Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa
File: AS214209.roa (raw, json)
Hash identifier: aDQ3y5JgTL4ujVrT37ZFWnfbBFKZIPSXtJkX+wkpEuo=
Subject key identifier: 23:45:C0:9A:D8:70:AA:CB:4C:16:D9:B5:9B:BC:BF:AF:6B:29:C3:DD
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 2DE235EC313C6F6B36C5F3A33377E150E1EF7583
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa
Signing time: Thu 14 Nov 2024 19:13:53 +0000
ROA not before: Thu 14 Nov 2024 19:08:53 +0000
ROA not after: Thu 13 Nov 2025 19:13:53 +0000
asID: 214209
IP address blocks: 157.254.34.0/24 maxlen: 24
157.254.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Dec 2024 00:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e2:35:ec:31:3c:6f:6b:36:c5:f3:a3:33:77:e1:50:e1:ef:75:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Nov 14 19:08:53 2024 GMT
Not After : Nov 13 19:13:53 2025 GMT
Subject: CN=2345C09AD870AACB4C16D9B59BBCBFAF6B29C3DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:df:d2:6c:32:c0:3d:58:c5:08:54:62:ce:
c9:59:84:92:6b:53:ce:f9:26:91:c6:2b:34:19:b0:
45:e8:a6:3a:96:6d:31:f4:a0:84:bd:81:d4:76:ef:
8d:42:71:70:9a:8b:d1:aa:4d:9c:c4:d8:af:69:58:
8c:82:a8:a1:10:f2:b3:f1:17:ae:85:5e:9e:c7:a5:
61:6b:87:0a:a2:39:cd:0d:15:3b:7d:3c:5e:19:35:
37:f8:b5:c0:be:f3:5c:85:1d:2e:76:46:63:27:92:
13:a3:94:55:bb:8d:8a:aa:3b:52:57:bb:62:99:dc:
81:be:c4:a5:ed:81:da:8e:2a:0d:77:4d:56:ff:13:
88:16:85:8b:50:d2:86:53:46:c2:8a:72:73:bf:77:
ed:36:7f:71:ae:f5:aa:05:cb:19:b2:6a:3d:3c:45:
48:68:da:0b:ed:ed:ae:a6:f8:5b:ed:30:26:06:44:
fd:90:93:06:6e:34:d3:21:fe:c0:fc:23:1f:ce:0b:
c9:cf:5d:9a:12:dd:a7:20:ba:12:5a:31:39:95:76:
8e:83:7b:ba:e0:58:83:ab:44:ef:c3:df:1d:8a:02:
4c:1a:59:73:11:79:77:5f:92:8e:3b:41:96:5b:8d:
12:41:9d:b4:83:b6:ef:b3:cd:3f:7b:7b:dc:37:16:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:C0:9A:D8:70:AA:CB:4C:16:D9:B5:9B:BC:BF:AF:6B:29:C3:DD
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.34.0/23
Signature Algorithm: sha256WithRSAEncryption
44:eb:04:d9:43:4e:66:9c:37:ba:7d:e0:22:4a:b2:ce:e7:0f:
32:00:ce:af:d2:75:41:37:31:01:cc:7b:7d:16:c1:3b:ee:8a:
24:40:8c:2e:1c:c8:0c:5c:2f:8b:c1:79:cc:4d:f1:ca:b1:cc:
94:bc:6d:64:a1:62:41:0e:d6:28:6f:f3:b7:86:52:74:de:84:
52:11:d3:f8:36:9e:b8:ce:4b:68:36:3e:b8:66:85:7f:4a:b8:
da:53:7b:16:78:d0:fa:8f:1b:78:77:de:9f:b8:cc:65:06:3f:
66:94:6c:56:3b:c0:e2:98:d7:e2:cd:58:12:18:a6:58:1b:ad:
b0:6c:42:42:40:5a:52:08:2f:5d:f4:a2:fc:84:9f:7d:bc:75:
f4:f9:6d:75:ae:fc:d5:02:47:e9:3b:df:c4:37:20:de:9c:78:
0a:cd:51:77:d4:2b:2b:6e:ac:1d:a9:df:1b:3a:9f:40:ca:16:
f9:5e:1c:09:7c:9c:5a:b5:a4:ef:c2:68:9b:89:32:2a:d0:67:
09:d8:01:45:ea:87:cb:98:7c:20:85:17:81:f7:a3:fd:de:5c:
d3:c2:08:58:e4:8b:1b:86:fb:79:a4:87:81:8d:e9:07:3e:b6:
b6:32:f0:bc:11:34:3c:4a:98:33:3a:bb:09:91:37:b5:05:ca:
8f:71:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:24 2025 by rpki-client