Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20383334.roa
File: 3135372e3235342e3232352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nx6Zx/3AlIEQgb+hVa8J8qdDTD4FxIwVBqHCYhPckuY=
Subject key identifier: BB:08:0D:52:57:A7:E6:09:95:BA:27:BF:C7:6A:21:2D:F8:1B:77:8A
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 6D171FD83A65936D88DD266F4341A4E6D429ECED
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Aug 2023 00:00:17 +0000
ROA not before: Thu 03 Aug 2023 23:55:17 +0000
ROA not after: Fri 02 Aug 2024 00:00:17 +0000
asID: 834
IP address blocks: 157.254.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:17:1f:d8:3a:65:93:6d:88:dd:26:6f:43:41:a4:e6:d4:29:ec:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 3 23:55:17 2023 GMT
Not After : Aug 2 00:00:17 2024 GMT
Subject: CN=BB080D5257A7E60995BA27BFC76A212DF81B778A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:38:10:3d:0b:43:36:e6:01:f9:5c:8f:51:
85:db:6c:f4:c9:19:70:68:b6:43:c5:97:cb:4b:2d:
9a:86:d8:ae:e0:34:c5:d0:3f:af:0f:9b:99:25:da:
fc:d2:4f:94:50:3e:9a:36:68:38:8e:95:30:58:99:
99:4b:34:f3:30:be:ae:65:00:bc:3c:b1:66:30:0f:
cc:09:fc:e3:72:ae:58:95:63:78:3e:12:47:1f:41:
ea:76:97:78:ed:db:8e:7a:d3:79:b2:20:3e:93:97:
e3:74:07:4c:0c:2f:f0:7b:4d:94:53:32:51:21:69:
96:40:c6:5d:a1:bc:6c:f5:4d:ab:42:f5:13:06:4b:
9f:7d:1e:03:b8:ed:72:29:d8:95:16:87:85:2e:b1:
bf:34:ff:08:e2:5e:90:c3:bf:38:5c:7e:8e:65:53:
3a:2a:01:ca:88:5a:ef:d2:4b:9f:ae:66:ae:83:c7:
1b:bd:8b:00:70:fb:3f:99:01:0a:ba:37:e2:92:0f:
ad:12:7d:15:0f:42:99:c0:ee:88:86:95:02:36:45:
ae:44:ea:2a:23:8a:72:c4:2b:49:50:6a:61:1c:b7:
0c:58:f2:af:33:1d:80:cb:a1:f0:e1:77:40:14:ff:
2d:25:3f:ce:42:d8:c0:bd:73:54:b3:06:dd:1b:b6:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:0D:52:57:A7:E6:09:95:BA:27:BF:C7:6A:21:2D:F8:1B:77:8A
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ab:d1:6e:21:c5:25:a9:ef:8d:5d:bd:fb:08:b0:90:af:30:
57:70:d8:95:32:22:ee:64:d8:36:0f:be:d2:56:95:fb:c3:90:
5f:ca:c0:6e:bb:46:e8:74:27:92:98:07:cd:31:aa:20:54:cd:
ea:1a:6e:d8:d2:83:2b:f5:4a:18:f7:9b:bc:17:26:3a:a0:95:
c3:98:a5:64:60:d2:e6:0f:fd:13:d9:95:07:67:e7:ba:3b:68:
d8:6f:31:e6:b6:74:9f:d4:06:27:21:2e:4e:99:45:9b:62:4f:
d4:a5:d5:f7:d1:7c:c4:7b:b2:5b:c0:5e:d6:65:a8:17:6f:b6:
ea:e4:91:cb:7a:1c:b4:eb:af:9c:f7:78:15:01:0f:74:a6:79:
6c:74:0a:db:ed:1f:9b:5f:c7:84:29:ea:fc:cc:36:e1:66:c2:
2b:ac:eb:15:6d:b5:9a:4e:f8:4c:f0:93:cf:70:5e:de:76:c1:
a1:f0:33:6e:70:dd:fd:dc:19:a2:90:69:fc:6c:2b:3e:a5:5b:
dd:59:bf:9f:a1:44:67:ec:c0:c1:2e:2f:99:b7:c2:91:88:63:
a1:8d:46:8d:3d:70:87:1a:91:78:e8:78:2e:3d:08:36:81:fd:
6f:01:11:b3:88:7f:99:7f:6b:d1:57:38:48:9d:1c:df:b1:fa:
29:07:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 15:43:39 2023 by rpki-client on console-ams.rpki-client.org