Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400601.roa
File: AS400601.roa (raw, json)
Hash identifier: Azr0PxtTLkznxyS1MlIWHDuiN8USSRcU1GBiKz/GkiA=
Subject key identifier: 39:46:20:33:47:EC:1B:37:AA:84:D0:33:2F:77:52:A7:EB:EA:21:71
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 7A55FBC4A6F4B7A15D38CD5C4378B64E1D7A30BD
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400601.roa
Signing time: Sat 24 Jun 2023 14:23:08 +0000
ROA not before: Sat 24 Jun 2023 14:18:08 +0000
ROA not after: Sat 22 Jun 2024 14:23:08 +0000
asID: 400601
IP address blocks: 140.99.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:55:fb:c4:a6:f4:b7:a1:5d:38:cd:5c:43:78:b6:4e:1d:7a:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: Jun 24 14:18:08 2023 GMT
Not After : Jun 22 14:23:08 2024 GMT
Subject: CN=3946203347EC1B37AA84D0332F7752A7EBEA2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:6f:27:0e:d8:54:e5:c5:0d:34:36:39:ac:
83:6d:cf:37:09:db:4e:b7:d3:86:0e:38:c4:06:d4:
c8:c6:c3:39:38:e5:8c:6e:f5:d4:ba:03:4c:ca:ca:
45:c8:47:78:4a:85:06:2b:47:99:65:4a:9c:a4:14:
a1:3f:47:0e:e5:9f:c9:2a:c2:f8:d6:92:dc:ee:d4:
d4:18:a8:4e:97:da:2f:4a:06:5d:44:44:1c:c1:df:
3c:d5:30:81:13:d2:ca:39:2e:e2:1c:f9:a5:b1:42:
af:de:be:9b:2d:49:d4:47:77:0f:15:66:1a:18:cc:
ea:0b:a4:e4:8c:9f:2d:d1:60:3e:4b:56:3a:8e:ce:
55:c9:ef:e1:50:42:de:8d:85:df:18:71:a7:a8:03:
be:e1:ae:f7:29:49:cc:bf:69:a0:fd:81:44:cd:41:
ab:b7:b8:66:f0:38:ff:8a:aa:40:b5:08:5f:b2:f6:
80:b0:b4:95:50:db:b0:b4:c8:39:f0:99:fc:6d:5d:
b4:0f:ac:c0:c3:e3:f2:f0:50:3d:fc:0d:b4:96:17:
1b:b9:98:d6:3e:58:33:dc:55:c7:bd:0c:b1:a9:db:
26:4a:17:45:13:28:ee:68:07:ff:fb:85:d3:0d:fc:
e0:2c:81:cf:d2:70:2b:a7:34:57:f9:32:1b:12:4f:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:20:33:47:EC:1B:37:AA:84:D0:33:2F:77:52:A7:EB:EA:21:71
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.114.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:7f:7f:cd:35:ab:c8:75:ca:c3:82:90:04:32:16:1e:5e:9c:
e5:7e:46:93:55:b7:9e:4c:89:d5:47:35:86:27:00:34:e0:f4:
93:9e:6c:3a:52:0d:7b:41:ca:7a:e1:60:3f:13:9c:11:02:1a:
18:69:1d:0c:4b:80:d2:66:7a:f7:28:3e:11:db:9c:a6:67:1e:
93:e4:43:49:f9:31:96:ee:e8:a0:16:0b:9f:53:99:65:ea:e6:
a7:43:6c:eb:ae:de:6a:a5:46:ce:5f:21:c7:37:be:7d:ce:80:
e0:fb:50:96:0c:af:66:f1:48:46:84:12:ac:e2:70:a3:55:94:
cd:67:62:4f:7a:74:48:87:aa:50:0b:1e:28:3f:9d:5b:e9:af:
b7:e2:9a:71:4e:4e:ea:3f:6a:5d:10:8a:0c:93:4e:c7:d5:6c:
f2:67:f6:bf:77:e5:05:75:98:e1:65:a2:55:90:ef:6b:ad:19:
86:82:e9:aa:aa:bc:3c:67:09:cc:ee:5c:59:64:93:cf:65:42:
a8:db:91:b3:b7:6c:39:db:2f:61:27:f3:c5:1f:4c:d8:94:2a:
1d:67:24:c4:1d:49:d5:b3:ac:61:2f:a9:9c:9c:13:f9:e6:d9:
5c:a5:34:06:ea:d8:91:69:e7:04:f3:3e:02:6b:84:fe:fe:53:
62:78:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:11 2025 by rpki-client