Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e33322e302f32302d3234203d3e20333939303733.roa
File: 3135372e3235342e33322e302f32302d3234203d3e20333939303733.roa (raw, json)
Hash identifier: N/Yxzht8V+M10g8uhJMGcqLtip8I7nAMsWqe+GX0SXQ=
Subject key identifier: FF:82:1F:CA:5B:FA:27:7E:65:96:B3:18:D3:3C:1D:31:FE:B4:C6:91
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 33FF985747BA752674410C6C9FBCB2A392507198
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e33322e302f32302d3234203d3e20333939303733.roa
Signing time: Tue 29 Aug 2023 14:06:36 +0000
ROA not before: Tue 29 Aug 2023 14:01:36 +0000
ROA not after: Tue 27 Aug 2024 14:06:36 +0000
asID: 399073
IP address blocks: 157.254.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 07:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ff:98:57:47:ba:75:26:74:41:0c:6c:9f:bc:b2:a3:92:50:71:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 29 14:01:36 2023 GMT
Not After : Aug 27 14:06:36 2024 GMT
Subject: CN=FF821FCA5BFA277E6596B318D33C1D31FEB4C691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:20:b4:88:f4:11:c4:da:9b:03:81:cc:cb:
17:e8:95:de:8b:a1:49:de:7e:0f:5d:5c:7b:2f:ef:
79:e1:a0:69:b2:01:c1:69:6d:19:cb:cf:3b:b7:f5:
d4:25:63:2f:ea:c8:94:1f:bf:c3:36:4c:30:4d:bf:
05:e5:81:da:c5:f9:98:27:7e:4c:c3:4a:38:57:8a:
f1:b8:d0:8a:a5:97:8d:6e:46:3a:d2:19:a4:01:09:
7b:f9:24:ae:be:e1:fa:9c:1c:1f:d6:70:3e:a3:d1:
ce:4d:44:bf:ec:82:45:20:6c:f8:30:6f:0a:6d:53:
8f:57:c6:3d:ab:b3:c2:14:91:f0:22:5d:e7:37:ed:
98:8e:46:16:a7:e4:81:da:0f:8a:86:12:52:e4:ad:
07:47:6f:3b:6f:b9:9a:ef:a6:b1:b6:f3:99:35:72:
b5:08:9b:30:a9:cb:34:c1:68:6a:2f:b8:ea:ed:00:
17:70:a5:13:cd:a4:da:da:41:a5:1d:9a:79:67:dd:
58:9d:21:67:cc:ff:23:fb:28:f1:94:b1:3b:69:f2:
9d:ea:af:a0:10:ed:64:13:82:20:c1:ca:1d:e8:01:
53:e6:f8:9b:d9:c4:8e:0d:cb:9f:45:c7:35:6f:e4:
eb:e6:70:fb:53:4e:16:79:6e:4b:fc:fe:b9:1a:60:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:82:1F:CA:5B:FA:27:7E:65:96:B3:18:D3:3C:1D:31:FE:B4:C6:91
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e33322e302f32302d3234203d3e20333939303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:77:5d:d5:f0:8a:2e:20:c3:f6:6d:f2:6a:19:0e:59:39:45:
48:0b:c6:26:5e:81:db:fd:3f:46:96:9b:64:f8:f1:60:3d:f0:
ed:e3:10:20:cb:16:8e:b4:4a:d7:76:1f:78:ff:19:5a:de:e3:
5d:59:2b:78:b7:27:83:48:64:2a:11:0e:69:41:9e:36:63:95:
8a:04:94:f8:c5:e5:d8:39:b1:c1:6f:43:7c:a7:c5:2d:1b:f8:
18:33:09:4f:b0:c7:29:68:92:97:22:53:2a:ee:0d:55:61:c5:
ad:b0:a8:f5:08:9d:57:99:9f:25:ed:14:68:1d:7d:d4:a6:e1:
83:b6:c4:a9:0b:a7:f6:d2:23:a2:70:9c:be:17:ec:43:d5:4b:
a4:55:f1:e3:1d:44:71:c4:c0:43:5d:a2:1b:22:a1:f5:d7:50:
51:2b:43:3e:20:13:74:8c:13:82:ec:02:b6:d0:cc:65:40:10:
a0:b3:39:f9:fd:e3:ba:51:cc:67:b2:a1:14:94:1e:dc:d3:af:
40:d8:ab:43:09:d1:fd:29:60:ef:ec:ac:66:86:be:9a:4a:a3:
f4:08:ff:21:95:50:9f:d6:a6:45:df:48:17:ec:1f:d5:8a:b8:
8e:63:d6:fc:5e:8b:d2:64:9a:fb:22:ef:01:cb:53:d4:20:91:
6e:7d:90:9c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUM/+YV0e6dSZ0QQxsn7yyo5JQcZgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjMwODI5MTQwMTM2WhcNMjQwODI3MTQwNjM2
WjAzMTEwLwYDVQQDEyhGRjgyMUZDQTVCRkEyNzdFNjU5NkIzMThEMzNDMUQzMUZF
QjRDNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09AgtIj0EcTa
mwOBzMsX6JXei6FJ3n4PXVx7L+954aBpsgHBaW0Zy887t/XUJWMv6siUH7/DNkww
Tb8F5YHaxfmYJ35Mw0o4V4rxuNCKpZeNbkY60hmkAQl7+SSuvuH6nBwf1nA+o9HO
TUS/7IJFIGz4MG8KbVOPV8Y9q7PCFJHwIl3nN+2YjkYWp+SB2g+KhhJS5K0HR287
b7ma76axtvOZNXK1CJswqcs0wWhqL7jq7QAXcKUTzaTa2kGlHZp5Z91YnSFnzP8j
+yjxlLE7afKd6q+gEO1kE4Igwcod6AFT5vib2cSODcufRcc1b+Tr5nD7U04WeW5L
/P65GmBEDQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFP+CH8pb+id+ZZazGNM8HTH+
tMaRMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0
OTBmNDQ1M2I3Yi8wLzMxMzUzNzJlMzIzNTM0MmUzMzMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzMzOTM5MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnf4gMA0GCSqGSIb3DQEB
CwUAA4IBAQCjd13V8IouIMP2bfJqGQ5ZOUVIC8YmXoHb/T9Glptk+PFgPfDt4xAg
yxaOtErXdh94/xla3uNdWSt4tyeDSGQqEQ5pQZ42Y5WKBJT4xeXYObHBb0N8p8Ut
G/gYMwlPsMcpaJKXIlMq7g1VYcWtsKj1CJ1XmZ8l7RRoHX3UpuGDtsSpC6f20iOi
cJy+F+xD1UukVfHjHURxxMBDXaIbIqH111BRK0M+IBN0jBOC7AK20MxlQBCgszn5
/eO6UcxnsqEUlB7c069A2KtDCdH9KWDv7Kxmhr6aSqP0CP8hlVCf1qZF30gX7B/V
iriOY9b8XovSZJr7Iu8By1PUIJFufZCc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org