Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
File: AS214174.roa (raw, json)
Hash identifier: FwH1kz4LFF0RYR7Je+D5LXxQjSbHE8gnNnb95gLEtQE=
Subject key identifier: 3D:6D:8D:C1:A0:6B:20:D6:9E:16:0A:4C:35:D6:C9:D0:F6:84:AE:8E
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 46F626C583FABD6B30A824A2F397F2268E7E86F0
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
Signing time: Mon 02 Dec 2024 09:58:33 +0000
ROA not before: Mon 02 Dec 2024 09:53:33 +0000
ROA not after: Mon 01 Dec 2025 09:58:33 +0000
asID: 214174
IP address blocks: 157.254.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f6:26:c5:83:fa:bd:6b:30:a8:24:a2:f3:97:f2:26:8e:7e:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 2 09:53:33 2024 GMT
Not After : Dec 1 09:58:33 2025 GMT
Subject: CN=3D6D8DC1A06B20D69E160A4C35D6C9D0F684AE8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:ea:8e:39:2d:e8:71:b2:be:59:66:f0:ab:
da:ec:9d:9e:58:c4:d0:c0:d7:07:8b:4a:11:f1:6c:
81:e6:7a:8f:08:f1:ee:11:d8:22:16:0a:90:7a:bb:
62:f0:97:f1:df:05:d7:bd:10:95:a1:e0:d8:cc:6d:
8c:fa:86:22:72:8f:5f:c7:2d:6d:f7:ff:26:9c:39:
c2:9c:2e:90:f4:3a:a1:ba:00:c1:35:06:e9:c4:75:
1c:1f:13:2f:8c:31:2a:7d:84:70:66:fe:98:2f:fc:
b3:0d:bc:4a:50:91:c0:3d:c4:dc:ac:1d:69:a4:1b:
4f:f8:31:79:16:7b:7d:6a:b2:6d:fb:53:14:23:0d:
9f:9b:2e:4b:c3:3b:1f:e2:15:c0:17:1a:23:47:4f:
47:03:ac:6a:13:b1:c9:6f:c8:a7:90:e3:c2:62:2b:
f9:e4:3b:5b:6a:3f:2a:50:df:8f:35:2a:27:1a:0b:
6a:83:b4:a3:a3:1a:f2:49:d1:1f:33:55:44:0a:7c:
b1:24:97:46:b1:ce:de:52:22:e4:33:fe:11:85:f9:
21:52:c6:40:15:a0:ec:8c:c6:92:42:c7:70:69:4f:
46:ea:b9:43:04:b7:73:7e:d4:73:8f:af:05:36:11:
01:bb:f1:18:31:14:ab:7b:f9:a6:79:80:46:43:ec:
b2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:8D:C1:A0:6B:20:D6:9E:16:0A:4C:35:D6:C9:D0:F6:84:AE:8E
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
40:03:57:12:25:f5:f8:66:50:1a:20:e3:cc:f7:a6:c1:1c:2a:
6a:52:bf:ec:15:fa:a2:38:1f:6c:2b:45:2a:49:3a:ae:46:2b:
6e:83:28:d8:1b:8d:88:ea:50:03:ab:97:fd:1a:68:df:6a:08:
99:3e:dc:b2:01:9a:ee:77:15:81:4f:74:be:87:15:a8:8d:2b:
c8:3b:96:b6:dd:94:39:dc:98:90:4e:1a:bf:a6:11:6f:25:e2:
28:aa:83:58:98:ee:0a:0f:b6:f9:5e:d6:d6:ed:44:c4:ba:3d:
13:d7:7b:94:23:49:16:7a:d0:34:27:f9:4a:dd:89:bf:24:fa:
c8:04:fd:3d:8b:c5:b6:5b:0a:d9:3d:85:89:00:fc:cf:83:cd:
80:af:a1:ce:b6:60:2c:68:86:ff:d1:1b:5f:34:8b:50:4a:e6:
e9:22:a9:9f:c6:77:b5:45:55:9f:08:83:a1:fc:9e:dc:4f:59:
81:09:2d:4d:aa:17:d4:ec:d6:93:2f:eb:82:35:d1:42:cf:a6:
0f:5d:e8:ae:4a:e5:cb:35:71:b5:09:64:f0:fa:0c:ba:71:29:
81:50:e6:62:08:39:5a:bf:c0:f3:b1:87:df:b6:70:95:16:5e:
0a:45:75:ff:28:1f:5c:03:52:aa:8e:71:de:c8:12:c9:d3:9a:
9f:5b:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:35 2025 by rpki-client