:70:
5c:4b:20:ae:df:0c:b2:e8:76:18:45:90:28:01:42:
0e:a2:0a:a5:63:87:c0:99:6a:8b:69:b7:8a:2a:83:
75:d1:f4:14:ac:b8:fa:2e:09:a9:3f:fa:12:41:ab:
9b:05:40:6a:e0:d8:3d:f3:01:8e:d6:87:8d:0f:df:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:73:CD:8D:52:4A:A7:53:32:89:5C:B2:26:13:1F:69:8C:75:F3
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232342e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c7:f7:e5:b8:aa:96:3b:0f:70:88:13:b0:b2:12:fc:b4:23:
ec:49:c8:1e:a7:c0:54:2c:da:9e:cc:15:e8:4c:d2:61:38:ad:
3e:08:9a:41:35:1a:40:fd:1f:04:c8:46:78:86:af:fc:31:64:
65:57:ed:41:4e:7f:84:57:d6:df:79:17:08:3d:56:81:09:cf:
5c:8c:ee:fa:ca:4b:5a:6f:45:c5:1d:7f:f8:30:10:96:7f:ad:
1f:24:5e:f8:bc:22:2a:c0:09:d6:6c:88:45:c0:96:74:02:cc:
41:28:9b:fe:e9:0b:7c:77:40:50:f2:88:34:50:ce:b1:b9:99:
e4:d1:02:b0:cc:58:60:74:ba:bb:95:60:be:be:5f:c1:ed:e5:
d9:27:fe:86:26:67:66:b9:57:e4:36:c4:d6:72:eb:27:0e:87:
6a:94:6d:0a:f0:ae:c7:30:56:61:82:a1:e9:22:0e:c3:66:75:
f9:01:b2:2a:75:cc:17:21:f3:46:ec:29:ff:a2:8b:3f:bf:fd:
d0:81:6e:74:e6:4c:60:74:a1:3d:72:53:b9:58:61:e8:0b:1e:
a0:08:da:c1:22:01:c0:1c:e1:f5:76:e6:25:3c:0c:10:9b:0b:
b5:60:65:11:21:cd:d7:56:37:bb:6b:26:86:ef:a9:05:ff:55:
00:66:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org