Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e2039303039.roa
File: 3135372e3235342e3232352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: xwX4+2ulUmciOxHrKXtJdsG8DriU7trm/3D+YX/L3nk=
Subject key identifier: 94:B2:9E:D9:69:01:61:90:F3:7B:1E:E9:AF:5D:54:B5:2B:D5:83:D4
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 589AE413C1006D6CCCACDCB503ADC9732CE010DE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e2039303039.roa
Signing time: Thu 04 May 2023 13:19:03 +0000
ROA not before: Thu 04 May 2023 13:14:03 +0000
ROA not after: Thu 02 May 2024 13:19:03 +0000
asID: 9009
IP address blocks: 157.254.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:9a:e4:13:c1:00:6d:6c:cc:ac:dc:b5:03:ad:c9:73:2c:e0:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 4 13:14:03 2023 GMT
Not After : May 2 13:19:03 2024 GMT
Subject: CN=94B29ED969016190F37B1EE9AF5D54B52BD583D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:70:c5:1e:92:af:d2:7d:d9:d2:f8:11:d7:
d0:d3:45:bb:11:4c:da:44:6b:fc:7a:38:60:72:99:
00:0a:a3:dc:1e:9a:b0:6e:51:19:d4:20:a3:27:66:
45:ac:4e:7e:c8:2d:54:0c:5c:e2:d5:0d:9a:f2:f9:
60:fd:67:9c:fd:80:b5:57:e0:7e:5c:6f:15:7c:5c:
ac:9a:2c:e4:03:66:eb:7e:02:4a:06:c3:29:26:06:
80:41:3b:a5:d8:37:85:2c:8b:da:ae:7f:63:50:f0:
aa:1e:6f:a8:6e:7b:6a:a5:d0:c8:80:54:81:bb:3f:
24:4e:2f:51:9b:37:7a:26:a1:88:ce:cf:c7:29:3e:
68:7b:fc:3e:43:cc:cc:be:44:6c:2f:fc:25:42:2a:
a1:72:cd:9f:96:cf:fd:d5:07:5d:4e:9a:71:bf:78:
cf:de:f2:54:30:a6:a4:66:74:28:e6:c5:4a:99:48:
e4:5f:17:0e:51:9b:a4:c7:2f:9a:9a:82:73:72:75:
12:83:93:0e:3d:eb:76:b3:15:af:b9:51:c6:39:40:
4b:2f:af:13:72:1d:be:b6:5a:36:3d:6d:fe:fc:1b:
14:9b:4e:54:5f:3d:8c:b4:7a:60:06:3a:e0:e3:de:
71:6a:31:54:6d:bc:23:e2:32:79:57:32:36:f2:e5:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:9E:D9:69:01:61:90:F3:7B:1E:E9:AF:5D:54:B5:2B:D5:83:D4
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232352e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.225.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c0:4b:9b:a4:05:10:45:fe:7f:67:6c:db:46:1a:0e:29:71:
bf:2e:dd:ed:62:a1:00:b3:b3:3f:01:8b:b2:95:79:de:96:76:
07:9a:f0:df:e0:31:58:8f:b0:1b:58:f5:c0:66:fe:77:c6:ec:
2e:77:01:5f:f5:3e:cb:55:39:27:ea:6b:b1:28:0f:b3:74:7f:
86:53:35:28:06:75:6b:70:17:c6:39:17:33:8d:e0:95:4c:74:
d9:2b:a4:d3:13:7d:48:dc:3c:92:6c:a2:74:cf:da:77:b9:3d:
dd:8c:12:da:5c:1c:7f:8c:cb:0c:54:3a:50:f8:0f:59:ff:d7:
c5:38:44:d4:87:c7:02:94:87:f2:4a:79:52:5b:3e:48:6b:c0:
fc:49:90:68:0c:d8:86:c9:7b:06:98:fb:5c:6b:95:39:c9:c8:
27:db:87:03:03:ca:35:96:95:59:af:ff:5a:75:36:f8:ff:c9:
b1:18:d4:65:5a:91:46:84:9b:72:82:05:db:77:2b:7b:da:0a:
78:24:ce:7c:65:24:b0:2f:88:19:e9:b0:35:28:84:3a:53:11:
f0:ac:66:4d:59:25:3d:95:81:f7:42:c2:c4:dc:b6:94:26:07:
aa:04:6d:18:a9:64:c9:e7:3b:b9:2e:6f:2a:18:6d:e9:b4:29:
a0:b9:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org