Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS31786.roa
File: AS31786.roa (raw, json)
Hash identifier: vsDw2UbDBmmW+PRihip5GVkeMR31r8+sr+Mhd7kVPg8=
Subject key identifier: A4:55:10:D0:DF:09:C4:95:4C:70:39:A6:AD:38:CD:AA:91:88:F2:AD
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 57EEA52D1EA0E97D66C99A1076DE25577AEAC25C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS31786.roa
Signing time: Thu 03 Oct 2024 15:09:42 +0000
ROA not before: Thu 03 Oct 2024 15:04:42 +0000
ROA not after: Thu 02 Oct 2025 15:09:42 +0000
asID: 31786
IP address blocks: 157.254.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ee:a5:2d:1e:a0:e9:7d:66:c9:9a:10:76:de:25:57:7a:ea:c2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Oct 3 15:04:42 2024 GMT
Not After : Oct 2 15:09:42 2025 GMT
Subject: CN=A45510D0DF09C4954C7039A6AD38CDAA9188F2AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:92:61:b5:e1:96:67:8a:41:f0:d7:68:28:
27:d4:82:e8:08:80:ff:a8:91:5a:b8:58:90:05:78:
e5:04:ab:3a:a3:6d:98:be:88:89:fb:fa:d9:c9:7b:
99:b2:dd:0c:d6:62:26:19:ad:ab:c5:95:63:39:68:
f0:70:8a:b2:c4:64:14:79:19:cf:e2:bb:32:7d:d6:
5b:32:cf:9a:a4:81:19:b1:33:e0:30:a4:bf:be:83:
ef:ab:17:f7:b0:52:67:82:ec:1f:38:5c:b8:17:1b:
51:f4:2b:db:d9:a0:72:14:b7:1f:6e:43:fd:1c:d9:
43:eb:5b:a8:7d:55:54:55:19:d7:ca:50:29:e7:ee:
dd:d7:13:4b:2a:bd:76:42:f1:2d:89:64:28:b2:3c:
30:b4:c6:d5:d0:24:c4:33:d7:6b:00:c1:4a:ea:09:
be:e9:fb:8f:cb:67:03:d2:82:d9:64:73:8f:2c:dd:
51:5f:29:7d:e2:e4:27:8e:2d:27:d6:16:89:42:02:
c2:07:6d:9c:9f:90:f8:58:28:1b:76:ff:47:36:cc:
b0:71:2b:20:c6:6e:a8:99:8c:ca:7e:b4:9d:35:f8:
39:de:6f:72:0d:d3:42:7b:95:43:5d:05:4d:6d:c4:
7d:1f:74:92:52:7c:18:ea:a5:4d:8a:d0:bc:17:ad:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:10:D0:DF:09:C4:95:4C:70:39:A6:AD:38:CD:AA:91:88:F2:AD
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS31786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.15.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5c:0f:f1:df:ee:0d:80:1e:55:fd:b0:00:da:4c:6f:f3:4d:
cd:4b:56:ee:21:a4:82:ae:88:a0:80:48:85:ec:26:f9:8b:14:
16:b5:94:b4:03:82:c5:cb:48:59:f0:a0:5b:5d:fd:f8:cd:a5:
64:39:f9:fa:1f:be:67:d9:9f:e9:eb:a5:e8:d3:01:2f:f6:db:
6c:32:2f:41:4d:bb:47:ac:c8:98:0c:05:0e:29:a2:90:9d:5d:
e0:71:08:46:e2:e2:93:b2:72:39:31:30:24:a6:dc:54:4a:1f:
0f:15:e5:6f:e9:a1:51:c3:47:fe:ad:7d:37:f4:4f:29:97:4c:
2b:c5:2d:49:e4:49:fe:3d:eb:70:5d:2c:73:4c:b6:be:8b:9f:
7e:88:71:56:59:54:5d:60:61:f4:2a:ff:c9:73:60:86:69:ad:
ce:55:b9:df:6e:58:ed:a3:c2:42:64:1b:a7:fa:4c:af:d3:2f:
9d:67:a2:4b:44:86:aa:e2:62:48:95:2f:6d:9b:5a:44:8f:46:
27:ca:1a:e5:f8:28:0e:83:3a:5f:c5:ed:d4:e6:e8:b2:31:b0:
41:f1:90:0f:da:6e:20:39:60:f6:fd:a3:47:c4:96:9f:d3:7f:
5b:21:26:93:27:98:76:93:5e:51:aa:0b:5a:27:31:db:56:ea:
a2:b4:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 07:31:24 2024 by rpki-client on console-ams.rpki-client.org