Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234382e302f32322d3234203d3e2031323339.roa
File: 3135372e3235342e3234382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier: kIH5AspLe+n7w1SPSf0M52P4oZuj3L15joY+8d6Y9kY=
Subject key identifier: 82:48:74:7E:CE:BF:6A:52:E5:F8:EB:81:19:76:1E:10:5F:8A:A1:C6
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2199E5229700EEE837E828980D0D422828E17F5B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234382e302f32322d3234203d3e2031323339.roa
Signing time: Wed 04 Jan 2023 21:53:55 +0000
ROA not before: Wed 04 Jan 2023 21:48:55 +0000
ROA not after: Wed 03 Jan 2024 21:53:55 +0000
asID: 1239
IP address blocks: 157.254.248.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:99:e5:22:97:00:ee:e8:37:e8:28:98:0d:0d:42:28:28:e1:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 4 21:48:55 2023 GMT
Not After : Jan 3 21:53:55 2024 GMT
Subject: CN=8248747ECEBF6A52E5F8EB8119761E105F8AA1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:4e:1d:93:19:85:e3:a6:dc:28:f6:6c:2a:
46:c8:70:10:14:d9:78:88:d9:2f:77:5e:34:6e:f6:
3a:1a:0f:93:e9:3d:78:25:31:21:ff:b8:9d:e7:cf:
72:20:b7:a9:7e:3b:99:c7:b3:49:73:1c:73:74:c4:
3a:59:b6:28:30:a5:be:86:a8:e9:86:0e:73:36:1a:
9d:b6:53:3d:39:83:f4:1b:07:0a:cd:e2:42:36:3f:
c6:ca:37:d4:72:bd:7f:89:5b:c7:af:4d:db:91:12:
7b:56:aa:07:e6:88:71:e8:7a:49:45:6d:08:87:24:
ff:5b:ba:a8:6f:0d:e3:1a:39:b6:7f:f7:56:c6:ed:
f4:6f:c0:02:21:49:49:28:d1:5a:31:97:7d:3a:9d:
f4:e0:70:0b:c0:6b:1f:98:d6:5a:21:f0:20:a0:a9:
c7:62:e1:53:11:f8:48:1c:bb:2c:e7:6b:87:2d:fa:
27:a8:de:1e:8c:35:91:68:e3:5c:55:13:82:cb:07:
48:d1:d8:d4:d0:88:13:51:64:21:ca:ff:f8:cb:64:
24:2b:4f:71:9b:b3:88:92:72:e7:e0:a9:aa:11:7d:
0a:2c:27:73:29:5d:92:ce:83:06:16:79:06:b8:a0:
a4:77:30:39:d4:34:a3:cf:38:84:95:c1:65:ae:8f:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:74:7E:CE:BF:6A:52:E5:F8:EB:81:19:76:1E:10:5F:8A:A1:C6
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3234382e302f32322d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:01:61:39:d6:38:65:f1:d0:af:68:0c:cb:57:72:d1:e3:3b:
e7:27:8b:a8:5d:ca:38:63:08:cc:4e:fb:4f:63:a8:54:67:cd:
b3:c7:24:a8:d2:82:61:0d:1d:d0:d8:54:82:de:45:05:4c:9c:
59:31:1e:5f:a1:91:8c:d2:f4:bf:34:98:57:f1:1c:56:20:19:
b2:f1:7a:c7:47:a8:f2:0b:f3:3f:1b:fa:43:c0:f6:33:ec:ff:
06:5a:7d:5a:60:bd:6b:b9:4a:e8:a3:f4:b3:f1:87:80:83:12:
f3:69:bd:18:45:66:2c:8d:0b:a0:01:9f:b8:36:08:68:ba:c1:
d2:39:be:92:ba:ec:a3:9e:24:42:b4:57:87:54:21:99:7c:2e:
a5:5f:64:2b:2d:72:a7:6a:a9:dd:51:e9:82:aa:d3:49:07:99:
9a:67:a0:2b:a4:f8:70:79:54:84:19:ea:2d:96:55:53:d6:df:
94:e6:60:29:ef:63:34:3f:fa:a3:ff:91:1e:35:28:26:f6:4b:
ec:5d:be:84:da:84:0e:e8:59:0d:c3:55:b2:2c:f1:85:f0:08:
5e:26:46:a2:aa:73:4e:eb:28:16:0f:6e:77:63:cd:5f:45:cf:
59:09:01:58:d4:2b:dd:1c:50:db:b5:95:2d:66:d4:f0:1a:61:
a6:01:e6:4c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUIZnlIpcA7ug36CiYDQ1CKCjhf1swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwMTA0MjE0ODU1WhcNMjQwMTAzMjE1MzU1
WjAzMTEwLwYDVQQDEyg4MjQ4NzQ3RUNFQkY2QTUyRTVGOEVCODExOTc2MUUxMDVG
OEFBMUM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/9OHZMZheOm
3Cj2bCpGyHAQFNl4iNkvd140bvY6Gg+T6T14JTEh/7id589yILepfjuZx7NJcxxz
dMQ6WbYoMKW+hqjphg5zNhqdtlM9OYP0GwcKzeJCNj/GyjfUcr1/iVvHr03bkRJ7
VqoH5ohx6HpJRW0IhyT/W7qobw3jGjm2f/dWxu30b8ACIUlJKNFaMZd9Op304HAL
wGsfmNZaIfAgoKnHYuFTEfhIHLss52uHLfonqN4ejDWRaONcVROCywdI0djU0IgT
UWQhyv/4y2QkK09xm7OIknLn4KmqEX0KLCdzKV2SzoMGFnkGuKCkdzA51DSjzziE
lcFlro/CMwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIJIdH7Ov2pS5fjrgRl2HhBf
iqHGMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMjM0MzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMTMyMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp3++DANBgkqhkiG9w0BAQsF
AAOCAQEAHAFhOdY4ZfHQr2gMy1dy0eM75yeLqF3KOGMIzE77T2OoVGfNs8ckqNKC
YQ0d0NhUgt5FBUycWTEeX6GRjNL0vzSYV/EcViAZsvF6x0eo8gvzPxv6Q8D2M+z/
Blp9WmC9a7lK6KP0s/GHgIMS82m9GEVmLI0LoAGfuDYIaLrB0jm+krrso54kQrRX
h1QhmXwupV9kKy1yp2qp3VHpgqrTSQeZmmegK6T4cHlUhBnqLZZVU9bflOZgKe9j
ND/6o/+RHjUoJvZL7F2+hNqEDuhZDcNVsizxhfAIXiZGoqpzTusoFg9ud2PNX0XP
WQkBWNQr3RxQ27WVLWbU8BphpgHmTA==
-----END CERTIFICATE-----
Generated at Thu Aug 31 08:23:25 2023 by rpki-client on console-fra.rpki-client.org