Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138362e302f32342d3234203d3e2031323339.roa
File: 3230342e39332e3138362e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: sZ9uRfvSqRSP1AptVj5yAA46DAHEDdshWtvJVyPYIHQ=
Subject key identifier: A1:4F:A8:C8:31:E3:72:23:B1:9A:E8:49:B7:20:B4:94:9D:BF:69:01
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: E72C51B1CFD4ACFCC57CD5F17E5D8DCF51AD90
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138362e302f32342d3234203d3e2031323339.roa
Signing time: Mon 20 Mar 2023 15:50:46 +0000
ROA not before: Mon 20 Mar 2023 15:45:46 +0000
ROA not after: Mon 18 Mar 2024 15:50:46 +0000
asID: 1239
IP address blocks: 204.93.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e7:2c:51:b1:cf:d4:ac:fc:c5:7c:d5:f1:7e:5d:8d:cf:51:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Mar 20 15:45:46 2023 GMT
Not After : Mar 18 15:50:46 2024 GMT
Subject: CN=A14FA8C831E37223B19AE849B720B4949DBF6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:17:b7:7c:11:23:43:05:10:cd:45:5c:67:
27:fc:73:97:59:d9:d5:15:f9:e4:4d:74:86:e2:56:
80:a9:01:35:4f:b0:f1:54:a8:91:6e:a5:da:b6:1a:
b6:db:a0:ac:95:be:e1:fc:dd:c8:ff:d0:12:ab:06:
d7:1f:67:fe:ad:e1:2b:8c:75:e9:64:82:a8:fe:b3:
d8:23:dd:ac:2b:44:18:0f:bf:44:08:4c:41:5d:92:
91:76:7c:7c:9e:0b:6b:dc:04:af:5b:8f:df:ce:b5:
74:03:f7:5e:64:57:dc:09:73:8a:76:37:61:c8:d1:
63:42:45:5e:17:2e:a9:05:11:5a:95:0e:66:78:d1:
bf:1f:38:27:36:0a:4a:6f:9f:09:d5:0f:7f:b0:d7:
7a:bc:2c:d9:ea:6b:4c:c3:29:a6:a4:d8:b5:6b:cd:
39:44:8c:5a:93:62:79:0f:3a:de:aa:ec:c3:6b:44:
7a:af:5c:1e:17:5d:eb:6e:b0:68:51:ca:6d:f3:c4:
da:83:5e:cb:cb:be:2d:66:61:b0:67:b2:91:fd:e4:
dd:9f:d0:13:61:de:89:07:6a:18:42:e3:c9:47:26:
66:c5:93:0c:f4:26:69:89:7b:af:b2:4a:d5:05:a7:
72:fb:38:22:0a:9f:66:a3:52:9d:fe:9e:09:aa:b0:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:A8:C8:31:E3:72:23:B1:9A:E8:49:B7:20:B4:94:9D:BF:69:01
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3138362e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.93.186.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d7:1c:49:0c:71:cf:53:bc:03:e3:a4:d9:ea:30:7d:73:be:
d0:af:e4:90:aa:b1:1b:c2:4f:e2:62:25:48:86:91:6d:e2:20:
7b:bd:f7:19:90:c0:68:88:66:63:a7:68:73:24:44:1d:07:8b:
27:28:3b:ba:82:29:f7:6c:06:51:45:81:51:de:1c:43:4b:ba:
90:b8:61:1e:7e:d3:59:de:f0:cd:9c:69:90:f6:59:fb:f6:27:
a2:d5:96:ea:0d:e2:af:92:bc:01:7c:ed:b7:6b:cc:79:58:69:
c7:43:df:d9:48:72:f6:40:a3:95:6e:a4:fd:15:d5:19:c2:3c:
4b:bb:d4:6e:f0:ad:ad:b3:a6:50:7a:1c:74:b8:4d:69:9e:a8:
e2:26:a8:5d:0d:06:a3:de:a9:74:15:29:ad:7d:c6:1f:2c:22:
24:3a:94:5c:9a:da:b5:92:91:ef:bb:4b:08:e7:e7:0e:cc:0f:
11:9b:5c:89:ae:56:a2:c4:ac:e5:93:c0:78:a5:2f:41:5f:57:
ab:f4:b4:6c:2a:d9:8f:28:4c:b0:f5:a5:89:93:2c:b6:d1:f7:
03:ec:b0:0e:0b:39:82:37:cf:dd:a7:4a:5c:b3:66:88:cd:25:
e7:3d:a5:fb:f2:27:84:e0:47:06:18:ea:7c:84:64:ec:4b:74:
1b:97:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org