Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
File: 3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: y71Jqn/IsEeUZRC1HkfWAUfedxJ4Io2cxc3Cn/07aRQ=
Subject key identifier: A6:79:08:EF:E5:7C:41:A2:2C:FC:DB:E7:D2:EC:6D:17:D0:46:C8:82
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 3B1C6AAB7EEFFFC101BFFCC593CE80C3771C0CD7
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
Signing time: Tue 05 Nov 2024 03:40:11 +0000
ROA not before: Tue 05 Nov 2024 03:35:11 +0000
ROA not after: Tue 04 Nov 2025 03:40:11 +0000
asID: 61138
IP address blocks: 103.68.108.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1c:6a:ab:7e:ef:ff:c1:01:bf:fc:c5:93:ce:80:c3:77:1c:0c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Nov 5 03:35:11 2024 GMT
Not After : Nov 4 03:40:11 2025 GMT
Subject: CN=A67908EFE57C41A22CFCDBE7D2EC6D17D046C882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:fd:5d:1c:08:12:ca:1e:36:df:5a:65:0a:
e1:7d:a7:e2:aa:8a:d2:0d:0c:b6:11:18:96:ae:b0:
7d:43:56:e3:6e:61:49:98:e6:e6:1c:07:c4:01:29:
d9:5b:79:fe:fc:f6:3b:b9:19:1c:bb:39:8a:33:66:
80:53:1a:77:a5:be:73:fe:2c:43:50:55:3a:f2:be:
13:2c:87:1b:c3:e6:63:ad:89:57:8e:6d:d5:25:96:
c7:c0:f1:1d:44:cf:65:04:e2:f2:1a:01:07:3f:a4:
0f:64:f1:72:f3:a0:71:f8:00:0a:23:bb:d8:2f:e6:
8d:38:fd:58:bd:30:11:c4:4a:c0:b8:24:0c:4a:47:
48:9a:75:17:36:3d:bb:b8:4f:9b:bb:a0:0e:cf:eb:
81:26:d4:bf:0d:5f:ac:94:d6:24:da:fd:90:f1:5c:
51:61:f0:5f:cc:8e:c9:6b:e5:2c:ee:8b:5a:b6:2b:
0b:65:9b:d2:15:2e:92:87:38:66:25:9b:d4:7b:b5:
49:91:43:f3:ef:cd:36:ec:a0:48:30:46:99:2b:93:
6a:27:61:f8:6b:8e:68:76:ce:af:88:80:22:a9:e2:
33:75:7d:5d:99:02:e8:5c:64:73:0d:ff:08:f8:56:
83:2e:4e:a9:ac:9c:6b:a3:d9:2b:f0:3f:da:9a:db:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:79:08:EF:E5:7C:41:A2:2C:FC:DB:E7:D2:EC:6D:17:D0:46:C8:82
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130382e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
14:94:84:b6:5a:15:94:79:9b:b6:93:74:c2:4a:bc:f9:c8:03:
45:41:97:e1:a1:b1:e3:25:e3:72:1f:96:c4:07:71:10:74:05:
d6:5b:81:f9:f6:db:e2:e2:8e:e1:58:b9:11:d0:ee:ae:db:01:
a5:b8:30:ac:e9:73:b4:77:28:bc:35:e3:06:cd:52:0f:3a:b6:
80:66:94:59:35:30:52:03:0c:d3:df:96:95:fb:e3:24:67:a4:
af:83:ab:40:19:ce:50:b4:f9:dd:7b:12:b6:d2:6d:54:e3:65:
6a:4a:9c:a8:7c:b0:dc:59:dc:19:d2:ed:ad:8a:14:99:cb:33:
7d:c9:65:e7:b8:97:c7:43:58:8b:87:dd:8a:9f:00:20:ab:98:
20:0e:be:94:9e:63:5b:e5:96:58:30:5b:09:10:ff:04:0a:7e:
34:c8:0d:18:5a:e0:01:ea:75:2e:e7:e8:e3:d9:ba:49:5c:68:
57:65:1c:91:4e:db:a1:9c:dc:2c:dc:89:f1:3e:47:23:2c:54:
b1:19:56:4e:d0:9d:3b:e1:dd:bf:7e:b4:af:e5:16:d9:94:e0:
c0:92:ff:c4:23:e9:7c:de:bc:82:62:66:74:e7:0e:87:be:9a:
07:4c:e1:9a:46:7a:91:ae:ce:88:50:e8:d8:9f:14:9d:79:e6:
52:e7:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:45:22 2025 by rpki-client