![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa
File: 3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: hzKpjbh2FjJjdKrq5Cp+66HLgXE72ng27f9quViVjE8=
Subject key identifier: EB:16:46:1A:B7:06:9D:6C:96:BF:D6:2C:2F:CF:AF:F3:68:34:67:CE
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 56D1DCCE711CA46CA8E287A446C12CEEE8CBF961
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa
Signing time: Thu 20 Oct 2022 18:05:44 +0000
ROA not before: Thu 20 Oct 2022 18:00:44 +0000
ROA not after: Thu 19 Oct 2023 18:05:44 +0000
asID: 36236
IP address blocks: 104.225.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d1:dc:ce:71:1c:a4:6c:a8:e2:87:a4:46:c1:2c:ee:e8:cb:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 20 18:00:44 2022 GMT
Not After : Oct 19 18:05:44 2023 GMT
Subject: CN=EB16461AB7069D6C96BFD62C2FCFAFF3683467CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:43:4a:8e:6a:11:72:27:a4:3e:ae:0d:4e:
97:da:9d:74:47:58:86:88:a5:57:ad:9d:4d:12:4d:
0e:4f:63:0e:ac:af:35:3a:81:d4:94:ae:48:d9:c6:
65:20:29:01:ff:8f:59:f0:0d:ab:9f:2c:22:dd:05:
d0:1f:1a:77:c6:c3:3b:2e:57:06:70:63:19:3a:cf:
83:1b:66:73:5e:ee:e3:14:ba:42:c1:23:7f:b4:31:
15:01:16:10:aa:04:64:e5:7c:29:f3:c1:db:bf:91:
60:f8:8e:70:9c:21:38:e3:87:02:49:c9:58:49:4e:
d3:cb:4d:4a:8a:c8:24:23:33:03:51:e5:9e:bb:5f:
e0:2c:cc:b5:01:58:ad:ec:26:ab:ed:39:9d:a9:18:
2c:83:03:ff:64:a0:70:31:ef:b8:27:34:32:ba:38:
d8:73:f2:0e:02:48:b8:2c:e6:73:e0:c5:75:6f:e5:
b7:a9:15:06:07:37:d8:dd:68:63:14:9d:1e:a7:eb:
0c:90:3a:ec:3b:4c:42:9d:1d:29:6b:e3:2a:1d:73:
02:62:57:1e:51:4d:ef:3a:63:6e:dc:e6:38:73:5e:
22:ff:bf:8b:92:0e:35:7b:71:a3:ab:3c:fc:0f:2e:
9f:65:4b:7d:89:66:e9:6d:e8:67:23:ee:f5:4c:d4:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:46:1A:B7:06:9D:6C:96:BF:D6:2C:2F:CF:AF:F3:68:34:67:CE
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.225.112.0/24
Signature Algorithm: sha256WithRSAEncryption
12:51:67:a8:04:ab:7a:94:ef:06:58:7e:44:6f:ff:bf:9d:58:
96:c7:1c:2a:4e:5e:55:c5:63:90:55:2d:08:e4:81:52:55:5a:
4a:c5:53:68:12:45:b8:81:5f:38:c0:6e:cd:32:24:65:89:3f:
49:e8:24:ec:2b:19:63:8b:d3:38:a0:45:86:c8:be:16:d2:f4:
4b:53:53:7a:80:a4:3a:cb:ce:53:61:24:71:46:f9:d9:7e:8b:
4d:42:26:b2:cc:00:ca:f8:de:31:ad:9d:b2:b8:50:dd:ea:f3:
18:9b:99:38:5d:d4:29:68:f9:e4:63:6c:06:d3:bd:5a:66:7d:
46:6b:ef:8e:6f:05:53:15:2d:44:17:1f:c0:fd:ab:3a:6f:98:
e1:78:d7:fc:3a:7f:a3:d2:55:96:df:e4:98:2e:17:52:59:2c:
90:51:e7:49:0e:b0:a4:85:da:3f:51:93:22:2f:54:ca:1f:19:
5c:7b:ca:08:61:53:1d:b8:77:1c:bc:5c:3e:5b:48:99:62:a7:
55:5c:b9:54:93:37:45:6b:66:5c:b5:cc:fb:b8:c4:70:58:fd:
c0:66:ac:88:2c:1b:08:05:be:f0:a8:37:ba:06:6f:3f:2a:bc:
5a:14:a7:f4:e3:eb:15:3b:26:ba:98:0d:63:84:34:92:cf:b8:
4b:98:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:11 2025 by rpki-client