Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29770.roa
File: AS29770.roa (raw, json)
Hash identifier: Vmg2ZxI3beY0m8xYDFw5bKn8iOKMgriT0JIdD3jk0xg=
Subject key identifier: 34:9C:37:07:0C:5E:72:B9:6B:35:E1:A4:BB:89:01:D3:BE:31:C1:16
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 19E59782FB4FB95296FB2EC5E4F522ED7D7306F5
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29770.roa
Signing time: Thu 06 Feb 2025 20:35:06 +0000
ROA not before: Thu 06 Feb 2025 20:30:06 +0000
ROA not after: Thu 05 Feb 2026 20:35:06 +0000
asID: 29770
IP address blocks: 157.254.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 02:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e5:97:82:fb:4f:b9:52:96:fb:2e:c5:e4:f5:22:ed:7d:73:06:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Feb 6 20:30:06 2025 GMT
Not After : Feb 5 20:35:06 2026 GMT
Subject: CN=349C37070C5E72B96B35E1A4BB8901D3BE31C116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:44:be:8f:26:8e:ca:74:bb:e2:b8:64:43:
3d:e4:4f:da:df:17:a0:ca:88:ac:30:87:01:25:78:
27:fe:7a:c1:e7:23:f4:54:ff:87:75:84:57:66:39:
18:1e:c3:8e:2a:8b:bd:6b:29:db:ac:fa:9e:e3:e1:
96:26:f2:78:8b:eb:1d:3d:e7:d7:f8:5d:30:fc:e8:
25:dd:8d:8c:7f:31:50:a0:49:dc:f2:36:fb:1e:3d:
ea:84:1d:43:71:e7:15:9c:3f:6c:69:f9:c8:0a:66:
69:cf:65:af:47:91:21:77:9a:61:98:13:b2:3e:c8:
72:54:67:8c:7c:34:cf:f2:92:19:ac:04:2b:73:d0:
4b:95:72:e0:b1:1a:a6:a8:b2:d4:a9:39:83:eb:86:
4a:06:2b:ab:61:e9:4f:3a:db:55:0e:c0:27:00:55:
2b:40:ef:b5:96:27:50:17:12:29:34:a9:52:5a:78:
a6:a1:21:10:88:f4:96:05:61:30:f3:0b:58:24:73:
41:9e:98:9a:7c:cb:00:a8:af:89:d5:b7:61:55:2c:
00:48:8a:89:a7:9e:7f:5f:58:a3:ea:93:ce:e3:b9:
8c:14:e6:b1:e8:dc:a0:71:1f:5e:b6:bf:0f:b8:52:
ea:b5:ca:65:b4:9e:41:53:c4:00:11:93:5a:0e:b1:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:37:07:0C:5E:72:B9:6B:35:E1:A4:BB:89:01:D3:BE:31:C1:16
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.183.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fb:00:1d:fe:a3:bd:53:6c:de:dd:e1:8d:d6:4d:28:e5:38:
86:1e:9f:d2:1d:51:7e:4e:60:09:a6:7f:c4:e4:f9:b2:1d:13:
d1:a7:a5:42:d1:13:6a:85:a3:8d:de:ba:c9:1e:44:5e:2a:f5:
6d:d2:fe:63:db:5a:97:15:00:a2:7e:61:5e:f4:a1:3e:7b:35:
3f:84:93:5d:33:35:e9:53:9e:0f:e8:20:d4:e1:66:9e:8e:95:
c6:78:f1:5f:ab:fd:56:53:ce:78:d1:ac:b3:ed:11:ec:4c:2d:
a2:98:99:6c:6a:b0:a1:e7:57:39:6f:7e:87:72:8a:2c:d0:8e:
ab:12:d2:26:e7:07:7c:b4:d9:0f:74:e2:5e:ac:6e:7a:0b:ae:
72:3a:6d:00:84:d6:6d:14:fd:07:9b:cf:c3:77:de:f1:67:a1:
79:72:41:88:fb:92:b0:6b:9a:38:7d:3c:7e:dc:16:56:61:c2:
2f:b3:9a:b4:18:9c:65:3d:3a:76:f0:fb:7e:fc:25:b5:3f:b3:
7a:64:a7:48:ff:fa:33:41:32:87:8d:db:10:bf:5b:c6:6f:fd:
32:73:b9:5f:da:71:8c:c9:fb:9b:bb:71:91:fb:f4:7e:64:72:
87:36:54:e1:64:40:82:39:e5:50:06:e2:8b:ca:52:bb:72:64:
c3:70:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:19 2025 by rpki-client