Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273824.roa
File: AS273824.roa (raw, json)
Hash identifier: 8z7QbtL67cVI+SzaneF3bddhzOftDOsvbkD9kwknuGk=
Subject key identifier: 6F:A7:42:D4:F1:EC:43:B5:0A:49:FA:C1:75:70:2D:EE:16:EF:B6:E1
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 3BE3D2BC24FE5D7C04E1B19C66533100CB76A117
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273824.roa
Signing time: Thu 20 Mar 2025 19:53:37 +0000
ROA not before: Thu 20 Mar 2025 19:48:37 +0000
ROA not after: Thu 19 Mar 2026 19:53:37 +0000
asID: 273824
IP address blocks: 157.254.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 08:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e3:d2:bc:24:fe:5d:7c:04:e1:b1:9c:66:53:31:00:cb:76:a1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 20 19:48:37 2025 GMT
Not After : Mar 19 19:53:37 2026 GMT
Subject: CN=6FA742D4F1EC43B50A49FAC175702DEE16EFB6E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:a8:4d:85:58:95:37:4a:37:e9:95:7b:10:
e9:05:43:09:3d:a4:57:0b:58:63:dc:8b:98:e2:c0:
9a:02:2f:f9:88:74:4d:1e:31:ad:3d:69:9a:f7:79:
c8:53:66:4d:78:d1:45:43:8d:28:45:66:4e:ec:e6:
8d:6e:f0:f2:a8:9f:42:79:58:93:20:57:47:03:1f:
4d:39:39:83:db:13:6c:e5:d4:2d:d6:27:80:c7:dd:
a6:08:fe:64:6b:53:e7:3c:e4:95:06:e0:79:9e:ad:
4f:21:4c:a5:f9:0b:e0:b7:df:ba:d6:db:89:67:a3:
43:41:28:e6:98:35:7c:0f:2e:6f:de:90:96:e7:ce:
87:84:27:c7:e1:18:12:02:ea:7c:88:74:a2:ab:2e:
1c:0a:17:a5:22:31:f5:f6:ec:c6:4b:35:4b:a8:fe:
72:80:02:db:19:cc:71:b1:59:20:d8:e9:31:01:9d:
db:f4:59:96:3f:64:a9:6f:ec:0d:6f:a5:44:b5:c5:
89:e0:79:3b:97:2e:0c:f5:40:60:7f:5f:87:1e:ed:
ac:f5:a3:ec:7a:3e:12:0e:80:7f:88:51:94:0c:8e:
87:63:13:80:5b:eb:fe:a0:f2:81:45:86:d3:a9:3a:
e0:b2:0e:fe:5d:e6:94:f5:58:f0:5a:27:b8:05:f6:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:42:D4:F1:EC:43:B5:0A:49:FA:C1:75:70:2D:EE:16:EF:B6:E1
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS273824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:22:3a:95:fc:a1:5e:e4:f3:0e:75:b2:8a:92:e1:8a:7a:21:
b9:d2:81:16:c0:7d:c7:14:b7:82:1b:21:d4:f6:dd:6d:24:fd:
e0:e0:42:11:42:d4:ef:43:45:d3:dc:0a:94:78:43:d3:4d:2b:
34:ee:82:02:dc:02:df:72:21:2e:d1:a5:fd:90:4f:c3:83:8c:
0f:bf:2d:03:9b:1c:eb:3b:be:9a:89:5f:bb:a5:a9:f6:a6:19:
72:28:f1:7a:2d:1a:f9:ec:42:21:b1:1d:a0:5d:54:a9:97:aa:
16:70:38:5f:4c:9b:2f:a2:a3:8e:0f:ce:a1:0f:df:01:e6:07:
5b:4f:23:df:4a:d1:51:79:c4:7b:7a:4d:b1:9d:9f:ba:4b:f2:
fe:78:3e:eb:07:12:e5:e6:47:b2:5a:0f:05:ac:5e:8d:f3:76:
a7:90:84:17:7d:a2:74:07:1c:17:cb:b5:a5:e6:e4:f9:51:7a:
4c:46:b5:ee:6c:ad:22:c7:f3:45:5e:64:0a:61:8d:ec:21:5e:
16:c5:d5:7e:26:44:a7:ac:15:33:10:48:1e:f8:56:b4:55:fd:
a2:ba:68:8e:87:9e:11:50:c4:57:6c:75:da:86:75:d7:2b:2a:
db:5f:d3:85:0a:d8:49:1d:14:4d:a5:30:ef:32:a9:25:e1:7b:
ca:9c:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:40 2025 by rpki-client