Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: EwX0A1U6jtgGh8vqs7Kbqpekx1nKqkjlEI5hFfuErTQ=
Subject key identifier: 0A:5E:80:02:AB:E8:C3:99:92:03:0D:9B:A2:B5:7D:48:88:46:8B:F8
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2B83E8DFA4257EA8C8C2736A10E23A5F8C01CAF1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33387.roa
Signing time: Fri 16 Aug 2024 02:38:04 +0000
ROA not before: Fri 16 Aug 2024 02:33:04 +0000
ROA not after: Fri 15 Aug 2025 02:38:04 +0000
asID: 33387
IP address blocks: 157.254.176.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 06 Sep 2024 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:83:e8:df:a4:25:7e:a8:c8:c2:73:6a:10:e2:3a:5f:8c:01:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 16 02:33:04 2024 GMT
Not After : Aug 15 02:38:04 2025 GMT
Subject: CN=0A5E8002ABE8C39992030D9BA2B57D4888468BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:f2:a0:a0:9d:44:5b:46:b0:c2:03:e6:c0:
95:aa:9a:78:6d:c6:85:8e:cc:56:44:10:61:20:10:
7c:a4:40:1a:a2:bb:de:4e:99:f1:61:a4:8b:05:80:
10:40:f8:72:ef:02:d9:b6:f3:6b:d6:6b:06:8d:bb:
9c:0f:30:49:8b:38:6e:73:45:5c:c4:de:1d:ac:cd:
08:f1:56:76:29:51:14:2d:05:cd:08:f1:42:9e:47:
fd:f9:6e:24:61:c7:3e:11:40:63:8e:1e:72:1a:f6:
f4:03:b9:bc:7b:79:25:e6:d0:e8:4a:fa:66:ea:39:
91:d8:95:aa:42:cf:cd:b1:bb:82:1b:56:c4:8e:91:
be:a5:ec:52:92:3d:06:fa:6a:e8:82:de:28:aa:58:
95:3d:10:2b:64:b2:91:2f:8c:d0:b2:e0:d8:e0:f3:
aa:3c:86:9d:67:1e:68:82:26:bc:66:07:19:21:96:
83:0c:73:92:b1:00:fc:9d:13:54:31:97:1c:39:38:
0c:e7:c3:c8:e7:46:bb:55:48:d4:12:5c:31:47:98:
a5:c7:7f:3b:ce:06:b1:00:22:87:3a:32:e6:23:ec:
f4:45:79:89:24:09:29:a6:8f:d2:52:78:d7:53:d7:
10:f5:65:36:13:b5:8e:ac:08:25:7f:2a:02:14:cf:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:80:02:AB:E8:C3:99:92:03:0D:9B:A2:B5:7D:48:88:46:8B:F8
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.176.0/23
Signature Algorithm: sha256WithRSAEncryption
54:4d:2e:07:d5:66:b4:58:b4:30:a8:39:cb:88:3d:10:a6:43:
32:be:c7:ff:af:85:60:0c:d5:d2:b7:36:95:41:9f:2d:d7:56:
88:a2:9e:62:59:c0:9d:4d:08:90:2d:e5:9f:02:69:02:ba:64:
53:d0:6a:e0:05:84:64:a5:66:3e:b4:f9:1c:36:29:1d:a4:e7:
1f:d4:ac:07:88:55:11:8d:d3:7a:43:29:ce:ad:18:2f:ae:84:
d8:1a:64:32:af:4d:59:e5:e4:82:39:4a:76:bd:de:5e:e7:57:
f1:38:2a:39:79:80:11:11:eb:9c:68:39:c2:e4:20:b4:37:28:
ff:e3:3a:15:11:8b:5f:1a:5e:0a:f7:a7:a8:1e:f7:fb:3c:81:
97:a9:a2:cd:02:0b:68:86:a6:3a:7a:d8:3d:e0:86:61:83:c4:
c9:c9:03:b3:6d:23:6c:37:a8:67:f2:ad:7c:f7:ba:79:7c:aa:
97:f2:00:d6:07:91:9e:04:fb:8a:6e:ea:fb:b7:4a:27:a2:db:
2b:f9:96:d9:82:8e:15:39:6f:62:49:ec:7e:62:bb:df:1c:d1:
46:7b:ba:2a:ed:1a:82:b9:54:4a:01:f4:eb:81:70:74:f1:33:
38:fc:75:92:c8:07:d4:a0:f3:83:91:88:c3:e6:4b:df:56:9d:
f9:cd:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 01:30:16 2024 by rpki-client on console-fra.rpki-client.org