Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa
File: 35392e3135332e31352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: bXnetbtO5+ZkuWjOuvWrDh4lmP4ArVXEBrXeo26U8AM=
Subject key identifier: 7B:A5:00:E0:34:00:67:E3:F9:CB:7A:89:34:67:1F:AD:40:C8:D9:C0
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 475DB367894DFAB97ED5C5AE16F33DF6A7D36FED
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa
Signing time: Mon 31 Oct 2022 22:20:51 +0000
ROA not before: Mon 31 Oct 2022 22:15:51 +0000
ROA not after: Mon 30 Oct 2023 22:20:51 +0000
asID: 36236
IP address blocks: 59.153.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:5d:b3:67:89:4d:fa:b9:7e:d5:c5:ae:16:f3:3d:f6:a7:d3:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Oct 31 22:15:51 2022 GMT
Not After : Oct 30 22:20:51 2023 GMT
Subject: CN=7BA500E0340067E3F9CB7A8934671FAD40C8D9C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:14:ff:82:65:6d:06:8d:78:a8:15:8d:c8:
aa:66:6c:9a:c0:f8:df:cd:0f:f6:7b:13:a0:6a:24:
d4:31:64:d1:c1:14:84:ea:62:5d:cf:d7:38:a5:8c:
7a:03:6e:19:9d:99:32:e3:bd:40:8f:5b:4d:f8:f6:
41:ee:b7:9d:38:8b:e1:db:ff:51:f2:b6:5f:73:93:
fa:4a:0a:c8:eb:d1:75:84:3e:da:6b:06:00:1c:25:
29:1e:f0:bc:c5:fc:19:7b:f5:66:89:2d:96:aa:65:
98:9b:d6:f7:e0:42:87:44:97:12:bf:af:9f:97:98:
6f:6c:db:5c:71:b1:09:29:a2:10:ea:80:3e:05:aa:
bc:f8:b8:b5:12:2e:ae:94:65:61:c0:f9:5b:a1:4d:
51:38:76:02:91:97:ad:a6:9b:98:a7:09:e9:7c:40:
cb:bd:56:ee:61:ad:a7:19:f7:2d:97:21:69:cc:c1:
4c:72:20:99:32:9a:c8:f4:2b:c3:89:2b:db:3f:6e:
17:bb:3b:fb:af:d6:7b:e3:ae:a5:f1:b4:e1:07:5d:
3e:f0:6b:68:ac:e2:b6:81:b5:5c:b6:b2:ca:76:cc:
e6:73:15:eb:41:44:3d:4c:8b:34:6f:08:fc:41:ff:
9c:4f:d6:54:5b:b8:2e:c6:cf:0e:cd:11:b0:82:c7:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:00:E0:34:00:67:E3:F9:CB:7A:89:34:67:1F:AD:40:C8:D9:C0
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/35392e3135332e31352e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.153.15.0/24
Signature Algorithm: sha256WithRSAEncryption
43:92:91:cf:f4:46:5e:72:41:bf:d0:38:a3:da:68:50:3f:2c:
9d:a0:b4:fa:39:8c:4d:67:85:b5:89:85:49:53:38:45:b0:1b:
97:e8:94:6b:c9:be:51:d2:b0:aa:ef:53:f7:a6:9a:0f:bb:96:
21:11:62:66:06:94:18:28:3a:a5:3e:8c:e5:7e:94:01:0e:0c:
f8:4b:47:06:bb:1a:ee:a4:dd:d5:24:a7:17:dc:22:ec:b1:f3:
1e:e9:b3:a1:6c:05:25:cf:4e:9a:08:33:12:4f:de:10:3c:4c:
5a:32:d0:b1:b7:81:5a:b8:70:f4:16:ff:bc:f7:c9:e1:61:89:
e4:4c:be:79:9f:35:d5:4c:93:51:3f:78:54:3c:7e:e9:c4:6e:
04:cf:34:c6:80:77:e2:b4:33:f2:34:51:88:fd:70:d7:53:13:
47:8d:a5:eb:1a:22:c4:5c:59:04:8b:93:77:ad:f1:5d:36:cb:
4e:1d:34:ba:13:ac:71:de:94:21:83:f5:a2:4a:fe:22:84:9e:
12:92:bf:1d:6c:d1:4d:2b:73:f5:60:c3:a5:15:f5:3a:44:73:
fc:fb:f7:db:45:1b:48:81:99:32:b0:23:05:e7:8e:38:e1:bd:
c4:15:09:f7:6d:98:6a:49:9b:ad:50:c8:46:7a:5a:1c:b0:ad:
cf:cc:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org