Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
File: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: DZm7eY1dDQqpgM+Bj24LbZlETuRRB0Yhf62KfdcOMC4=
Subject key identifier: 0A:70:C6:36:8D:C9:F4:ED:FE:F2:01:3D:33:B1:19:0C:F1:86:BD:46
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 6C5C4BEEEBB7EDCE86EEF960CED096500065BDA4
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
Signing time: Tue 05 Nov 2024 03:40:11 +0000
ROA not before: Tue 05 Nov 2024 03:35:11 +0000
ROA not after: Tue 04 Nov 2025 03:40:11 +0000
asID: 61138
IP address blocks: 103.208.85.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5c:4b:ee:eb:b7:ed:ce:86:ee:f9:60:ce:d0:96:50:00:65:bd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Nov 5 03:35:11 2024 GMT
Not After : Nov 4 03:40:11 2025 GMT
Subject: CN=0A70C6368DC9F4EDFEF2013D33B1190CF186BD46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:0c:b5:e6:5d:d3:6d:10:2a:e0:1e:56:03:
58:1f:43:79:d8:51:6a:f8:85:40:f8:1d:da:d5:6b:
60:c4:57:a1:46:8c:b2:1f:44:46:56:f4:e6:0a:4f:
36:a4:1f:a2:ca:e3:c5:36:f6:45:3c:60:2b:15:fd:
00:43:d6:7d:6b:ce:f0:c6:b8:92:0e:7b:b0:14:7b:
bf:d6:d3:a2:6e:8d:a1:f9:67:ad:51:c4:e3:7e:ca:
1a:b6:24:17:c3:64:a9:20:ac:69:17:13:6a:7b:e9:
d7:40:cc:a0:0a:de:49:47:cb:86:58:53:c2:e0:a1:
bb:ae:4e:88:51:47:4d:1c:55:ca:0a:16:f1:21:a3:
98:25:0c:a0:34:de:40:41:a6:64:ae:02:38:d2:cb:
db:7b:c1:a3:3a:b9:ec:b3:fd:f3:e5:bf:7b:a3:6a:
6a:c8:9d:e6:98:4f:c0:d0:5e:b3:9e:b7:71:0c:cf:
52:7a:7e:60:ac:ca:c8:40:4d:48:16:40:b9:7c:c5:
ed:48:39:0e:74:e1:c6:93:5f:da:c2:20:3b:ce:db:
cf:b5:bf:46:c0:a9:c9:55:13:71:9b:72:e7:22:15:
ac:cf:eb:2b:f3:84:4b:30:d1:8c:72:da:2d:19:4a:
f2:28:d9:4a:34:0c:cc:bc:a6:ec:bd:08:66:fb:66:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:70:C6:36:8D:C9:F4:ED:FE:F2:01:3D:33:B1:19:0C:F1:86:BD:46
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4c:3a:1d:f1:36:b3:0c:4a:ff:20:75:3f:70:49:26:12:32:
ed:fb:68:6d:6b:98:50:74:d2:53:0d:1c:15:f0:68:1c:4f:aa:
36:43:73:43:51:41:d6:c8:7d:4d:e1:e0:13:5a:fa:6a:70:59:
54:66:6a:04:63:4f:f2:bf:a4:46:d9:38:0b:c7:0c:42:b8:06:
0f:3a:43:4c:fc:db:d6:38:e9:6f:87:1a:ea:28:16:05:98:f6:
1c:e9:f7:f8:ca:51:8b:36:60:84:92:5a:85:9e:fb:06:c4:5a:
1a:e1:b5:20:f6:0a:69:12:72:ab:04:2f:aa:c0:4a:4a:df:31:
30:6a:bc:51:16:37:92:c3:8d:38:e1:dc:9c:cc:e2:27:7b:2a:
34:91:d8:de:c5:17:31:6a:39:fa:3c:60:59:42:3b:19:d5:c9:
90:87:7d:67:60:b5:f8:b1:cb:4c:ee:31:0e:ba:3f:5e:34:80:
e4:66:ea:24:80:ea:d5:7e:f9:1e:c3:4a:13:22:c9:4b:26:8c:
8d:29:08:35:bd:6e:f2:fc:b5:de:7d:b3:79:48:e8:ae:60:1b:
48:80:88:f4:b5:3d:f1:40:3d:ca:d0:27:89:14:9c:2b:10:fd:
10:c1:d6:4b:df:8a:95:d6:92:3d:24:80:fc:5d:ad:04:fe:c4:
73:98:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:59 2025 by rpki-client