Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e203439393939.roa
File: 3136372e38382e3134362e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: tVS7/GYndZ8b5r0wimuoHnKr9luptdT5av7+BHf9j8Q=
Subject key identifier: 3E:34:63:29:CE:6E:89:F6:AA:75:46:35:84:04:DC:67:FC:79:58:17
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 2948CD711470FED9E3C1F87FD8D48B6D78876C53
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e203439393939.roa
Signing time: Wed 03 May 2023 11:17:17 +0000
ROA not before: Wed 03 May 2023 11:12:17 +0000
ROA not after: Wed 01 May 2024 11:17:17 +0000
asID: 49999
IP address blocks: 167.88.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:cd:71:14:70:fe:d9:e3:c1:f8:7f:d8:d4:8b:6d:78:87:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 3 11:12:17 2023 GMT
Not After : May 1 11:17:17 2024 GMT
Subject: CN=3E346329CE6E89F6AA7546358404DC67FC795817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:f8:83:4b:85:91:a9:9f:bf:4f:03:02:ab:
ac:05:38:7a:a3:d9:14:c2:ab:66:8b:86:61:d4:df:
57:f1:50:79:40:82:32:a4:5d:72:ee:a9:6a:32:0e:
45:07:51:f7:50:d5:6d:19:ae:76:27:68:b0:44:6e:
10:71:3c:9f:97:8f:18:1f:4a:05:fe:cc:bd:6a:6d:
2e:52:73:5f:8c:4b:fc:24:d2:ef:3c:85:d7:c2:94:
f0:d3:3f:43:96:cd:d4:81:38:7d:6a:fb:0d:69:63:
7c:4e:c9:09:d3:7f:9b:52:77:b2:9c:8e:5b:f2:9f:
e2:99:28:25:d1:a3:5f:95:70:4b:48:01:c4:8f:20:
38:8f:fe:ea:92:2d:04:fc:69:a8:71:62:66:a2:0d:
00:96:0e:75:e0:43:15:80:38:9a:ec:5f:10:40:57:
4d:65:b3:98:34:14:b6:51:7c:43:95:45:64:53:6e:
4c:b7:ab:49:e0:0f:e7:33:30:d0:e4:7f:d0:fd:8c:
e3:fa:dc:83:d0:89:47:c5:dd:79:b3:8c:f1:ce:1a:
ee:19:2a:41:6b:3c:4c:7a:00:9b:07:46:a1:9d:ba:
45:81:05:26:4e:93:dd:20:d2:c7:6b:35:ab:04:1a:
eb:89:39:01:57:52:ce:e6:5e:67:0a:e1:24:0c:97:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:34:63:29:CE:6E:89:F6:AA:75:46:35:84:04:DC:67:FC:79:58:17
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3136372e38382e3134362e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f1:6f:63:58:c0:f6:16:06:3b:bc:af:f2:5c:e9:d3:d4:52:
b4:c1:ae:07:3e:ed:c6:6b:2c:14:51:0a:1c:64:d1:6e:8d:1f:
50:20:97:00:51:9e:b0:6a:1c:c6:1f:e8:fb:30:14:3e:aa:27:
0a:d3:43:84:85:da:ef:95:8a:2f:4e:73:06:29:90:4d:32:bd:
2b:fa:f9:ab:65:ab:7a:9b:50:7b:e1:99:56:a9:34:14:bf:ed:
e5:28:60:35:f3:a8:67:e1:7b:bc:27:84:37:81:c2:cf:67:52:
e2:17:97:23:bd:34:f1:0a:31:70:0b:d1:64:49:22:98:12:e3:
d2:62:b5:52:a0:bd:15:94:90:98:f3:93:75:16:64:4d:2d:d4:
67:2a:56:5d:73:48:96:75:24:43:27:fc:75:e9:3b:b6:05:7b:
e2:5c:d3:1a:a3:94:6e:13:3f:d9:6d:47:cf:13:76:8d:9c:f2:
05:b9:f2:d3:b4:2b:dc:a3:31:9d:81:89:3a:97:e0:99:26:3a:
47:81:48:73:44:57:68:e5:2d:38:48:d9:6a:a6:15:aa:c1:33:
0e:ba:23:94:48:03:aa:d4:fe:85:68:45:d0:81:e1:a6:75:fb:
6a:7c:d3:cf:b2:91:f2:86:5a:78:6a:80:21:68:ea:2f:30:52:
70:3b:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org