Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399073.roa
File: AS399073.roa (raw, json)
Hash identifier: bvvyuJoK/KW3ylJGGNRyg5aEU8HKn1fCtKkkDmzhHww=
Subject key identifier: 29:B1:AE:AA:95:87:A0:CB:E6:16:B5:F9:E6:74:F3:F7:0D:4B:0A:6D
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 3A013531DBE492377CBA71D28E91344EAD2D9288
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399073.roa
Signing time: Fri 29 Sep 2023 00:00:07 +0000
ROA not before: Thu 28 Sep 2023 23:55:07 +0000
ROA not after: Fri 27 Sep 2024 00:00:07 +0000
asID: 399073
IP address blocks: 157.254.132.0/22 maxlen: 24
157.254.140.0/22 maxlen: 24
157.254.162.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:01:35:31:db:e4:92:37:7c:ba:71:d2:8e:91:34:4e:ad:2d:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Sep 28 23:55:07 2023 GMT
Not After : Sep 27 00:00:07 2024 GMT
Subject: CN=29B1AEAA9587A0CBE616B5F9E674F3F70D4B0A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:eb:67:bd:4a:d1:dd:4a:85:a4:fc:ef:48:
42:65:cc:2a:e3:d0:60:18:8b:fd:45:c3:e1:68:91:
08:7d:82:f2:e4:d3:ea:30:24:bb:21:33:cd:a2:67:
19:23:a1:f4:eb:e7:d6:dc:45:38:53:6b:b7:6a:ea:
21:51:8f:89:31:75:4a:4c:a5:a0:b0:f5:f8:05:9b:
e4:10:d2:90:d7:ee:5b:ca:7e:d3:9d:d9:2d:85:fb:
06:e8:41:ee:f9:94:2e:d2:0a:db:0a:2a:ea:91:6e:
21:82:2c:26:56:22:52:ae:a1:42:80:66:bb:11:c5:
33:0c:8a:f2:df:dc:df:99:6d:2a:32:66:84:4f:ee:
c2:72:0b:f2:f8:fe:a2:a4:3a:c9:00:dd:e8:92:2e:
62:d3:5d:29:64:7f:bd:a7:41:c2:20:30:cf:f1:ee:
7d:f2:de:9c:a8:e3:e7:df:a4:91:e2:b9:9f:68:bd:
13:2a:2e:d8:9d:0a:da:38:84:ba:d5:d2:05:c6:bb:
2a:49:54:7c:03:fd:44:bc:65:a9:4a:d1:cc:3c:d6:
ab:a2:b1:87:98:69:be:4f:1e:ee:90:2d:f3:52:b8:
24:eb:20:10:25:fa:83:1c:31:27:85:5e:01:ef:26:
fa:0e:9d:74:b9:d4:29:0a:ab:2a:9d:76:ff:51:ed:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B1:AE:AA:95:87:A0:CB:E6:16:B5:F9:E6:74:F3:F7:0D:4B:0A:6D
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.132.0/22
157.254.140.0/22
157.254.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:b0:9c:aa:5f:68:6b:da:56:90:5f:10:1c:ca:c8:01:71:2d:
89:d6:d8:29:3d:d6:44:38:cc:c3:8d:a9:90:36:fd:a5:7c:6c:
95:a0:67:fb:7d:d9:d7:0b:6c:bb:b3:c7:ae:c0:5f:24:a5:5f:
75:e2:ac:71:54:18:0b:04:5b:a3:c2:45:41:27:d4:2c:89:94:
ce:80:78:56:ab:1b:9e:ca:3d:98:7b:fe:11:52:62:76:f2:b1:
af:07:f5:7e:ee:43:f3:d9:42:3b:b6:d4:7f:c4:03:f5:fc:e5:
4a:f9:9b:4b:8f:da:64:ed:45:b6:92:cc:7d:4a:ab:98:91:e5:
4e:dd:05:b7:ef:ea:25:d0:02:a2:2d:9c:24:14:66:7e:b8:3f:
69:77:65:10:fb:5b:cd:33:90:c6:5a:8b:38:aa:32:be:ce:9d:
d2:49:7f:79:d5:f6:47:c9:dd:60:47:2c:33:b6:bf:b1:82:3b:
b7:c4:04:a5:66:05:ec:b3:e9:1a:ff:a3:c1:55:ce:7a:f0:cc:
ea:ad:79:10:a8:06:05:ca:80:71:33:75:81:5a:22:7a:21:5e:
43:25:a4:4f:54:33:9c:72:d8:e3:87:28:47:d4:ef:ec:f3:8b:
13:38:7a:1b:e8:b7:1a:ed:84:48:b5:12:f9:d5:d8:49:62:59:
c2:6a:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org