Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235332e302f32342d3234203d3e203134363138.roa
File: 3135372e35332e3235332e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: qDY3ZkmCb/ZZ15aMiN+PWN82xh4S//pqzrccCO3n5VY=
Subject key identifier: 89:82:50:0D:70:88:33:CD:4C:06:EB:B9:D8:FC:45:C7:EF:25:D3:8D
Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial: 097E6F726740D503496D9AE10A18CB79E23F7383
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235332e302f32342d3234203d3e203134363138.roa
Signing time: Thu 20 Oct 2022 18:04:31 +0000
ROA not before: Thu 20 Oct 2022 17:59:31 +0000
ROA not after: Thu 19 Oct 2023 18:04:31 +0000
asID: 14618
IP address blocks: 157.53.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7e:6f:72:67:40:d5:03:49:6d:9a:e1:0a:18:cb:79:e2:3f:73:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Validity
Not Before: Oct 20 17:59:31 2022 GMT
Not After : Oct 19 18:04:31 2023 GMT
Subject: CN=8982500D708833CD4C06EBB9D8FC45C7EF25D38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:b3:84:6a:93:d7:71:50:d2:56:dc:24:87:
8f:0b:20:68:d0:2c:3b:c5:ed:ac:8c:0d:b3:0f:e4:
31:dd:ca:dd:1f:eb:a3:f4:ba:14:1a:90:50:ad:af:
3b:5a:65:6c:95:0b:66:46:86:2b:a6:07:7b:de:60:
15:77:6b:02:4f:2d:a5:c8:a9:01:9e:4d:d7:21:73:
ad:23:50:36:e4:74:2b:09:fa:16:a5:bc:53:60:5f:
e1:a2:8f:98:50:c8:ed:30:a7:de:d5:b3:cb:47:ab:
b1:a5:a3:c3:dc:16:cf:39:b4:b2:5f:d4:db:e2:39:
a5:a3:aa:25:7d:36:cb:e8:22:ff:bb:85:9d:5c:ed:
4c:72:7c:ac:f2:08:42:74:1e:91:f0:35:03:27:57:
56:24:6d:4e:dc:3a:ca:c5:c6:6a:fe:ed:09:61:c1:
ed:90:4e:c4:27:38:f2:67:2c:0c:ba:18:ae:26:41:
73:33:92:0c:16:42:6f:23:25:82:36:a0:6d:18:8a:
62:fe:a3:c5:67:af:dc:67:54:86:84:de:2e:5d:91:
f8:7e:d9:dc:99:7a:86:dc:5a:2c:0e:ae:0c:70:64:
4a:9d:34:40:ed:fd:c2:ed:e2:5c:c0:1f:d7:33:b2:
dc:46:7c:af:bb:6a:23:2b:9a:1e:5c:79:95:fc:63:
cb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:82:50:0D:70:88:33:CD:4C:06:EB:B9:D8:FC:45:C7:EF:25:D3:8D
X509v3 Authority Key Identifier:
keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3135372e35332e3235332e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.53.253.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:50:c3:1d:0c:9d:3a:b4:dd:1b:f3:62:a7:79:6d:b3:b7:ea:
fa:d3:2e:7b:9b:52:37:73:d6:f8:05:43:eb:75:6d:bb:21:4d:
6a:72:ac:a8:82:13:d7:f4:e3:2e:b0:e0:7e:44:ac:d7:1f:08:
f2:d5:29:22:da:55:b9:28:d7:9b:d3:99:ad:8e:a7:69:4c:83:
72:12:28:5b:0d:d5:fe:f9:3f:7b:48:27:90:ed:b9:11:55:9b:
ad:16:9a:c5:cd:16:a5:f5:a3:6e:9c:c7:bd:e6:66:84:f8:5a:
74:d1:83:1e:ce:7a:93:99:f9:d9:6a:3b:a9:d2:ab:3c:00:44:
20:e1:23:44:3a:cd:00:6d:80:6b:0b:ea:b3:d5:78:d2:9f:0b:
23:b7:f3:4e:74:51:c4:8e:d0:ae:26:e3:86:ae:f9:42:9e:5a:
35:b4:76:d0:74:8b:75:c7:df:67:5e:7d:8b:77:91:99:1c:2a:
72:f7:cc:42:fa:75:ca:f2:22:47:f4:8d:d1:99:3b:7f:c8:67:
f0:71:f6:45:fc:51:2d:01:4f:2c:db:c3:9f:7a:c6:be:a5:4b:
06:03:6e:21:c1:9c:8a:62:c4:c0:e1:35:fd:fb:50:6e:a8:8b:
54:ae:c6:41:25:0b:91:2b:5b:66:68:a2:ac:b0:9d:1e:f7:a6:
ff:01:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:54 2025 by rpki-client