Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa
File: 35392e3135332e31332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: q0JxJzbqke60SLyogrM7Z6FGvohMEqmYZBGpLdXMbC4=
Subject key identifier: B2:23:C6:B8:2C:30:8F:B1:89:C2:B0:3C:20:7B:98:BF:24:3C:30:DD
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 3D792532C914051AB0C2AE53EF511DD97197EF01
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 22:20:50 +0000
ROA not before: Mon 31 Oct 2022 22:15:50 +0000
ROA not after: Mon 30 Oct 2023 22:20:50 +0000
asID: 36236
IP address blocks: 59.153.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:79:25:32:c9:14:05:1a:b0:c2:ae:53:ef:51:1d:d9:71:97:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Oct 31 22:15:50 2022 GMT
Not After : Oct 30 22:20:50 2023 GMT
Subject: CN=B223C6B82C308FB189C2B03C207B98BF243C30DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:10:ef:e0:50:f0:30:09:ec:97:61:25:7e:c9:
07:80:10:50:31:5a:11:67:01:70:cd:ac:98:86:7f:
fe:36:a2:61:23:f0:95:3e:5e:e1:5e:bf:7a:52:6d:
06:07:3c:00:6b:6c:40:27:36:63:a9:2b:36:1b:36:
4c:9b:93:74:e2:1e:2f:c1:a3:d1:c0:3a:2c:c8:30:
fe:59:29:ff:8f:ae:04:da:2a:c1:43:d4:d2:6c:ca:
43:ee:d0:31:f6:7b:62:1c:da:a5:d0:9f:9f:db:bb:
07:7d:d6:db:f5:f9:a9:2d:6b:d7:9b:f9:fa:a5:fa:
53:ee:c1:f2:ba:ae:e6:52:ee:2f:7d:1f:28:57:cd:
50:29:3b:53:c7:e5:cf:6b:87:69:92:73:7c:ae:0e:
f7:07:b0:a4:24:50:1d:19:60:46:98:2b:0a:d8:5b:
c1:91:af:9b:1e:43:f2:70:37:26:5d:a8:32:af:b3:
2c:96:de:0d:2e:79:2a:61:31:cb:7b:f2:77:ef:59:
8d:04:92:f5:66:5f:e7:30:43:52:ab:91:9b:23:02:
2b:c0:2e:9e:be:dc:13:10:79:3a:74:db:f2:56:34:
ec:b6:9b:4f:ed:bb:73:38:3b:04:5f:c8:16:f6:32:
85:7d:22:c1:ac:fd:d2:13:53:fc:65:f3:e4:a4:a8:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:C6:B8:2C:30:8F:B1:89:C2:B0:3C:20:7B:98:BF:24:3C:30:DD
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:41:8d:cf:0f:1c:3c:f7:ab:93:09:7a:34:3e:10:a5:07:2e:
e1:3e:f8:18:d1:f8:15:d9:1d:64:2d:5a:bc:e4:1a:fa:32:03:
d3:e5:8c:38:8c:5b:3c:a6:e3:27:b1:e9:67:d1:ca:70:2f:4a:
08:2e:ff:7f:c4:23:bb:37:ed:89:7c:d0:4b:83:ee:bf:af:1d:
e0:32:59:05:b9:7f:b2:ee:99:e6:59:bd:3d:36:5e:d7:17:9e:
c6:0f:cd:da:65:85:7f:3c:1f:0a:3c:a9:cd:0d:9e:8d:d4:b7:
15:b7:2c:62:0c:78:49:00:3d:e4:49:25:6c:cf:38:1b:3b:78:
5c:b1:cf:41:27:f8:66:cf:14:a2:d1:38:7c:19:f8:c7:83:67:
b6:e2:f3:96:3c:28:b5:6c:e2:47:ec:fd:5f:be:1f:b3:79:0a:
e9:d8:1b:1d:9a:b2:79:1f:2f:22:44:8b:80:47:1d:c6:4b:29:
24:0f:16:a1:79:4c:f5:d5:9c:ec:6a:72:37:6f:d4:25:3e:07:
f9:f1:bc:ea:89:b0:05:46:d0:28:bb:7e:da:e1:06:a5:26:36:
f1:74:37:30:cb:f3:6d:f5:c6:4d:68:e9:5a:df:84:f8:d7:22:
f6:18:ac:b1:58:c3:bd:27:e8:19:32:9d:99:37:8e:c6:a9:da:
9f:b5:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org