Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32342d3234203d3e203336323336.roa
File: 3130342e3232352e342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: 8ELB3CoILkBwtxuGw0zWx+Vk5yPmOdfa9Fq7HRW9aL0=
Subject key identifier: 94:D2:BE:C9:44:0E:0C:0A:AB:47:53:40:B6:A9:C2:20:8A:AE:35:9D
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 60D8C85CCC03501C1AD791FBE545FEDE7D2DD5F3
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 17:50:11 +0000
ROA not before: Mon 31 Oct 2022 17:45:11 +0000
ROA not after: Mon 30 Oct 2023 17:50:11 +0000
asID: 36236
IP address blocks: 104.225.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:d8:c8:5c:cc:03:50:1c:1a:d7:91:fb:e5:45:fe:de:7d:2d:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 31 17:45:11 2022 GMT
Not After : Oct 30 17:50:11 2023 GMT
Subject: CN=94D2BEC9440E0C0AAB475340B6A9C2208AAE359D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:82:40:b3:3f:8a:27:25:83:dc:89:5a:74:
3f:80:2a:f5:e6:bd:ee:d6:05:af:48:83:8f:4d:b0:
e6:48:46:89:99:a6:f1:f6:65:c6:bf:0f:33:47:af:
de:68:4a:e8:d3:5c:8c:5f:b7:12:96:61:2f:bf:b4:
0d:d6:fc:d2:1a:ca:58:1e:54:e2:05:d8:c6:af:8d:
e8:4c:7b:ad:d3:d2:30:07:74:58:f3:ab:ef:d3:70:
33:bf:e9:94:66:b1:fd:9f:21:1c:01:90:76:62:34:
b4:ca:d5:cd:5b:7d:ce:3c:1d:3a:b2:d6:ce:c5:e5:
db:67:fa:71:0d:28:9f:0c:4b:77:b6:1d:1b:2e:51:
ea:c1:1f:7c:da:81:3e:09:9d:ef:6d:e7:0e:2d:23:
54:b2:4b:09:6d:ff:e4:7a:93:28:4f:84:2e:d5:6b:
28:d3:5c:dc:bd:84:27:cf:69:43:35:f2:8e:3a:57:
5b:81:aa:df:ac:f5:97:f1:eb:d2:0d:8f:e4:0a:bc:
76:8e:0e:26:00:5a:95:34:5a:7a:c0:f2:62:17:d2:
2e:1f:5a:5c:f9:fd:4e:f2:d0:2f:e9:78:bf:1e:3f:
e5:f4:32:ee:fa:30:cf:20:89:da:09:a1:3f:99:d3:
12:8d:37:28:99:33:65:b9:3b:2f:70:71:d4:2e:83:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:BE:C9:44:0E:0C:0A:AB:47:53:40:B6:A9:C2:20:8A:AE:35:9D
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e342e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.225.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c7:8c:ab:cd:ac:53:fe:da:a5:60:42:e5:c7:89:d3:77:7a:
f6:0c:29:eb:b1:d9:a0:d6:79:3f:ee:ff:77:92:92:f3:e4:a4:
bc:d0:51:3a:cb:3e:3d:c6:c1:88:03:7f:14:57:9f:dd:85:ac:
e5:3c:7b:b2:13:1f:2c:00:ad:13:40:c9:62:e7:06:77:e7:e3:
c6:43:f9:ed:87:c9:93:f3:94:b2:8b:e7:ca:81:85:fd:af:4f:
a0:a6:74:e4:79:fa:59:0f:a2:34:7d:68:8b:96:a7:ba:07:35:
2d:7c:ee:73:72:6b:58:8d:11:e3:e6:f6:62:18:c5:1e:9a:37:
01:0e:0e:05:cd:40:34:72:77:6d:54:10:56:80:9a:e5:8a:c4:
31:dd:b1:a5:05:e0:4d:11:9b:08:22:3e:e1:ec:30:55:39:5c:
aa:5c:f3:41:68:33:f5:69:82:c9:c2:ab:b3:20:64:b8:ae:35:
7c:dc:5e:da:27:42:d1:78:fb:f5:94:40:34:53:24:90:62:5b:
c5:32:37:3e:02:8d:ca:d9:c7:46:e4:6d:d3:cf:ea:ee:7a:a1:
5c:13:b0:5a:6e:a2:e1:7d:e9:48:2b:d0:1f:90:b1:3f:45:5c:
4f:f3:4c:36:5c:cb:c7:b9:75:d5:c2:4e:54:e4:c1:a4:24:f7:
5c:d2:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:49 2025 by rpki-client