![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e312e302f32342d3234203d3e203336323336.roa
File: 3130342e3232352e312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: D5SgspEMfsZclkg/0XHo4OEiOD9ej2DeRjGQfyeBxvY=
Subject key identifier: 9F:A6:FD:B7:31:C5:00:88:4E:24:32:ED:60:AE:E1:23:CF:E6:AF:C6
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 7878C72361E94B75F1C268E162E57AC0B0CFAA66
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e312e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 17:50:10 +0000
ROA not before: Mon 31 Oct 2022 17:45:10 +0000
ROA not after: Mon 30 Oct 2023 17:50:10 +0000
asID: 36236
IP address blocks: 104.225.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:78:c7:23:61:e9:4b:75:f1:c2:68:e1:62:e5:7a:c0:b0:cf:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 31 17:45:10 2022 GMT
Not After : Oct 30 17:50:10 2023 GMT
Subject: CN=9FA6FDB731C500884E2432ED60AEE123CFE6AFC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:23:14:13:d8:30:76:c0:54:1d:41:1d:82:
0a:35:e6:73:cb:dc:9e:31:e1:97:f7:1f:46:2c:9c:
47:50:58:dc:e5:ab:03:82:f7:d4:5f:87:dd:ce:c0:
7a:aa:5c:2f:44:d8:9a:56:52:a7:af:32:24:27:72:
5c:7e:3c:5b:03:1e:be:22:4a:ac:b8:56:37:34:83:
5a:5e:0b:97:bf:de:5c:60:b6:ea:75:d0:cd:32:55:
0e:a0:b5:0b:68:3e:38:e9:1e:b0:69:b6:1c:e2:ab:
c6:d7:a0:26:9a:e3:11:68:6c:e2:25:b2:2f:08:1a:
18:9e:ea:fe:c9:59:28:18:41:af:ef:30:a1:78:d2:
3c:65:e8:db:2a:b6:e6:37:5f:f9:a1:b5:04:5c:e4:
33:cb:b0:f0:58:45:b8:1c:66:e1:2d:ad:08:98:d1:
0c:ad:e9:c2:19:b3:0e:cc:f3:c7:8a:b7:43:99:0e:
a8:7f:a2:77:a6:c7:e2:70:52:59:d5:e6:e3:b6:0b:
ce:6e:47:5c:09:01:ae:4e:e5:a0:d7:a6:03:77:38:
44:ff:d8:2c:79:db:8c:e1:25:c3:65:bc:10:4f:47:
ac:0b:54:43:23:2e:e1:8a:00:13:42:23:0c:5c:2b:
1f:4c:b3:a6:3d:ca:4c:84:60:c3:d8:15:ec:73:0b:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A6:FD:B7:31:C5:00:88:4E:24:32:ED:60:AE:E1:23:CF:E6:AF:C6
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e312e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
35:49:d8:29:0e:5b:44:e2:26:c4:96:f3:51:fc:eb:06:73:de:
8b:97:d0:db:cd:3e:3a:19:4f:10:1c:0e:b6:3b:f3:89:df:fd:
ee:46:17:a9:c8:f2:60:f4:e9:53:3b:25:81:0a:8a:36:91:a7:
29:b7:62:5d:49:43:d3:3b:20:1f:d8:70:6b:89:c7:74:63:60:
67:c0:52:7e:e7:1a:95:4a:6d:92:2e:aa:87:23:67:d7:15:36:
62:9b:c9:1d:c0:4a:b3:56:db:17:f0:ac:99:60:32:d8:7e:64:
41:97:24:51:59:21:0b:7d:c5:17:56:02:77:4c:53:87:81:db:
4e:07:65:a0:86:64:09:f2:de:fe:c1:cb:36:fe:e5:e6:35:18:
d6:46:d7:cc:ee:cd:50:d4:12:30:13:d3:91:b8:93:63:b5:7f:
8c:be:91:60:6d:51:f5:e9:09:96:c7:18:bd:8d:08:01:df:12:
b8:21:51:44:1a:42:9f:64:c1:9f:62:6b:96:db:12:66:57:e0:
0c:f3:fd:5e:49:67:42:15:09:69:d1:9c:f5:e8:80:77:77:e6:
85:34:bf:68:20:1a:37:94:4a:a1:cc:51:b1:3e:32:67:e4:f5:
1e:a3:fd:aa:f9:6b:74:1c:db:dc:c3:e5:9e:48:b6:da:cb:26:
ba:b3:61:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:23 2025 by rpki-client