Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS216091.roa
File: AS216091.roa (raw, json)
Hash identifier: lNA74oQOE9M6i0in23ZgAk/li/AhVaJmlHchFga4xRc=
Subject key identifier: F5:4A:71:1F:3D:4E:B9:69:66:EF:50:6A:F8:C0:FB:F8:73:EC:4E:F7
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 33340EA20A76D16ADD99A15854E69ECCCBCAD542
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS216091.roa
Signing time: Sun 07 Jan 2024 20:38:23 +0000
ROA not before: Sun 07 Jan 2024 20:33:23 +0000
ROA not after: Sun 05 Jan 2025 20:38:23 +0000
asID: 216091
IP address blocks: 157.254.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 10:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:34:0e:a2:0a:76:d1:6a:dd:99:a1:58:54:e6:9e:cc:cb:ca:d5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 7 20:33:23 2024 GMT
Not After : Jan 5 20:38:23 2025 GMT
Subject: CN=F54A711F3D4EB96966EF506AF8C0FBF873EC4EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:cf:97:f6:b5:2b:d6:bc:bd:3f:7f:dc:b6:
4f:2a:6f:63:bf:fb:c4:20:70:99:9f:00:6c:a7:41:
65:4a:17:00:bb:24:dd:4d:a8:99:53:94:c3:93:eb:
2e:d1:11:df:b2:16:68:7f:82:03:c7:bc:e2:1e:9c:
66:f7:c2:40:0b:4c:e3:2c:d4:19:3e:b5:5b:e2:63:
ec:fd:c7:66:1e:85:85:22:75:34:22:af:86:aa:f4:
68:2d:8b:6b:1a:0e:64:24:8d:e1:9d:bb:fe:a1:2f:
d7:07:ce:13:85:b4:a9:42:dd:66:ec:2e:59:ab:68:
01:8c:e5:b8:d0:28:9a:8e:59:1f:66:72:fa:7e:87:
cb:d4:db:a6:36:c1:d7:e7:0a:5f:a5:df:9a:5f:2b:
7a:fe:b2:1e:4e:83:cc:be:b1:e3:e3:f4:fb:79:0b:
5c:9e:ee:c9:2c:7d:83:ee:8b:6a:3e:36:10:db:7b:
16:92:f2:95:20:ab:09:8d:66:f6:64:d8:bd:46:7b:
19:a6:e1:e6:78:dd:f0:17:f6:69:7b:01:34:61:7c:
52:ab:b9:e8:25:61:71:1b:fc:33:09:7d:10:94:33:
0e:69:97:02:40:11:32:25:d3:a6:65:f4:44:00:d8:
4a:0b:17:92:d6:f1:c9:27:57:86:00:6b:86:9c:6b:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:71:1F:3D:4E:B9:69:66:EF:50:6A:F8:C0:FB:F8:73:EC:4E:F7
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS216091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.171.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:60:f4:c6:d0:70:d0:78:9f:e9:aa:00:dd:71:1d:6d:5a:52:
a1:7e:53:9c:a6:73:96:ae:18:22:ba:c8:54:51:d4:57:54:d6:
ea:50:62:a7:84:06:d2:f2:17:33:8b:5d:56:67:fc:f4:79:48:
3d:15:0a:13:9e:03:12:e0:00:14:a9:1e:fd:3b:e0:4e:fe:1f:
c2:65:df:2d:22:c1:9d:7f:95:a9:b9:68:0d:cb:48:7f:b1:b0:
03:e6:2f:a6:70:5d:00:0c:b2:6f:e0:2f:3a:26:9f:8c:9a:34:
2a:5d:ef:49:34:be:14:0e:0e:d6:cb:5b:47:25:89:cd:9e:fb:
f1:79:fe:b9:05:91:42:d8:51:d9:d6:f4:b5:e7:c7:ed:b1:72:
05:f7:45:92:de:43:3e:25:a2:20:f1:b9:f9:a5:55:94:4d:3e:
c6:89:59:e1:8e:42:8f:5a:34:0c:40:96:7c:37:f2:b8:8e:ec:
9d:f9:42:87:f3:d2:0c:7f:d8:85:ea:c4:eb:db:64:57:47:8c:
3e:a6:47:85:07:95:95:52:eb:05:63:b0:ea:17:5e:aa:a9:52:
63:4b:9e:fa:c5:6e:27:9f:30:83:da:ce:21:d9:77:2b:8d:de:
1f:97:1c:eb:05:18:fb:23:52:06:5d:35:03:ea:aa:63:d1:5e:
43:16:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:28:27 2024 by rpki-client on console-fra.rpki-client.org