Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31342e302f32342d3234203d3e203336323336.roa
File: 35392e3135332e31342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: 94a3DHA+Sx7D+JJhzLEdrRd00qOpD3o9hBX+fAsfHuk=
Subject key identifier: DF:BA:E4:3F:69:32:A6:68:46:F7:53:3F:1F:75:7C:7A:A7:C7:E8:B4
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 5F6B4B875F09FCFCC58CEA7C258139E6A427D90F
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31342e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 22:20:50 +0000
ROA not before: Mon 31 Oct 2022 22:15:50 +0000
ROA not after: Mon 30 Oct 2023 22:20:50 +0000
asID: 36236
IP address blocks: 59.153.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6b:4b:87:5f:09:fc:fc:c5:8c:ea:7c:25:81:39:e6:a4:27:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Oct 31 22:15:50 2022 GMT
Not After : Oct 30 22:20:50 2023 GMT
Subject: CN=DFBAE43F6932A66846F7533F1F757C7AA7C7E8B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:f9:a8:08:6a:c0:5a:08:43:98:f4:7a:5b:
6b:56:04:1e:39:dc:e4:3d:68:9e:a9:d4:45:1c:58:
c6:cf:a4:22:45:a2:5d:12:bd:4b:ad:25:d1:a3:01:
f1:a5:e6:e9:81:5f:c7:16:c8:dc:13:22:b5:d5:99:
69:f2:92:c3:ae:32:6e:98:c4:5f:eb:28:95:e7:8c:
9b:0c:0d:99:9e:30:24:66:72:1a:63:4d:46:a4:ee:
d1:9e:a8:36:59:b7:7e:8e:1e:99:cd:a3:6d:55:84:
95:aa:1b:b2:08:3f:df:c7:1e:ac:8a:1e:b8:49:b9:
ad:2c:22:74:6c:6d:85:20:2d:e7:fe:30:3d:b7:cd:
45:f7:a0:5f:32:2a:2a:49:78:21:e3:d4:5e:69:35:
be:f9:aa:a6:5f:e7:72:15:17:59:46:3c:4c:b5:17:
f3:cd:26:53:a0:69:38:92:2e:26:91:37:5d:b9:c5:
d7:ca:25:d0:67:2f:6b:1b:6f:2c:17:3d:0b:e4:a7:
e5:cb:46:30:29:57:32:1b:7b:7f:e2:56:8a:ce:9f:
7e:9f:fe:0d:e2:c8:35:81:5c:3e:b3:e9:00:e2:c4:
cc:db:62:82:9d:31:4d:7f:63:02:4b:f2:9f:b0:22:
bf:b8:8f:5d:e1:9b:fb:eb:18:ba:2b:06:51:27:a9:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BA:E4:3F:69:32:A6:68:46:F7:53:3F:1F:75:7C:7A:A7:C7:E8:B4
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31342e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.14.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:4c:ba:cb:07:8a:c6:69:47:a0:0b:26:e5:2d:1e:1a:51:e2:
23:8a:8d:95:c4:1c:72:91:81:d7:9d:50:33:18:c3:1c:c3:a9:
e9:2d:c2:ee:f9:7f:09:18:c0:59:ca:56:18:03:77:9d:c2:00:
3f:35:f4:d3:01:d6:ec:f9:aa:1f:78:d2:79:3b:93:18:fc:e2:
0e:81:93:ae:fd:4e:27:0a:d5:ee:0b:de:64:bd:4b:db:9f:1d:
54:e3:c5:cf:db:55:76:12:56:28:79:9d:55:d5:23:6d:0d:55:
01:d6:9a:32:d5:e2:f7:cd:6f:9e:6d:38:38:95:98:59:d3:6a:
95:f2:88:40:9f:a6:18:ef:a7:0e:72:c9:80:05:06:47:0e:08:
8c:06:66:c5:69:8b:9b:95:ce:73:ae:12:c8:ad:79:a3:1f:a3:
51:e1:c1:94:81:82:4d:46:a4:5c:bd:85:03:ba:d6:54:6a:06:
c7:3a:3b:36:3a:1c:f2:01:31:8e:a7:1f:c9:ee:1d:47:d3:7a:
8f:3f:aa:80:ef:f3:00:d6:b6:02:98:b8:c7:03:85:2d:d6:47:
05:d2:31:db:1e:a3:d8:ab:d2:76:d3:79:57:ee:79:76:72:97:
4c:72:96:e1:8e:6c:fd:03:16:5e:49:e2:3c:ef:2d:36:b2:8e:
54:48:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org