Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203020.roa
File: AS203020.roa (raw, json)
Hash identifier: nVJt6BiphIF3DL6vJNFZZjihxOnAudAiUrzIGJjuvpg=
Subject key identifier: EF:87:76:A8:A0:42:06:8C:02:50:22:C7:90:1D:4F:D9:ED:D3:1F:D0
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 65DA14C8934CFD07D5009140000543946BA1A8E5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203020.roa
Signing time: Thu 07 Sep 2023 10:47:19 +0000
ROA not before: Thu 07 Sep 2023 10:42:19 +0000
ROA not after: Thu 05 Sep 2024 10:47:19 +0000
asID: 203020
IP address blocks: 157.254.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 14:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:da:14:c8:93:4c:fd:07:d5:00:91:40:00:05:43:94:6b:a1:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Sep 7 10:42:19 2023 GMT
Not After : Sep 5 10:47:19 2024 GMT
Subject: CN=EF8776A8A042068C025022C7901D4FD9EDD31FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:9d:3d:88:71:2c:34:80:07:f8:f7:19:fd:
dc:87:69:34:fc:64:6b:e4:d1:ad:b0:31:32:d8:2c:
22:8f:3b:d2:1b:ce:fd:10:55:4b:62:e1:c1:42:3d:
da:69:98:1f:7e:cb:32:0e:80:cd:48:8f:78:5d:b0:
7f:0a:fa:ed:53:6f:01:39:93:99:87:4a:92:8c:ee:
e5:63:41:11:bd:da:b1:2c:64:62:5a:a8:9e:4c:4e:
3c:c2:e3:ce:78:47:2d:76:c7:c1:58:dc:91:35:67:
f7:99:1f:24:c0:5c:42:8f:1a:88:c8:01:ef:e5:c2:
65:c7:a2:18:f7:44:96:42:71:08:6e:e2:98:9e:25:
db:4a:08:7f:2d:71:1e:60:17:c7:d0:e7:9e:72:c4:
6c:75:98:60:bb:e6:6d:5a:cd:65:55:91:ea:cf:80:
2b:6a:94:d0:7e:0f:bd:c3:3c:b2:7c:b3:06:22:cd:
b2:93:77:71:e4:c0:c5:50:56:a0:31:20:7b:f5:40:
40:a7:1b:63:90:43:a6:03:cc:e5:bb:89:5c:83:a2:
ff:39:9f:02:f5:3f:9b:b1:23:9b:bf:32:c1:06:89:
1f:b7:22:25:09:5e:4a:36:0c:a1:d2:a3:c7:f7:ba:
1f:f2:e2:c6:b7:c1:f5:55:80:fd:cf:c8:aa:d9:f0:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:87:76:A8:A0:42:06:8C:02:50:22:C7:90:1D:4F:D9:ED:D3:1F:D0
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS203020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.158.0/24
Signature Algorithm: sha256WithRSAEncryption
94:51:8b:a4:ce:af:45:fa:89:b3:d5:90:f3:59:50:0a:9c:b8:
d1:01:08:23:72:1f:15:dd:c3:8d:c4:f8:c5:00:55:ab:6f:a0:
e1:ea:22:7e:8a:c2:c8:48:c6:cc:f3:47:85:2d:fc:7e:ff:08:
07:b5:44:6a:a3:07:38:f1:21:5a:21:fc:1b:7a:03:dd:5e:43:
86:a0:02:3c:4a:81:21:bb:ec:31:1e:a3:08:82:eb:a7:3f:b7:
2f:3b:bf:b9:77:bc:db:05:56:fd:06:49:ac:a3:68:78:71:5b:
c0:e2:67:3b:ac:9c:a0:75:2b:cc:38:08:f3:5f:5c:a5:c7:f1:
7c:b8:61:81:fa:45:c6:56:ef:30:d3:58:86:1b:c2:4b:55:59:
6e:cd:bc:4c:db:df:5c:d3:64:ba:4c:01:9f:5a:cc:5a:a5:6e:
1b:13:d3:40:81:8c:1d:4d:b6:95:f8:43:78:6c:62:18:35:28:
41:7f:51:37:91:aa:f0:4b:52:d8:c7:bd:3c:0a:bb:c4:1b:63:
f0:aa:2f:a0:21:f2:4e:4e:71:e4:e6:cb:3f:06:cc:f2:dd:89:
a2:d1:cf:2c:da:00:1f:20:28:7e:b1:75:05:1a:37:1a:a1:fd:
b9:e7:29:a5:e1:24:19:d0:0f:e7:a7:a4:00:db:ca:13:a0:88:
98:95:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 17:56:40 2024 by rpki-client on console-fra.rpki-client.org