Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e302e302f32322d3232203d3e203336323336.roa
File: 3130342e3232352e302e302f32322d3232203d3e203336323336.roa (raw, json)
Hash identifier: H+/vslCXIWZ46ExFcwPBwZxeS0e7VabhUkYKj6hC3xQ=
Subject key identifier: 62:7E:D7:89:BE:13:1E:26:CE:25:1D:92:4A:F9:D2:6F:46:0E:69:63
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 356F959A9E4EF8481F89DBB429FA2BD6872D7826
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e302e302f32322d3232203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 17:50:12 +0000
ROA not before: Mon 31 Oct 2022 17:45:12 +0000
ROA not after: Mon 30 Oct 2023 17:50:12 +0000
asID: 36236
IP address blocks: 104.225.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6f:95:9a:9e:4e:f8:48:1f:89:db:b4:29:fa:2b:d6:87:2d:78:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 31 17:45:12 2022 GMT
Not After : Oct 30 17:50:12 2023 GMT
Subject: CN=627ED789BE131E26CE251D924AF9D26F460E6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:7c:f2:ae:e7:f4:bf:f3:4e:0a:47:b5:5f:
29:14:cb:62:1d:74:05:22:e6:42:a1:9c:a2:92:a1:
4a:9f:51:ce:1f:36:67:52:95:48:70:3b:94:a6:0b:
fe:38:a3:d7:ba:3e:24:06:0f:35:7a:27:84:8b:f8:
9f:85:f8:b1:7e:97:6b:e6:5e:9b:d9:51:a1:84:17:
60:36:43:c3:25:97:d8:0c:0e:bf:05:38:62:92:46:
b6:fe:8b:c6:10:83:50:59:94:4e:9d:4e:3f:f4:ea:
4d:7d:57:5b:75:bf:06:90:6b:11:8f:18:5a:d4:d8:
1e:36:8b:78:bb:4b:cb:eb:27:ad:ca:2d:6a:7b:26:
a0:28:15:21:96:52:48:3f:2b:e9:90:a3:07:dd:29:
11:a6:2f:7f:b9:c1:7a:82:5b:9f:29:7b:11:50:46:
1a:bb:eb:35:b6:23:1f:b0:47:23:22:01:78:f0:7d:
41:b7:2d:b5:cc:75:72:76:51:93:94:8f:bc:e7:81:
f0:9d:13:73:71:0e:7e:2a:16:7c:7a:53:b2:e7:07:
64:47:5b:26:a9:7c:b2:5f:e6:59:d2:09:8d:82:43:
b5:6e:9a:38:0b:1f:83:74:44:2d:de:6b:d5:75:91:
e4:91:b3:f3:92:4c:f3:be:eb:d1:9a:fd:ee:24:17:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:D7:89:BE:13:1E:26:CE:25:1D:92:4A:F9:D2:6F:46:0E:69:63
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e302e302f32322d3232203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:49:be:3b:1e:54:88:e5:ba:32:fc:26:d8:ae:2d:78:29:55:
36:9e:21:12:c5:15:36:c4:58:9a:aa:56:7d:c2:e0:ef:f7:03:
35:65:a9:ce:c0:4e:f3:8a:1c:24:71:17:36:08:f5:d6:24:73:
ac:35:78:30:2f:ee:d9:74:33:4b:4a:26:06:e7:9e:70:b5:c3:
59:e6:8e:c9:8e:90:af:4a:df:43:14:85:f8:91:c9:48:22:66:
a5:da:61:74:69:15:de:15:34:87:dd:81:a6:c6:91:2c:a8:a0:
08:5c:7a:36:fe:42:ef:52:ad:c1:df:cf:12:9a:b8:32:f6:16:
44:f5:ea:f9:49:25:19:31:cc:72:4d:07:ad:f0:37:40:4e:b7:
2b:28:2c:b4:7e:cd:6c:62:ee:ed:b1:61:e8:ac:ef:ec:f5:e8:
f1:e8:75:1c:f7:6f:14:4f:48:55:47:21:21:a6:f5:bf:ac:13:
82:b7:de:8d:af:8c:66:6a:95:b6:47:20:8c:e0:b8:2a:ec:52:
42:60:24:7d:22:01:a7:7b:b7:9a:f0:4a:b9:0c:82:31:92:19:
34:1a:0b:60:d0:03:cc:d6:78:9f:ea:5c:75:68:c6:f2:b6:e6:
8d:6a:22:09:96:fb:ce:5a:5d:0c:fa:d5:36:d4:82:df:d9:a2:
0a:19:7a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org