Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200131.roa
File: AS200131.roa (raw, json)
Hash identifier: sJTzUIRaUpPixy4Dfe8tgfg7m/RQs/WiLbk3aDbXoSw=
Subject key identifier: 92:B1:2B:87:46:0A:51:AA:11:87:51:6C:DA:28:22:63:F8:43:3F:39
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1F3E3962EA7EC3E1CDD1DD2BD0422F5866A860C8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200131.roa
Signing time: Sun 02 Apr 2023 20:45:23 +0000
ROA not before: Sun 02 Apr 2023 20:40:23 +0000
ROA not after: Sun 31 Mar 2024 20:45:23 +0000
asID: 200131
IP address blocks: 104.234.114.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3e:39:62:ea:7e:c3:e1:cd:d1:dd:2b:d0:42:2f:58:66:a8:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 2 20:40:23 2023 GMT
Not After : Mar 31 20:45:23 2024 GMT
Subject: CN=92B12B87460A51AA1187516CDA282263F8433F39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:87:1d:69:9a:25:ba:19:bd:fa:fc:47:0a:
01:94:fe:a3:3f:d3:6f:c0:1d:fc:0e:dd:ad:52:a5:
03:26:13:17:47:da:e9:05:bc:e3:d0:bc:d6:a6:5d:
93:e1:f6:11:94:14:c8:d8:c6:84:99:a7:1e:4e:99:
a9:21:71:a3:08:28:53:df:06:d4:35:ba:de:88:7e:
61:48:c8:d1:83:fa:81:ec:f5:62:c7:c5:3e:9b:dd:
7e:dd:8d:5f:21:db:a9:9f:13:84:02:7b:bc:b4:47:
46:2d:46:32:19:62:31:5f:a1:c8:d9:4c:f8:bf:28:
14:a5:9e:53:b4:42:fd:f3:ce:2c:0a:17:c8:30:34:
4b:49:9e:05:c7:c0:95:56:f4:05:cd:c0:5e:35:87:
6c:ac:6c:9a:ac:00:6c:29:8c:9c:15:dc:cd:17:12:
d2:a7:a6:37:02:34:83:75:31:ad:51:e3:6c:0a:7c:
d4:ee:74:f4:4e:9d:c8:df:62:9a:2b:d2:e8:20:1f:
5c:85:26:33:61:a7:c6:7a:30:cd:09:88:35:6b:ba:
e3:7c:0d:31:6f:0e:a5:c1:c6:f3:c2:32:d3:d3:98:
cb:61:b1:16:44:1a:43:32:d0:35:9e:37:8a:a5:66:
5c:58:69:bd:1d:00:3b:2d:c7:4b:9e:7c:12:d2:8e:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B1:2B:87:46:0A:51:AA:11:87:51:6C:DA:28:22:63:F8:43:3F:39
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.114.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d0:c3:2f:29:69:aa:bf:26:9b:3f:63:58:16:36:03:8a:78:
4b:59:ca:79:4d:81:ec:7f:c7:e1:08:02:7d:7a:21:b6:34:d4:
d6:6d:0a:ab:64:62:bb:d4:d7:16:10:9d:65:f3:28:5f:55:ab:
53:7f:7e:ec:44:d4:88:e3:40:67:f8:17:e0:8b:9e:ae:d4:7d:
cb:49:1b:43:14:04:e9:8d:0f:ba:5d:20:5c:9c:fa:4c:09:ab:
7a:84:b5:3e:05:71:9e:27:39:2f:d3:5d:6d:c8:5e:86:a2:07:
33:f6:b8:be:fd:be:8e:90:52:ed:06:f4:26:a4:71:f1:78:86:
03:09:0b:46:bf:d7:52:36:73:72:fc:3e:eb:39:9c:3b:03:5e:
3c:d2:1b:fb:c8:2b:1d:fc:bc:b3:ac:e0:3e:aa:6b:ef:f3:6d:
fa:55:d2:3a:2c:50:aa:1e:82:83:8b:77:8f:77:0c:db:45:a1:
78:de:7c:74:b3:df:14:14:d3:d8:f1:ec:fa:bc:8e:59:a4:73:
f9:ec:66:e2:7a:5b:fd:60:d7:e8:d5:6f:e0:88:7c:6a:b3:42:
e8:3b:30:2d:b2:1e:b6:98:1d:af:96:e1:04:9b:e3:7a:c5:a4:
60:78:82:4e:f9:a0:1b:62:e5:d6:4a:8e:58:3f:5b:d8:31:c0:
71:f9:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org