Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32332d3233203d3e203336323336.roa
File: 3130342e3232352e322e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier: 5K9EqkO6Bfz146xZrxHYQ0r3v1pCZFinZaiDswBBJzE=
Subject key identifier: 79:BD:84:96:CE:5C:97:9A:B9:54:24:0F:0F:F1:C5:36:63:88:69:60
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 52FA7EEBBD32660FB56F05C261AEAB6741270CC3
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32332d3233203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 17:50:14 +0000
ROA not before: Mon 31 Oct 2022 17:45:14 +0000
ROA not after: Mon 30 Oct 2023 17:50:14 +0000
asID: 36236
IP address blocks: 104.225.2.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:fa:7e:eb:bd:32:66:0f:b5:6f:05:c2:61:ae:ab:67:41:27:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 31 17:45:14 2022 GMT
Not After : Oct 30 17:50:14 2023 GMT
Subject: CN=79BD8496CE5C979AB954240F0FF1C53663886960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:ea:33:e4:95:76:3e:04:57:a3:c6:fb:5c:
66:54:8e:cc:db:ae:80:ec:0c:c1:29:4d:44:da:83:
f9:10:3f:e3:9c:06:b2:23:28:cd:e3:b0:81:46:9d:
03:ef:80:e2:44:80:7a:06:66:ec:d0:78:66:70:44:
77:2f:07:fe:e5:6e:d4:f8:1c:5f:61:65:c1:18:c2:
6a:65:35:94:14:86:80:45:3b:de:04:a4:ef:40:9e:
bf:69:cc:d6:5d:54:93:c4:0c:39:c1:9a:67:e9:1c:
62:47:57:57:2c:6e:4e:bb:83:ee:0d:56:3b:c5:2a:
12:06:77:65:c9:88:d4:b2:83:0e:c2:55:ee:ef:d3:
cc:45:67:0d:b1:08:45:c5:40:6b:31:78:2f:6a:de:
be:e7:1d:86:88:17:74:08:60:4c:61:35:fc:63:a2:
12:04:22:df:e0:f1:7e:55:2e:dc:37:43:b6:68:fc:
be:9e:85:9a:81:91:bc:a4:1e:e4:36:13:7d:39:41:
6a:df:f9:8a:2b:f0:51:5c:21:9f:29:4a:fe:93:f3:
b9:2d:81:bb:87:ff:42:f4:d4:a1:19:07:96:13:60:
75:e5:32:dc:88:17:dc:6a:ed:91:c2:9e:31:f6:4e:
b9:fa:cb:03:59:52:fb:c8:82:d6:9f:db:35:81:52:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:84:96:CE:5C:97:9A:B9:54:24:0F:0F:F1:C5:36:63:88:69:60
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e322e302f32332d3233203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.225.2.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:f7:7e:88:95:07:26:4d:93:bf:21:31:88:47:50:80:72:e7:
31:cf:e6:76:6d:5c:81:a4:c5:e2:7a:8a:18:9e:9f:b8:4b:30:
08:de:15:a6:df:53:eb:0d:95:60:c1:d2:f4:6e:3e:b3:ce:1d:
78:a0:00:db:ed:28:48:8e:bd:f5:3f:f9:80:44:8d:ef:0a:87:
30:0a:ea:8f:4b:73:d7:0f:12:c6:fb:36:9d:d5:31:6e:53:c0:
75:6d:3e:55:ba:ad:f5:4d:13:e9:a6:23:59:53:e3:9c:30:eb:
ee:99:c1:72:ee:9e:de:5f:65:d4:5c:3e:bc:1b:12:e2:27:95:
53:c5:21:86:09:66:66:39:7a:c5:d8:d6:f3:38:e0:3c:c0:05:
23:dd:7a:10:00:1c:3c:a6:c8:99:ac:2a:94:d5:fa:da:14:a2:
ca:54:9f:d9:1a:d3:fe:cd:88:ea:1c:8a:49:ca:29:17:71:b2:
29:db:0b:6b:25:f8:2e:f4:06:47:16:1d:ba:0a:ad:95:da:fd:
03:5d:c5:c5:51:43:34:a0:d3:49:36:e0:11:31:a0:e6:30:cb:
02:26:3b:9a:a2:26:e2:37:73:7a:c0:ec:34:f8:b0:d6:3f:6a:
50:b5:48:31:30:a9:45:2a:43:27:f3:0a:aa:06:fb:b1:84:68:
e0:43:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org