Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa
File: AS26042.roa (raw, json)
Hash identifier: 48hHrWZWkU2djAFeKl2FZaPP3WqCHoZJast4tRpJl3U=
Subject key identifier: E1:53:34:6D:E8:F4:38:D8:51:72:16:48:DF:04:41:10:1B:5D:A7:61
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 7654D0921DB02121567C475C61FCCDDCDD4D1506
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa
Signing time: Wed 17 Jan 2024 10:53:23 +0000
ROA not before: Wed 17 Jan 2024 10:48:23 +0000
ROA not after: Wed 15 Jan 2025 10:53:23 +0000
asID: 26042
IP address blocks: 157.254.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 10:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:54:d0:92:1d:b0:21:21:56:7c:47:5c:61:fc:cd:dc:dd:4d:15:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jan 17 10:48:23 2024 GMT
Not After : Jan 15 10:53:23 2025 GMT
Subject: CN=E153346DE8F438D851721648DF0441101B5DA761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:94:65:b0:56:9e:e4:bf:57:0c:0d:06:42:
a1:e5:e6:dc:67:be:9a:71:45:b0:62:9e:69:33:df:
bd:fc:22:06:be:07:d0:30:77:e3:d6:ea:dc:71:5a:
37:73:79:68:21:27:ad:5b:78:bf:93:95:ad:8c:d2:
66:c9:90:82:7b:d7:e3:21:12:29:4a:ce:86:0d:27:
f0:7c:68:65:01:e9:0b:ef:31:9d:ce:07:44:06:4b:
e7:bd:a6:3c:9a:c1:99:2e:21:42:75:d4:dc:e0:72:
6f:2c:e9:e9:e3:c8:87:3f:1c:c2:1a:99:7b:6c:ff:
13:46:e5:26:fa:cf:09:03:25:60:a2:02:c4:c5:f2:
c3:99:0f:e5:1d:c0:bb:27:d6:84:99:ad:9a:78:9d:
9a:c9:17:d1:e3:ff:40:67:57:e3:86:f8:46:17:98:
6a:35:aa:17:3d:02:8e:dc:f9:4c:2a:3e:d4:bf:71:
d7:56:50:a8:1e:48:81:31:0e:a0:5c:40:c9:19:10:
96:ca:4d:b9:92:b9:78:bf:a6:ff:9f:7d:73:23:f0:
21:d6:af:46:66:7a:f9:63:b3:da:f5:bc:c1:3c:cd:
64:af:a6:d8:b9:e1:d9:fe:63:7f:e4:d9:af:9a:56:
29:c0:e7:50:56:7c:67:69:42:ff:f9:31:4f:b9:5e:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:53:34:6D:E8:F4:38:D8:51:72:16:48:DF:04:41:10:1B:5D:A7:61
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:09:f6:34:c7:69:b0:a7:6a:1b:9a:0c:4d:44:80:59:4e:68:
ae:89:fc:e3:7f:ab:60:3f:20:08:34:51:46:da:76:23:32:38:
89:58:b6:7f:f0:cf:2f:5e:e7:ca:31:4f:c2:8f:fa:d5:53:6e:
40:f8:44:e8:f6:39:02:59:aa:96:d2:41:c6:20:82:4e:43:8d:
51:d4:2b:57:ca:43:1b:08:00:af:6a:99:a9:ba:d7:41:71:ca:
78:02:54:ee:62:c2:5e:98:11:b4:41:03:5d:f3:2c:78:0b:26:
bc:6a:3b:49:1f:fb:d2:fa:01:0b:8a:8e:ff:0d:48:8c:33:86:
70:5e:39:6b:b1:8c:5d:c3:ad:90:cd:43:94:b2:bb:68:33:b5:
e2:1f:0f:93:f8:e9:fa:fc:8f:88:6d:24:d7:a8:50:3a:56:1c:
0f:06:06:2b:06:80:19:e3:ab:4e:ff:86:1f:a9:6a:d5:63:bc:
61:80:51:0f:7c:2f:85:38:d0:79:89:53:3a:bb:1a:de:cb:c4:
d8:0c:97:a6:5d:77:f6:3e:2b:8a:39:6f:11:0a:a0:50:94:5d:
cf:40:a0:6f:5f:1b:eb:6d:63:cb:88:34:eb:b7:b2:27:9a:05:
d4:6d:26:35:06:7d:eb:78:ee:21:20:a5:7a:76:18:f6:30:5b:
95:5f:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org