Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138244.roa
File: AS138244.roa (raw, json)
Hash identifier: nHR40yy4Qpb62Zz0CJgw1fi1fJakwLeyKKPIRrQYOk8=
Subject key identifier: E8:10:E3:52:86:40:87:86:04:76:82:1C:7F:03:63:0B:AF:19:39:BD
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 1BC12433AA16FC8B3716B5B4D4F78828D53D4CE9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138244.roa
Signing time: Wed 27 Nov 2024 16:09:03 +0000
ROA not before: Wed 27 Nov 2024 16:04:03 +0000
ROA not after: Wed 26 Nov 2025 16:09:03 +0000
asID: 138244
IP address blocks: 157.254.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 19:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c1:24:33:aa:16:fc:8b:37:16:b5:b4:d4:f7:88:28:d5:3d:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Nov 27 16:04:03 2024 GMT
Not After : Nov 26 16:09:03 2025 GMT
Subject: CN=E810E352864087860476821C7F03630BAF1939BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:fe:96:40:5a:2b:22:f0:b4:d6:03:0c:45:
4f:2b:98:df:95:cf:08:af:71:5d:2a:e8:6f:d2:53:
81:d9:9f:00:ec:9c:a2:7f:0f:bf:cc:cc:f2:2a:a8:
49:12:a5:5d:6d:ab:08:ae:2a:c7:80:8c:5e:8a:40:
26:10:23:fb:5d:85:71:aa:89:4f:20:a5:e4:34:88:
14:fd:5f:11:5c:ce:2e:f2:4b:e4:46:e3:0a:81:ee:
c7:97:99:e3:68:d5:e4:cb:03:3a:9a:df:ca:b2:08:
de:92:97:f7:3d:7c:79:b6:d8:01:17:79:3b:bd:90:
a1:e6:c3:f8:1a:ce:f2:75:0a:24:0a:96:c9:e4:88:
24:98:1b:29:c4:87:ff:f6:53:60:00:42:96:e8:7e:
25:b2:95:a1:63:27:61:a6:f9:cd:43:2c:fd:53:af:
47:89:84:d3:db:35:c9:be:0e:c9:07:b0:e6:12:a1:
20:f8:d4:fb:4e:61:1c:75:f5:59:3d:6a:45:a9:48:
0e:b3:d7:ea:e5:df:84:73:a3:15:c6:7b:78:a6:b2:
08:c3:3a:f0:af:a1:80:fa:56:27:51:96:76:0a:bf:
ed:8a:ef:97:3b:57:f2:2f:cd:04:cb:19:7c:0b:90:
cd:33:54:22:0f:f4:3f:c3:03:77:fe:b6:5e:30:7d:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:E3:52:86:40:87:86:04:76:82:1C:7F:03:63:0B:AF:19:39:BD
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS138244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ae:65:b9:9f:a0:58:de:85:b1:1e:26:d3:78:f5:2b:42:71:
24:1e:d5:be:c6:df:53:c2:65:5f:3a:7f:e4:76:9a:cd:64:2f:
e6:8a:51:d4:33:91:44:bb:2b:7a:7c:07:b9:26:ec:1e:da:cb:
ec:81:4b:2b:e5:bc:14:a2:ca:2f:f7:7a:e9:4e:a3:1f:08:33:
a1:59:90:3c:21:44:c4:88:0c:f3:32:f9:5e:32:2e:32:b7:e2:
b4:57:71:cf:96:00:dd:a2:e5:f3:8d:86:5a:bf:0d:c2:32:f8:
f2:ef:48:d4:70:3e:b6:07:f8:81:04:b9:11:7c:61:c2:8b:52:
40:70:3b:7d:fa:3b:76:8f:83:29:d2:a7:e1:0b:74:4b:5a:8c:
d6:c5:ab:b1:4f:9a:67:27:12:1a:ae:10:59:3f:a8:a6:02:ae:
bf:8e:ec:89:96:f9:52:11:1f:b1:f5:f3:20:41:5f:c6:f3:6e:
07:ea:22:92:b3:57:34:5e:c2:1b:d3:5b:95:fc:2b:d5:6d:1a:
ca:a0:57:84:0c:52:b5:39:81:14:88:82:08:03:b9:5c:5a:f4:
d4:23:7d:b4:e2:00:5c:65:00:25:2c:23:07:5e:b6:6d:1d:f9:
2e:4b:c2:44:26:9e:c7:4c:be:c1:f6:df:1b:47:8a:95:5c:09:
98:44:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:20:40 2025 by rpki-client