Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2033353037.roa
File: 3230342e39332e3138342e302f32342d3234203d3e2033353037.roa (raw, json)
Hash identifier: W+tUJpkSFElpQeCLwqAP+AJ4LuMC+CujdsjHHyNmw9I=
Subject key identifier: 34:A1:AC:01:E3:6A:EB:6E:13:60:7D:39:2E:14:B0:F1:C1:E8:B3:8F
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 636688B17A92C4374388E8127CB36F553B9BCD4D
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2033353037.roa
Signing time: Tue 25 Apr 2023 11:34:04 +0000
ROA not before: Tue 25 Apr 2023 11:29:04 +0000
ROA not after: Tue 23 Apr 2024 11:34:04 +0000
asID: 3507
IP address blocks: 204.93.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:66:88:b1:7a:92:c4:37:43:88:e8:12:7c:b3:6f:55:3b:9b:cd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 25 11:29:04 2023 GMT
Not After : Apr 23 11:34:04 2024 GMT
Subject: CN=34A1AC01E36AEB6E13607D392E14B0F1C1E8B38F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d4:63:a8:9c:69:ef:34:99:aa:f5:68:88:97:
50:9c:d5:07:77:8d:4d:fa:0d:0d:65:04:87:89:80:
b0:78:32:0d:c7:a3:1f:b5:b1:70:8c:f5:5d:39:2b:
34:62:fd:5a:63:c9:49:4c:64:0d:16:cd:8b:cb:d0:
17:62:43:4c:42:f3:9f:b4:63:1b:3a:cc:5b:ff:84:
1d:d0:1e:1d:5c:55:e5:e5:22:1e:1e:64:e1:50:59:
87:6f:39:e5:bc:3b:4e:73:d1:2d:f2:03:f2:21:4e:
04:6a:ca:20:1c:0b:98:41:68:bf:b9:1e:63:a7:d2:
d2:c0:23:ee:31:84:63:3f:61:43:ff:97:3a:73:13:
6c:b9:87:eb:9f:95:77:30:4e:10:d7:9a:fe:d5:bb:
5b:2b:5e:ce:d3:8d:12:15:9a:6a:eb:97:40:dc:f1:
e8:e6:1d:fc:e2:52:0f:55:c2:0a:8d:96:85:fb:13:
eb:5d:e9:1c:86:45:98:88:bf:04:7f:53:fc:50:24:
50:e8:bf:d6:de:6d:7f:d3:11:46:4d:82:39:ed:c1:
f1:99:db:f1:73:3a:45:c6:04:4b:c8:da:65:5b:02:
6c:6f:c9:76:c3:c7:ef:1e:16:a9:c9:66:d2:60:10:
27:e0:ca:f0:f0:94:51:3a:c1:f4:9e:dd:6d:63:df:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:AC:01:E3:6A:EB:6E:13:60:7D:39:2E:14:B0:F1:C1:E8:B3:8F
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138342e302f32342d3234203d3e2033353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.93.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:75:f2:a3:c9:bd:d6:48:63:60:13:93:e3:a3:6a:de:8d:3a:
22:63:fe:92:36:59:af:ac:50:83:02:ad:ab:17:c6:ff:86:ad:
d3:3b:87:c3:f9:bb:6c:96:70:bd:56:95:9c:bb:4e:04:0c:88:
9a:e3:af:ac:c1:a8:f1:cd:00:b5:38:60:38:66:23:96:45:10:
c5:f4:3d:57:7e:e4:73:e9:dc:00:31:00:2d:38:e4:e4:d5:23:
69:bc:a7:ed:c8:19:75:72:65:34:bb:ae:5b:ec:03:50:8d:d4:
be:df:a0:72:ad:9f:4e:eb:bf:1b:3c:e1:be:3c:f8:75:3c:31:
d6:e0:2c:6d:f0:1a:4b:60:ca:68:b0:dd:96:c3:85:51:61:ae:
54:38:47:7a:07:f0:9f:0e:43:d4:a9:5b:65:83:d7:75:91:15:
8f:17:c8:3f:ae:15:02:ac:b3:0a:04:5f:24:45:78:e6:ef:51:
fd:5c:d2:d7:f3:77:a7:44:dc:7a:a5:85:fc:af:f5:49:c9:66:
f6:4c:10:17:73:2d:e8:a6:93:00:85:5b:9f:1a:04:bc:55:82:
51:f5:c2:a1:ae:9e:1f:b0:69:4e:97:1e:aa:1d:bc:60:cf:48:
76:96:9e:f5:77:b9:61:40:0b:54:77:3f:8d:6d:ac:12:66:3f:
c1:e4:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org