Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS213257.roa
File: AS213257.roa (raw, json)
Hash identifier: xxOhBdSXqllc/tDp0NE+NI2hDYBKGV0HmQt3Z9qnsE8=
Subject key identifier: 30:95:64:22:04:BB:1D:C8:1C:CC:E5:B5:BD:0E:4E:23:F0:95:BF:34
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4D0E3C3613475EA2C371695F1E9A4DFBEAF4B915
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS213257.roa
Signing time: Wed 08 Mar 2023 12:32:07 +0000
ROA not before: Wed 08 Mar 2023 12:27:07 +0000
ROA not after: Wed 06 Mar 2024 12:32:07 +0000
asID: 213257
IP address blocks: 104.234.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0e:3c:36:13:47:5e:a2:c3:71:69:5f:1e:9a:4d:fb:ea:f4:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 8 12:27:07 2023 GMT
Not After : Mar 6 12:32:07 2024 GMT
Subject: CN=3095642204BB1DC81CCCE5B5BD0E4E23F095BF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:88:fc:be:1c:49:95:20:d5:f8:9a:bf:1a:
25:7c:13:2e:cd:99:68:69:bd:11:8b:89:2c:05:ad:
ec:70:b5:c4:c4:dc:9b:c8:dc:81:bc:49:3d:86:37:
f8:14:f6:fc:83:a8:43:17:84:fb:5d:36:b8:b4:f1:
2c:81:6d:d4:86:31:2a:4d:5f:7b:d7:37:bb:4c:f4:
20:ba:bf:79:12:62:e6:bf:7d:ff:16:de:2b:57:92:
2c:ea:d7:bd:9d:3d:93:3e:84:63:46:09:df:f7:f8:
39:a8:fd:6c:7b:19:fe:c9:a8:34:28:b9:c7:8a:7c:
6a:16:3f:81:53:84:af:04:8b:06:ee:f6:0a:93:dc:
2c:a4:9c:8e:54:57:96:22:14:58:c8:80:ba:66:2b:
0e:80:f6:46:f3:91:46:ba:38:f1:d8:06:ba:9b:d6:
cb:00:e1:3c:d7:e2:ca:4a:17:20:cb:de:0c:0f:8f:
02:b6:ae:6f:25:86:74:45:ad:25:a3:e2:62:3c:c7:
66:5b:dc:c6:f5:c2:fd:8e:21:a2:94:09:20:5f:8b:
6c:8a:e0:20:b8:e1:54:17:75:7c:cb:24:ce:d8:ad:
da:78:e9:75:15:b0:df:2a:53:9a:9c:5b:09:d6:ba:
50:5b:b1:88:9a:db:c6:07:4f:47:2f:61:c1:dc:bb:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:64:22:04:BB:1D:C8:1C:CC:E5:B5:BD:0E:4E:23:F0:95:BF:34
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS213257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.84.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e7:71:01:eb:29:e6:73:02:f8:a6:45:e6:81:c7:6b:ca:f3:
16:8b:76:01:15:e7:bc:33:a3:95:4c:c1:ae:fb:d3:88:2e:3b:
b8:9c:96:34:f0:a0:d2:a6:a9:bb:a3:a0:df:69:93:05:43:b9:
9f:b4:38:09:a1:14:06:47:0e:fd:03:42:7c:48:9a:c1:f1:7c:
93:b5:cc:95:4c:79:c6:f0:70:2c:a4:66:39:bd:97:f8:dc:e6:
14:67:65:36:39:15:1e:d2:ff:c7:2e:ff:a0:cc:4d:30:8b:9f:
21:fd:4f:a3:79:92:e7:57:57:56:72:92:90:fc:08:4c:fb:fb:
6a:dd:25:ac:af:6b:04:7a:72:99:5c:bb:0e:da:32:2e:5f:83:
d0:7a:da:34:c7:70:8a:c2:84:67:71:09:81:1d:cd:90:6b:57:
ee:75:a1:d0:7c:98:1c:63:f6:f9:61:32:e9:ef:2f:5d:fa:be:
4e:36:a4:28:31:ab:76:e9:12:08:9d:6f:2c:12:12:11:c5:cd:
87:cb:68:42:a8:08:78:ca:8a:32:7b:92:8f:38:64:46:b1:e2:
24:f0:87:b6:f4:24:7c:2c:29:0d:bb:9c:a1:b8:61:85:23:d6:
53:76:be:4e:9b:84:23:e9:5c:cc:97:04:9f:a7:7f:4c:a2:85:
56:77:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org