Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: VBe7hvACaaDrigkl6AsQW9Pt9wql6cuAoXJ0D9qz1gU=
Subject key identifier: D1:14:BA:58:4E:6D:72:2F:05:E2:CF:98:A7:91:B7:0E:49:1D:0A:C2
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 79642519AF3A2DDA554476B773FD250B9DE55C8B
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3320.roa
Signing time: Thu 31 Aug 2023 07:52:10 +0000
ROA not before: Thu 31 Aug 2023 07:47:10 +0000
ROA not after: Thu 29 Aug 2024 07:52:10 +0000
asID: 3320
IP address blocks: 157.254.158.0/24 maxlen: 24
157.254.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:64:25:19:af:3a:2d:da:55:44:76:b7:73:fd:25:0b:9d:e5:5c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 31 07:47:10 2023 GMT
Not After : Aug 29 07:52:10 2024 GMT
Subject: CN=D114BA584E6D722F05E2CF98A791B70E491D0AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:28:94:43:e6:05:dd:41:11:0a:80:2f:b5:
1d:84:9f:dd:73:dc:d1:b4:ee:96:c4:b7:76:14:e3:
bc:56:ae:2a:2d:9a:1d:78:fa:aa:39:03:6e:b0:0d:
ba:7b:b9:59:db:7e:26:38:1e:8b:c1:00:37:40:3f:
8b:29:d1:d9:73:8e:c9:fa:30:52:37:82:de:cb:ed:
95:a3:38:de:a4:c9:e8:bc:c0:6b:dc:07:d7:c5:af:
b6:92:01:cc:0d:d6:ab:e7:b0:8d:9a:2c:8b:f7:67:
80:7c:15:04:e5:60:63:45:33:b2:7f:b2:89:49:38:
07:96:5f:08:b4:25:b8:28:58:b2:d4:66:48:91:d5:
87:41:7f:38:c5:64:a7:65:68:a0:03:75:76:1a:bf:
fd:11:8a:bd:dc:61:fb:29:e8:00:50:b1:90:9c:c4:
be:d9:24:1e:44:07:f8:fd:1d:87:1f:d4:52:26:b3:
fb:2d:b1:1f:47:b8:e4:b8:63:2f:a0:fc:a5:f3:43:
25:61:0d:5d:ee:4a:f9:ac:e9:1c:93:29:6d:dd:4e:
a0:5d:83:09:44:11:b3:b0:11:4c:03:16:b3:41:2b:
e2:b0:cb:3c:fb:ad:02:49:0a:b8:7f:26:4e:1f:01:
40:9d:32:b8:b9:d6:04:fe:ce:49:b2:b1:90:07:13:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:BA:58:4E:6D:72:2F:05:E2:CF:98:A7:91:B7:0E:49:1D:0A:C2
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.158.0/24
157.254.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d4:00:6e:b0:42:e8:b9:f5:49:dc:a6:c8:04:83:4e:68:5d:
82:3b:52:47:55:fb:64:42:6d:e1:78:91:fa:2c:bf:81:42:10:
44:f3:22:0f:90:19:69:73:f2:46:63:e3:c2:d9:46:44:c7:7e:
82:4a:46:64:2b:17:2e:6a:3c:4e:b8:2e:56:37:50:f8:f6:07:
30:e0:b1:00:c7:83:c4:b1:46:b8:4f:40:ab:df:75:0f:3b:76:
07:5a:09:65:5f:f8:80:5a:17:a0:c6:b1:31:7a:83:9e:86:77:
aa:94:88:ec:db:2c:3f:d9:bf:31:33:10:3b:81:ba:63:18:e9:
cb:fb:5c:60:92:a3:4a:2e:75:94:4e:cb:ea:95:8b:15:43:00:
7c:81:36:0f:91:ab:e8:45:b8:79:1d:f7:fe:c1:b8:35:11:68:
61:ce:fe:1e:34:f4:d9:9e:f2:c6:3d:5e:b5:f3:0e:b7:ed:86:
50:a2:47:1b:5e:36:ea:3c:61:37:a5:72:8f:ed:fa:3e:94:40:
d5:83:c9:ed:20:a3:97:6a:a5:82:7f:33:9f:d2:42:96:ff:f4:
80:ff:03:74:0f:dd:25:90:f8:aa:3c:e0:d0:a4:86:f7:6e:d1:
12:e0:f2:ad:d1:8a:bb:85:4b:55:a9:43:dd:ef:41:a0:d1:dd:
38:06:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org