Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13876.roa
File: AS13876.roa (raw, json)
Hash identifier: M7icvcJZxGJNoXlPMwaAfgeTsal6qmELBPWaUkbAIBQ=
Subject key identifier: 97:1B:7C:95:A4:E6:10:F4:C1:20:66:79:04:68:DA:20:77:69:61:AA
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2DFF63BB25D5A395DBDFF99BD4AF7F31123A2AEE
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13876.roa
Signing time: Thu 05 Sep 2024 22:48:59 +0000
ROA not before: Thu 05 Sep 2024 22:43:59 +0000
ROA not after: Thu 04 Sep 2025 22:48:59 +0000
asID: 13876
IP address blocks: 157.254.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ff:63:bb:25:d5:a3:95:db:df:f9:9b:d4:af:7f:31:12:3a:2a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Sep 5 22:43:59 2024 GMT
Not After : Sep 4 22:48:59 2025 GMT
Subject: CN=971B7C95A4E610F4C12066790468DA20776961AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:5b:cf:77:90:ba:dd:b4:a7:a0:10:3a:98:
d9:d0:84:0f:e5:64:cb:f3:fa:4e:c9:ee:49:a6:f3:
b6:c6:c4:40:ae:28:fa:89:af:ca:04:83:37:07:4f:
0a:9c:19:46:f4:58:cb:bc:59:44:b2:ee:04:ba:65:
1a:67:d3:e7:dd:28:8b:90:3d:38:ca:2a:cc:9a:ab:
83:68:67:d6:be:3b:0b:02:5a:96:c4:7e:40:26:db:
3e:2d:22:0b:6e:5e:a8:90:ce:d8:b3:f7:25:92:7c:
bc:9d:12:2f:b6:67:21:0f:5c:c5:84:c2:15:db:ae:
47:29:a3:ca:11:60:34:cd:c4:6e:b5:10:4d:0b:76:
31:d2:d8:ce:57:5d:f1:13:b6:e8:e2:93:da:dd:f8:
cb:4f:0b:e0:a8:22:91:af:28:36:dc:46:1c:5f:f5:
21:48:c2:27:c3:28:69:81:7d:79:d9:4b:f9:b3:4e:
43:0c:ec:8b:cb:49:43:e8:80:c1:32:31:70:bf:7e:
13:10:aa:17:2e:d8:2b:fd:e4:43:f9:f1:6c:b9:d3:
2e:3a:e4:64:bd:8d:c3:54:a2:f7:23:b8:da:c1:45:
fc:d7:30:88:af:4d:2e:cd:b2:d9:2a:71:0b:36:49:
09:43:df:aa:83:80:8e:08:f4:ff:04:25:e6:03:d9:
91:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1B:7C:95:A4:E6:10:F4:C1:20:66:79:04:68:DA:20:77:69:61:AA
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS13876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.228.0/24
Signature Algorithm: sha256WithRSAEncryption
41:41:76:c2:a8:97:8e:69:3a:54:0a:da:d8:c2:07:02:a3:1d:
cb:b3:ee:02:22:3f:4c:2a:45:10:cf:8f:1d:b3:74:8b:05:c8:
9a:a4:8a:6c:12:96:cb:71:64:79:d9:77:7f:f4:a4:b8:3e:1f:
60:ef:ed:67:33:98:a4:5a:ef:9c:f0:12:db:ac:18:b9:30:fc:
54:c4:db:b4:6f:14:8b:58:71:32:aa:be:08:c5:c9:df:4e:14:
a1:f1:3b:2f:2e:a0:a5:eb:b7:b4:34:6d:af:42:61:52:1b:ba:
4d:72:04:6b:7f:56:34:ed:9e:10:c6:04:8a:2e:80:b3:8e:1c:
ea:c0:12:14:0d:b4:51:0a:91:37:56:c7:ca:98:4d:90:1a:60:
3f:1e:f5:c6:11:44:3f:c4:f8:e7:47:cb:f8:55:5f:80:aa:22:
43:4f:13:67:4c:41:89:b6:dd:e5:83:29:0b:ca:3b:c3:61:fb:
f9:72:a4:4b:8f:be:84:e6:bb:fe:0c:db:46:a5:6a:17:28:da:
fc:7d:70:2b:d9:84:1a:8e:4d:71:16:49:63:67:1d:47:c4:c1:
4d:2e:28:99:d9:1d:9c:5d:f9:63:fd:a3:be:a4:79:51:e3:b9:
dd:0d:07:b7:3c:fa:83:0b:91:b4:a8:fe:41:ef:d8:be:47:3a:
45:f2:13:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 04:02:51 2024 by rpki-client on console-ams.rpki-client.org