Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399686.roa
File: AS399686.roa (raw, json)
Hash identifier: bg7T7JC6BIGBol8KFEMARFoOsD4NsLOzdOwptU/iPrc=
Subject key identifier: 74:6E:25:81:22:F9:AA:AA:86:6C:9D:C0:EA:C4:E0:38:9E:A5:09:7A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 2A97D71ED8CBA4265D453A151A996FB5F6981EAA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399686.roa
Signing time: Tue 06 Jun 2023 14:47:50 +0000
ROA not before: Tue 06 Jun 2023 14:42:50 +0000
ROA not after: Tue 04 Jun 2024 14:47:50 +0000
asID: 399686
IP address blocks: 104.234.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:d7:1e:d8:cb:a4:26:5d:45:3a:15:1a:99:6f:b5:f6:98:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jun 6 14:42:50 2023 GMT
Not After : Jun 4 14:47:50 2024 GMT
Subject: CN=746E258122F9AAAA866C9DC0EAC4E0389EA5097A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:9a:fd:0c:70:df:2c:ee:da:ca:be:bf:f9:
37:eb:10:9b:17:f8:79:ed:dc:27:3b:e9:80:d1:1b:
c7:eb:59:97:aa:cd:a9:3b:c6:fd:99:cb:49:3a:f9:
c1:ce:04:a0:7d:80:10:08:fb:48:e5:e6:f2:05:17:
7b:22:e7:c9:35:e7:a6:3f:18:20:c1:e4:bd:43:87:
90:55:59:00:26:4e:86:1a:f7:a5:d9:e8:c0:65:30:
f4:ef:e9:e6:33:a4:e1:0b:05:3c:13:3d:b9:ca:e2:
3f:35:c3:9a:70:f3:f6:d7:90:73:1e:ed:60:1b:39:
f8:20:59:58:a0:28:b0:d7:39:25:6c:15:d4:5e:5a:
93:6a:38:09:c7:b7:76:b7:06:9b:da:fa:27:6c:df:
5e:c3:eb:2e:2a:ca:d2:a2:ae:69:68:98:0b:41:a1:
de:49:98:6f:68:4b:70:c2:03:9a:22:68:db:17:3d:
f3:cf:b1:ac:76:0b:33:80:15:79:4b:17:eb:b9:ba:
22:44:16:98:1c:a7:67:01:82:01:29:73:66:7b:a2:
97:2a:7a:5b:3a:ea:9c:79:3b:77:88:cd:02:ed:ec:
7c:98:e1:e0:92:43:a0:24:7e:22:e1:13:5e:99:59:
7c:36:bc:aa:f9:e6:f2:e3:be:5c:9f:a3:ac:be:1c:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:25:81:22:F9:AA:AA:86:6C:9D:C0:EA:C4:E0:38:9E:A5:09:7A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.148.0/24
Signature Algorithm: sha256WithRSAEncryption
96:77:fa:1b:b1:a9:44:1f:c5:b4:fc:a0:ef:62:cf:f5:39:7b:
37:ad:b6:a0:43:90:64:da:e3:ba:0f:b3:84:56:7f:f9:49:c3:
98:3a:df:24:68:0a:50:38:a5:2b:07:39:a7:b0:35:4e:24:db:
d9:33:fa:d0:75:36:2d:7b:c8:a7:ac:08:f5:be:20:ed:da:87:
10:47:08:dc:b8:23:e3:0c:7c:a2:7f:50:a5:d7:6c:88:df:60:
8d:a4:19:8c:16:a0:91:84:46:1c:52:c5:61:75:7d:fe:87:f9:
90:cd:bc:87:6f:a3:f2:2e:bb:4b:5e:ca:61:78:51:d1:1e:51:
d8:1a:fa:64:43:a4:da:94:83:96:4a:a2:c9:c4:2b:b4:c0:fb:
4a:ed:17:05:61:09:dc:1c:c9:9d:3f:da:80:f3:34:d8:78:27:
8b:2e:ae:b3:8b:88:2b:ef:61:70:de:4b:2d:17:d3:aa:10:df:
a1:39:8d:59:64:d9:31:45:f8:27:61:58:42:e2:25:bf:89:56:
04:fb:cb:18:7e:83:01:9c:d9:8d:5f:e7:1f:ce:c6:ae:2e:8e:
9e:80:00:3d:3e:35:d3:86:b6:56:13:0a:a5:aa:88:06:f8:f6:
a7:f0:a4:67:2e:0f:ba:76:3e:0c:c3:09:0f:10:b1:d1:7a:9e:
8f:30:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org