Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
File: 32332e3138352e3230382e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier: by/rVapeQT1hw57+SO3qzeEp8CblY9MfR5Z9u3BwDVE=
Subject key identifier: B4:4D:DC:46:B7:68:C0:96:0F:35:8D:77:1F:C8:EC:AA:02:FC:47:58
Certificate issuer: /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial: 15BC917CC4262739284340B2A63495490950EBCE
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
Signing time: Fri 16 Aug 2024 07:00:20 +0000
ROA not before: Fri 16 Aug 2024 06:55:20 +0000
ROA not after: Fri 15 Aug 2025 07:00:20 +0000
asID: 983
IP address blocks: 23.185.208.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bc:91:7c:c4:26:27:39:28:43:40:b2:a6:34:95:49:09:50:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Validity
Not Before: Aug 16 06:55:20 2024 GMT
Not After : Aug 15 07:00:20 2025 GMT
Subject: CN=B44DDC46B768C0960F358D771FC8ECAA02FC4758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:85:b0:c0:68:b5:e9:b9:83:99:a6:26:9c:
3f:e5:95:67:9e:a4:f0:ab:7e:85:e9:e7:b4:e6:b3:
16:d5:3e:71:a1:ac:6a:ee:d1:bb:4e:4c:a1:41:0c:
a5:db:40:3f:95:c7:6d:23:5b:72:c3:80:1e:55:84:
99:6e:02:e1:66:9c:49:fb:33:8a:e7:98:ac:ea:ea:
5b:15:96:72:16:17:ea:65:2a:00:ce:98:be:bc:46:
32:e3:e7:bd:97:bd:af:1e:a2:f3:21:d8:87:37:60:
83:15:c3:54:49:c9:27:4a:32:e6:07:93:5d:82:2e:
da:fa:68:f7:b0:46:5e:8f:86:f6:95:a5:25:27:03:
fb:3f:01:cf:c9:47:dc:78:7a:da:b2:f6:d7:d1:d8:
51:64:60:7c:17:db:28:63:43:3d:57:21:f2:3f:95:
6d:2a:5b:43:da:17:9e:27:22:90:c4:7f:4f:ec:bd:
45:09:29:91:67:42:ed:76:85:94:03:8f:58:cd:e8:
f9:5b:4c:1a:f0:ea:9e:6b:99:9c:0e:cc:85:a4:4a:
91:24:8b:ff:0f:e1:ed:19:42:f5:c6:e5:0c:51:0b:
f6:3a:5b:a1:80:0a:7e:0b:46:d5:82:93:ec:a7:4f:
2f:71:0a:5d:e7:06:8c:4e:50:5e:c7:66:22:e8:af:
65:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:DC:46:B7:68:C0:96:0F:35:8D:77:1F:C8:EC:AA:02:FC:47:58
X509v3 Authority Key Identifier:
keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.185.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f7:ac:25:38:a5:8d:d3:8e:5e:1e:26:c2:55:05:06:0e:20:
78:3e:2a:23:88:1b:fc:1a:5e:61:b2:46:a8:4b:2d:1d:a6:4b:
26:9f:1b:14:ee:04:db:5f:a8:36:d1:e1:74:3c:aa:60:96:63:
aa:5d:b2:b1:e1:19:63:89:c4:c6:41:2b:98:46:a1:26:b1:93:
ab:7f:f6:63:e0:48:f2:80:4f:72:ce:50:4b:7e:15:2a:32:cf:
83:f4:57:94:48:33:03:d7:a5:99:85:81:34:b0:de:a6:26:c6:
26:0a:26:fc:7f:b5:5f:07:f0:90:f5:c8:10:c9:85:1e:c9:cc:
7f:0a:83:96:d6:74:eb:93:6b:22:cc:90:70:62:d8:7c:5d:a3:
ae:21:bd:64:e8:4e:a8:a8:f4:89:03:c9:43:cb:81:88:fe:5d:
6a:56:89:3d:f8:92:e2:32:f8:aa:86:50:f0:a1:e3:c6:bf:f7:
3a:93:17:44:64:5d:83:8a:46:d8:c5:fa:2e:c8:35:86:f2:53:
21:93:9e:ec:cc:8e:58:81:92:4e:ff:a1:75:2d:87:46:75:f5:
a2:29:68:b1:0d:ad:9e:9f:22:ac:08:05:47:60:d4:15:7a:98:
52:4f:06:37:94:89:32:d8:1f:0a:c1:1b:71:6f:81:b5:ad:b0:
38:8c:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:02 2025 by rpki-client