Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: 4zEA/PtBT4dtFW4TDHnnk07lRAU5eMXm6oLShTrgNj0=
Subject key identifier: 09:FE:65:FC:9C:6F:8D:57:4F:BA:E5:25:4D:96:19:FD:9F:F5:B4:02
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 27202396E8D51B3FF77493017AE9A99DA92B3C9D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa
Signing time: Sat 04 May 2024 00:00:20 +0000
ROA not before: Fri 03 May 2024 23:55:20 +0000
ROA not after: Sat 03 May 2025 00:00:20 +0000
asID: 1239
IP address blocks: 157.254.252.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:20:23:96:e8:d5:1b:3f:f7:74:93:01:7a:e9:a9:9d:a9:2b:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 3 23:55:20 2024 GMT
Not After : May 3 00:00:20 2025 GMT
Subject: CN=09FE65FC9C6F8D574FBAE5254D9619FD9FF5B402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:43:a0:cd:64:b9:d1:55:f3:3d:6c:53:0a:
e5:c6:d8:9f:5f:d8:87:55:f8:d7:97:e0:e2:d4:92:
4c:43:74:9f:51:de:ac:48:3c:a5:ef:dc:e0:10:36:
28:be:e3:6f:36:da:a3:fc:42:54:35:a0:cb:6e:89:
27:47:36:d8:43:5b:27:49:54:1d:1a:0e:0c:77:29:
dd:8d:c4:66:6d:2d:3e:e4:5d:5f:d4:0c:4d:fa:68:
c7:42:1f:58:b4:00:23:07:4b:7a:96:f6:91:89:e2:
87:85:fe:c9:1e:48:77:e1:58:d3:2c:94:f5:69:39:
2e:6b:aa:a2:1c:f3:0c:1a:ea:d0:0b:27:27:76:b4:
c5:38:da:0a:71:7f:37:71:df:ef:2b:b4:04:78:e6:
34:d7:76:a0:f8:7e:68:1b:e2:86:0e:f9:89:52:07:
41:70:9a:30:08:fd:61:dc:1b:42:03:5e:24:00:1b:
68:3e:be:11:34:ee:64:d0:0c:d6:01:da:51:62:69:
b0:2a:44:49:7f:be:ea:66:4a:fc:b5:a6:e4:bd:a4:
c1:62:23:73:53:d3:ca:20:cf:ad:16:fa:65:b9:14:
39:8d:70:47:91:2b:5c:52:a4:a4:3c:df:0b:2e:ca:
6e:c1:c0:2f:fb:2b:b0:46:a0:74:57:0f:d5:e5:4f:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FE:65:FC:9C:6F:8D:57:4F:BA:E5:25:4D:96:19:FD:9F:F5:B4:02
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:82:80:d9:46:0f:01:ed:e6:e6:56:79:68:b9:73:39:80:a0:
0d:2b:70:90:42:35:28:7b:5c:18:3c:1a:38:83:c4:f7:8d:bc:
ea:bf:63:d3:49:b5:c7:82:ab:86:34:1f:bd:61:1b:b2:56:d7:
5d:bc:36:d1:1c:16:f5:d7:f2:ac:9d:a3:33:65:ee:ab:bb:66:
67:4c:59:99:82:db:ee:8f:f7:51:e3:81:4f:a8:18:de:b9:14:
73:7f:19:e1:5a:d3:00:91:4f:43:fb:66:60:ea:a4:3e:ab:16:
03:d3:e3:7f:0e:be:01:03:37:a6:82:6c:55:1d:7d:1b:43:d1:
36:ab:9e:71:a1:43:6c:7f:b9:ef:bb:22:2f:aa:b5:e7:2f:0d:
f0:d6:e5:4a:95:8c:f4:4d:2e:36:9d:e8:e3:7c:a3:17:3f:16:
ea:08:89:c9:2c:96:44:32:d1:0f:f3:b7:7c:c1:06:ca:8a:c2:
2b:7e:6b:9c:09:a7:6d:84:97:8e:c6:14:80:e9:ba:dd:a5:b9:
0b:5a:f2:e3:17:cc:94:1f:2e:de:4d:8c:8d:74:42:92:06:f2:
f5:f1:37:fb:87:6f:c5:18:7e:71:ba:49:29:7f:72:7d:a8:dd:
3d:f1:91:94:98:f8:f7:3b:87:fd:1c:c1:39:19:70:51:ae:02:
f8:d4:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org