Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa
File: AS140947.roa (raw, json)
Hash identifier: VfMgZmlLVIETkdh8UHAXj60cBjOn985P9nfSCYbb90w=
Subject key identifier: 12:B8:BD:BE:86:B9:9A:F8:BF:9D:AA:5F:8D:97:01:CF:FB:55:32:96
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 166782E0626629FA4CE23A88D6EA75088C50DD44
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa
Signing time: Wed 08 Mar 2023 00:00:11 +0000
ROA not before: Tue 07 Mar 2023 23:55:11 +0000
ROA not after: Wed 06 Mar 2024 00:00:11 +0000
asID: 140947
IP address blocks: 104.234.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:67:82:e0:62:66:29:fa:4c:e2:3a:88:d6:ea:75:08:8c:50:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 7 23:55:11 2023 GMT
Not After : Mar 6 00:00:11 2024 GMT
Subject: CN=12B8BDBE86B99AF8BF9DAA5F8D9701CFFB553296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:b4:e8:3f:83:b3:63:69:d8:df:21:47:cc:
c0:cb:93:4c:7a:b9:d8:dd:fc:be:ea:a9:ad:97:10:
83:ca:8b:6c:77:21:96:04:6c:64:ca:cd:9f:d1:55:
c8:4d:d3:5f:0a:b6:46:d5:a9:dd:ad:58:0e:7f:5b:
9e:9a:e8:1e:14:d4:8a:a3:ce:87:e5:65:a0:59:65:
ab:81:49:80:da:d3:97:82:1d:ff:70:1b:82:a3:4a:
bf:0e:68:57:be:52:62:8e:e3:09:ec:82:f9:36:1f:
3f:99:87:9c:c0:c5:c9:33:6d:b4:bf:8e:43:84:18:
19:7c:16:6d:8c:a5:5e:d2:cf:a2:37:72:1c:51:86:
b6:13:6b:99:f7:e6:ae:63:60:64:2d:a6:ac:8d:83:
55:e6:b6:08:89:30:af:17:e0:b8:d4:1a:b5:fb:16:
ab:ba:94:a4:30:12:c8:5a:d8:6b:4b:19:8a:31:45:
ee:f2:12:e9:ff:da:15:b0:fb:ab:35:80:41:26:fa:
45:68:4d:be:23:78:86:72:67:0d:94:be:1a:c5:a4:
2e:1d:db:c2:0b:0d:4b:96:e6:5d:fb:51:8c:eb:55:
b7:57:0f:75:c1:7c:12:af:83:61:ca:e0:bb:eb:02:
ae:e3:33:97:1b:96:48:dc:f3:ce:69:7a:b4:21:6b:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:BD:BE:86:B9:9A:F8:BF:9D:AA:5F:8D:97:01:CF:FB:55:32:96
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS140947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.51.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7a:8d:65:68:78:41:ba:e7:27:fd:c2:54:09:84:9e:07:d5:
d0:b2:92:3e:8c:ec:c7:d5:81:a1:8f:56:c7:1a:f9:02:84:d3:
a4:24:06:8c:e4:fc:2f:8a:42:d6:5e:6a:69:68:f4:9b:67:29:
37:c9:d6:4e:b1:8a:cf:f0:ae:5c:95:c8:e5:e0:7e:43:42:78:
27:d9:ee:f4:ee:78:df:6d:9e:79:47:08:ec:12:0e:99:f6:30:
0f:49:5f:e2:c1:bf:a2:06:96:72:4b:a6:fa:65:0b:80:e0:e0:
16:66:28:30:cf:2f:e8:94:1c:04:04:f5:ff:00:e0:a6:e9:f7:
0e:a1:65:25:65:e1:af:47:0a:a4:64:47:41:93:7d:fd:a9:51:
a0:0c:36:64:8c:f1:85:b0:1b:c0:7b:2a:47:df:88:16:55:f1:
ed:cd:f9:9b:f0:df:81:28:8c:32:1a:18:ee:2e:54:ab:59:6c:
26:44:36:ad:08:de:2f:d2:22:db:a5:b9:cc:ae:5c:e5:83:18:
ce:62:3c:a0:bc:bd:4e:dd:15:9d:24:af:66:33:50:85:ab:57:
21:bf:75:59:ea:f9:67:61:44:2b:dd:f1:ba:83:e9:23:3e:48:
02:f7:0c:f9:2b:ec:c9:5f:44:dd:67:82:a7:b2:2a:5d:00:01:
79:00:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org