Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214485.roa
File: AS214485.roa (raw, json)
Hash identifier: bD6kV0W/Jvd29PfVqX6cbhp3pwKYXZ8OEmMP0DzAFVE=
Subject key identifier: D1:6E:E8:76:42:F3:65:B5:13:E8:A6:32:E7:00:CD:D3:15:C4:06:A2
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 68E5BD41DB90C23E72AE171351A2646CAF51740E
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214485.roa
Signing time: Fri 08 Nov 2024 14:57:01 +0000
ROA not before: Fri 08 Nov 2024 14:52:01 +0000
ROA not after: Fri 07 Nov 2025 14:57:01 +0000
asID: 214485
IP address blocks: 157.254.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Dec 2024 08:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e5:bd:41:db:90:c2:3e:72:ae:17:13:51:a2:64:6c:af:51:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Nov 8 14:52:01 2024 GMT
Not After : Nov 7 14:57:01 2025 GMT
Subject: CN=D16EE87642F365B513E8A632E700CDD315C406A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:5a:7c:69:4f:51:3f:6c:2d:f3:05:cb:9d:
40:a6:6c:eb:fe:7f:78:ea:7f:93:07:72:57:d2:b5:
cb:9c:8c:a4:9e:53:0c:a6:51:2f:78:1c:90:f2:9e:
e4:1f:53:54:9c:8b:e3:9f:44:ca:8d:d4:33:e5:fd:
15:68:6f:8e:08:92:fc:56:dc:9d:e4:50:a1:51:73:
da:4f:e5:d8:14:ce:45:a5:cb:5d:15:3c:19:a6:4c:
53:13:1d:63:fc:67:c6:62:0b:c9:7f:3d:02:36:18:
f3:93:98:83:ac:1c:79:42:13:7c:55:58:4f:1a:a7:
e7:e2:82:89:dc:d2:47:46:0e:2a:e0:92:ce:0a:19:
e9:e0:fa:e3:95:ee:02:bd:3f:e3:6b:6d:49:ff:cf:
b0:02:20:e9:56:54:55:4e:a2:c3:0f:2e:1f:8d:68:
6f:95:2c:14:81:91:78:6f:69:62:12:6f:45:45:e0:
ee:41:ff:c1:ac:8a:d6:c3:8d:14:e2:1a:a0:de:9b:
a5:18:82:2f:93:1e:0e:b9:72:c3:96:9c:47:15:48:
25:c3:cb:e6:41:da:df:67:d0:2d:bf:d3:fe:d8:6d:
9b:31:69:ba:7e:c4:c1:52:12:0e:d0:60:8f:27:38:
86:b0:e4:dc:d5:60:f1:c2:89:a8:6d:c5:93:5e:bc:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6E:E8:76:42:F3:65:B5:13:E8:A6:32:E7:00:CD:D3:15:C4:06:A2
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.24.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d9:9b:b9:69:1d:8d:5f:de:5f:28:7e:85:cf:1f:68:3b:5e:
fd:6c:31:90:74:52:51:db:9f:79:cf:3c:85:cb:4d:a9:d1:58:
53:16:42:88:34:be:56:70:97:03:9b:41:ab:9a:cb:64:90:d7:
e2:16:38:e7:25:ae:df:54:cb:d6:ae:22:a5:34:e5:21:ab:d7:
f6:e6:12:fa:5e:28:a7:0e:30:94:ac:a1:ef:79:52:de:7d:21:
91:ce:35:cf:8c:32:d3:09:c2:4b:48:99:01:17:97:01:25:7a:
be:02:46:9b:7d:55:c6:b2:e9:a9:44:ae:60:0d:b5:b6:04:b4:
e1:e3:1b:5c:53:be:81:ef:5c:27:06:23:7d:56:d6:30:02:18:
91:2d:a5:f7:ce:cf:e8:ab:a3:0f:2b:b4:47:a2:1c:d3:6b:0f:
55:7c:b8:8b:9b:46:0f:50:05:ec:69:21:d6:a8:c3:1c:3d:0f:
1f:2c:88:fd:06:bf:dd:0b:90:2a:c5:be:2b:c8:92:d0:c4:67:
e5:7c:35:9d:a0:92:a8:02:13:14:b7:bf:03:3a:21:d1:83:e5:
b8:9f:ce:4a:9d:34:bb:59:b9:24:d2:7c:cf:0a:e4:6a:ea:a7:
29:57:18:c6:2e:55:dd:c8:ed:fc:9b:b6:be:81:00:0b:d7:ab:
dd:91:30:a0
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUaOW9QduQwj5yrhcTUaJkbK9RdA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMTA4MTQ1MjAxWhcNMjUxMTA3MTQ1NzAx
WjAzMTEwLwYDVQQDEyhEMTZFRTg3NjQyRjM2NUI1MTNFOEE2MzJFNzAwQ0REMzE1
QzQwNkEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJZafGlPUT9s
LfMFy51Apmzr/n946n+TB3JX0rXLnIyknlMMplEveByQ8p7kH1NUnIvjn0TKjdQz
5f0VaG+OCJL8Vtyd5FChUXPaT+XYFM5FpctdFTwZpkxTEx1j/GfGYgvJfz0CNhjz
k5iDrBx5QhN8VVhPGqfn4oKJ3NJHRg4q4JLOChnp4Prjle4CvT/ja21J/8+wAiDp
VlRVTqLDDy4fjWhvlSwUgZF4b2liEm9FReDuQf/BrIrWw40U4hqg3pulGIIvkx4O
uXLDlpxHFUglw8vmQdrfZ9Atv9P+2G2bMWm6fsTBUhIO0GCPJziGsOTc1WDxwomo
bcWTXrx7xwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNFu6HZC82W1E+imMucAzdMV
xAaiMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzIxNDQ4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GDANBgkqhkiG9w0BAQsFAAOC
AQEAldmbuWkdjV/eXyh+hc8faDte/WwxkHRSUdufec88hctNqdFYUxZCiDS+VnCX
A5tBq5rLZJDX4hY45yWu31TL1q4ipTTlIavX9uYS+l4opw4wlKyh73lS3n0hkc41
z4wy0wnCS0iZAReXASV6vgJGm31VxrLpqUSuYA21tgS04eMbXFO+ge9cJwYjfVbW
MAIYkS2l987P6KujDyu0R6Ic02sPVXy4i5tGD1AF7Gkh1qjDHD0PHyyI/Qa/3QuQ
KsW+K8iS0MRn5Xw1naCSqAITFLe/Azoh0YPluJ/OSp00u1m5JNJ8zwrkauqnKVcY
xi5V3cjt/Ju2voEAC9er3ZEwoA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:51 2025 by rpki-client