Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203236393330.roa
File: 3137322e38322e39302e302f32342d3234203d3e203236393330.roa (raw, json)
Hash identifier: YQdINvRk0yzVJyaTuEuopDypbuZ9G/ivi5DnXijI63g=
Subject key identifier: 4F:48:2C:35:2E:79:BD:3E:96:CA:FC:70:C5:57:18:F1:FB:35:63:95
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 5A2066E43CA3E3382C8F2648B441B2B8A8C01553
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203236393330.roa
Signing time: Thu 02 Mar 2023 06:21:28 +0000
ROA not before: Thu 02 Mar 2023 06:16:28 +0000
ROA not after: Thu 29 Feb 2024 06:21:28 +0000
asID: 26930
IP address blocks: 172.82.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:20:66:e4:3c:a3:e3:38:2c:8f:26:48:b4:41:b2:b8:a8:c0:15:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Mar 2 06:16:28 2023 GMT
Not After : Feb 29 06:21:28 2024 GMT
Subject: CN=4F482C352E79BD3E96CAFC70C55718F1FB356395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:9a:e4:ec:a9:67:d5:10:e7:7e:ed:aa:3f:
bf:ba:dc:9b:53:c3:c6:1b:01:e7:d0:75:d8:21:08:
11:ad:61:0d:e8:00:cd:91:60:b1:20:51:47:fa:ba:
78:2e:27:23:cd:1a:b9:0c:8f:a7:58:73:6e:a0:57:
2e:69:d9:46:bf:92:b5:4c:11:1d:e6:dd:94:93:b4:
0c:ec:31:64:78:20:08:78:77:0a:34:c8:00:f3:f7:
9f:f7:53:4c:36:80:35:56:c6:ff:08:c7:6f:40:d7:
42:96:b3:da:60:ba:7b:ac:a1:af:e0:38:c3:71:a4:
e0:99:87:79:5f:4f:22:88:63:92:6c:8e:ba:bb:c5:
c6:b2:30:3b:02:bd:06:1e:91:4f:7f:41:cd:f7:96:
75:21:75:d9:72:28:ed:28:00:6a:dc:6a:27:3b:5c:
ff:e6:48:bc:2f:ac:06:ce:f5:ab:35:27:24:a0:7d:
e5:61:37:bd:11:d1:a5:74:b4:38:3f:45:f9:3c:53:
a5:c2:15:f4:51:de:33:48:99:f7:3e:4b:31:ea:ba:
f6:70:49:45:39:ce:d6:b1:91:3b:bf:ac:1f:db:b3:
26:8e:6e:ef:43:57:bd:81:8d:6c:ff:82:d5:96:05:
6d:93:29:19:70:81:5b:6f:c6:d5:dc:73:e9:f2:fa:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:2C:35:2E:79:BD:3E:96:CA:FC:70:C5:57:18:F1:FB:35:63:95
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e203236393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.90.0/24
Signature Algorithm: sha256WithRSAEncryption
69:10:76:9d:78:88:21:31:04:76:be:a5:27:8f:7a:9d:9c:40:
4b:ed:dd:95:d3:d1:a6:fa:84:9a:1c:39:06:00:da:ae:3c:08:
93:22:2d:6a:a2:64:b0:04:6f:ef:12:26:d1:11:75:05:1b:2b:
ac:67:80:02:51:47:44:d8:f4:d2:14:fa:cd:ff:df:d3:f7:8e:
96:15:77:82:8a:7f:cd:2c:e7:99:95:c4:67:49:ed:22:2a:4b:
1c:a8:d2:7f:78:8d:b1:39:b0:01:46:a8:37:a3:02:02:59:04:
35:24:62:98:41:71:fc:9a:c2:0e:ef:fb:45:51:e1:e2:4a:18:
1d:64:eb:cf:3f:79:d4:4b:87:a6:1a:3f:ec:f3:20:13:56:12:
82:d5:71:4a:69:aa:e8:e1:c3:4b:26:1a:f8:0f:7b:1a:13:6a:
51:e2:9b:54:62:26:b3:a0:f7:f0:0d:49:78:df:a2:8c:55:61:
e8:d4:bc:b1:78:42:67:4b:3e:90:2c:ac:d1:5a:12:c7:7b:0d:
84:ce:cb:26:93:74:d3:5b:f5:ab:f1:80:2c:82:30:1e:4d:05:
2d:71:cb:79:51:55:b1:dd:a7:95:89:fd:69:b4:a5:d3:e4:fd:
0e:80:26:0a:08:e1:92:47:c3:06:21:76:62:08:b6:f3:9a:a4:
fd:3d:a3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org