Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e2033323830.roa
File: 3137322e38322e39312e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier: 6DOgnUK3R643/8RZVXOzWcAQOxSruSLTSXfYvjVHPAU=
Subject key identifier: 30:D9:8F:65:FD:B5:03:AC:F3:A5:0A:BE:F9:0D:AA:58:9E:77:72:90
Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial: 3B6033602A2AB1D5FE390A52637D7544C5289EC3
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e2033323830.roa
Signing time: Tue 26 Jul 2022 11:11:11 +0000
ROA not before: Tue 26 Jul 2022 11:06:11 +0000
ROA not after: Tue 25 Jul 2023 11:11:11 +0000
asID: 3280
IP address blocks: 172.82.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:60:33:60:2a:2a:b1:d5:fe:39:0a:52:63:7d:75:44:c5:28:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Validity
Not Before: Jul 26 11:06:11 2022 GMT
Not After : Jul 25 11:11:11 2023 GMT
Subject: CN=30D98F65FDB503ACF3A50ABEF90DAA589E777290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:17:c8:69:69:9e:39:e1:28:f9:6c:48:59:
3d:b2:45:d4:c4:bc:01:3a:1d:56:cd:16:74:b3:6b:
6e:3c:c3:5b:c1:49:14:ea:a5:0a:ab:56:d6:6b:35:
1d:1f:64:49:8a:20:dc:e9:cd:0d:c4:c3:8c:9c:38:
39:2a:53:f7:d6:18:af:3b:0a:e9:9f:40:96:1a:0d:
1e:cc:af:ca:25:87:23:7b:3d:89:77:4c:94:1a:fb:
8e:0d:12:74:32:47:61:91:89:4a:e8:d1:53:57:07:
6d:3e:23:24:4f:e5:7d:20:0b:be:20:f3:a4:10:0b:
bd:ed:d3:bb:2b:30:24:6e:23:29:b8:06:e8:2c:cc:
3e:90:ba:09:d8:dc:49:b9:85:b8:df:ad:1b:5c:97:
2c:d6:90:74:1b:34:a0:7e:40:f4:ac:b3:62:4a:30:
49:96:82:60:e7:e3:a0:35:b8:cd:ed:0c:ec:30:13:
7a:98:cf:49:b0:30:c0:a8:e9:55:16:3b:5e:f0:01:
cb:9f:08:13:f1:b2:62:0a:cd:3d:28:77:bc:f4:6f:
79:66:08:0a:bc:80:b0:2f:b1:e8:43:fc:d9:06:44:
22:a7:bd:f9:17:00:95:90:5b:d1:97:1a:74:45:ac:
6b:f8:51:30:a3:48:b9:22:6d:35:56:0e:f8:d0:85:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:8F:65:FD:B5:03:AC:F3:A5:0A:BE:F9:0D:AA:58:9E:77:72:90
X509v3 Authority Key Identifier:
keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e2033323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.82.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:54:41:2d:46:92:3e:56:61:f8:68:85:c8:44:90:8b:1e:91:
5c:f3:9a:53:28:89:61:c7:55:12:19:76:b3:93:8c:21:9b:e2:
46:ce:9b:bf:90:b2:87:97:13:80:fd:f8:8f:d3:ce:a7:c2:db:
f7:b6:04:bc:d6:12:43:9e:68:e3:ce:a6:d0:86:d5:3a:74:27:
f3:48:b1:c8:17:46:91:97:30:85:e3:3b:06:8a:2a:ae:fb:8b:
3f:89:b4:9a:c3:ec:12:2f:48:20:27:a0:de:71:01:9a:6c:2d:
a2:03:f1:57:df:7b:2a:65:29:bd:df:b1:74:50:43:ec:48:1e:
f3:9e:ec:6a:56:7f:5c:55:05:28:6d:c6:56:53:60:68:33:0b:
a7:1c:91:68:d4:af:7b:74:e1:6b:5c:7d:59:4b:b4:b7:6c:5d:
e8:11:56:c5:5e:57:ba:83:eb:5a:2f:e7:5a:4e:a2:05:94:82:
a6:00:67:1a:66:8c:79:f2:ee:1c:02:d9:6c:96:bd:9c:ee:b6:
86:eb:a7:a0:f8:93:f1:a6:29:35:a7:d2:fd:e5:85:43:87:13:
a4:98:48:b1:2e:09:c3:70:c8:04:cb:24:69:df:59:63:ae:e5:
50:c8:98:14:4f:44:e6:23:70:89:a4:36:17:39:f0:6e:d1:5c:
e1:bf:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org