Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa
File: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier: W7U8cvEVzTdvHSzUGfCgZA1QXMFX/pc8YZ7R9tHweQg=
Subject key identifier: 02:8A:66:1C:FB:13:9D:65:45:8E:11:19:DF:E2:EB:0C:3D:D6:A0:62
Certificate issuer: /CN=A916C75D0000/serialNumber=ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF
Certificate serial: 753468FB4E555B81D5E32C8EDAD2E3ECE1E536F5
Authority key identifier: AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa
Signing time: Fri 16 Aug 2024 07:03:25 +0000
ROA not before: Fri 16 Aug 2024 06:58:25 +0000
ROA not after: Fri 15 Aug 2025 07:03:25 +0000
asID: 983
IP address blocks: 2407:cdc0::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:34:68:fb:4e:55:5b:81:d5:e3:2c:8e:da:d2:e3:ec:e1:e5:36:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000
Validity
Not Before: Aug 16 06:58:25 2024 GMT
Not After : Aug 15 07:03:25 2025 GMT
Subject: CN=028A661CFB139D65458E1119DFE2EB0C3DD6A062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:19:df:3a:8e:a9:f7:4d:e0:a7:94:4e:a8:
dc:08:b1:6c:ec:22:4c:52:9b:a0:96:d0:85:56:6a:
bd:89:98:ad:09:b5:a8:7a:9a:3c:9f:bb:25:04:03:
25:ec:81:ff:ff:66:ad:96:6d:9b:ef:01:73:86:9c:
90:02:21:d4:a4:d9:cc:c9:73:1f:fb:3e:1a:0a:64:
67:05:f6:c0:df:8d:1a:92:c5:a8:ac:79:eb:98:25:
fa:69:db:4a:7f:3a:23:e6:c1:c8:01:51:cb:16:c8:
7b:75:08:63:b6:d3:60:38:74:f5:50:ea:bb:6c:86:
91:bc:07:9a:63:bc:cf:53:3f:04:90:37:1f:54:26:
6d:e0:cc:80:db:bc:02:17:1b:33:30:95:5a:09:59:
d0:70:ac:db:36:b1:f4:36:16:16:4d:da:20:f4:69:
3c:93:40:e0:e3:4b:0b:47:64:8a:3c:87:77:50:00:
2a:66:55:2d:08:14:a2:e6:49:cc:3b:98:5d:49:03:
3e:b3:84:63:58:1e:d2:e9:52:57:b4:e6:7d:3b:e2:
08:18:8a:69:0b:1f:ed:80:2b:2b:e7:46:41:0d:a4:
5f:74:25:2f:29:28:d7:0c:3d:03:cd:14:97:3f:8f:
5e:1f:9b:36:c7:6b:20:e2:b5:89:f3:81:da:a7:0b:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:66:1C:FB:13:9D:65:45:8E:11:19:DF:E2:EB:0C:3D:D6:A0:62
X509v3 Authority Key Identifier:
keyid:AD:BE:1A:0F:46:F9:C7:7B:0D:24:9F:D6:A4:38:B4:8B:7F:B2:1B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/ADBE1A0F46F9C77B0D249FD6A438B48B7FB21BCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rb4aD0b5x3sNJJ_WpDi0i3-yG88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/1/323430373a636463303a3a2f33322d3438203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:cdc0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:23:32:08:0b:02:78:4b:70:f0:6b:51:dc:50:6b:00:46:f9:
29:2f:1b:b6:29:6f:dc:eb:8b:94:5a:7d:dc:65:9d:dd:1d:8a:
e7:d7:62:2c:40:0c:05:ac:2c:1e:ef:fb:0c:9a:49:03:41:37:
07:9f:f5:f6:17:f1:60:c9:ee:bd:03:4a:93:46:28:35:6d:f7:
c4:db:03:65:38:c1:85:1c:72:22:21:f1:db:d2:c6:1b:99:3a:
68:9c:93:7e:9e:ba:21:0b:d4:c2:7f:2c:cd:7a:ea:d2:fc:18:
41:46:f0:65:8a:96:16:4b:ea:4c:09:89:1e:4a:f1:40:5a:e2:
8f:b6:39:0f:23:9b:b6:fc:65:e4:c0:7a:de:4c:27:a9:6f:5b:
1c:3b:39:c0:c6:14:e7:ad:06:e5:35:9a:b4:cb:d9:20:5b:f5:
a2:a4:41:6f:55:16:f2:ac:bd:9c:f4:a3:e3:33:be:42:c1:c1:
39:50:0f:cd:96:66:bc:98:db:1f:04:c1:fd:ee:31:98:87:a9:
c5:e6:63:41:35:e2:ae:b3:58:79:a2:f1:17:91:d0:a9:0e:36:
c8:c2:3c:9b:97:ee:6a:cd:71:5d:66:b7:f3:55:fa:a3:d5:d3:
2b:0f:70:a3:35:9f:53:5a:a7:ae:63:c8:35:68:cf:c0:8b:ef:
38:b8:b1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:29 2025 by rpki-client