Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e2031323339.roa
File: 3230342e39332e3233352e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier: +je0AM39xM7wH9gO+GwpqZwUs1JTdA1R437D0dK9Ajw=
Subject key identifier: 5F:AB:26:93:9E:44:CC:F6:6F:14:FA:64:57:E4:98:6A:F0:E9:B5:15
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 1CEBDC25FFBB47657A442941D257A0F5B4AB4388
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e2031323339.roa
Signing time: Mon 20 Mar 2023 15:50:47 +0000
ROA not before: Mon 20 Mar 2023 15:45:47 +0000
ROA not after: Mon 18 Mar 2024 15:50:47 +0000
asID: 1239
IP address blocks: 204.93.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:eb:dc:25:ff:bb:47:65:7a:44:29:41:d2:57:a0:f5:b4:ab:43:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Mar 20 15:45:47 2023 GMT
Not After : Mar 18 15:50:47 2024 GMT
Subject: CN=5FAB26939E44CCF66F14FA6457E4986AF0E9B515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:af:b9:28:57:32:be:d1:83:da:38:36:57:
e1:6d:ba:75:28:e3:63:f8:8c:50:b3:93:d6:36:40:
64:9d:f3:09:e0:89:5f:eb:8e:ec:96:dc:0e:73:e6:
05:76:fa:a0:0e:0b:47:72:60:9d:20:9d:62:80:ba:
63:fe:83:6d:be:1c:ef:9a:39:46:dc:10:0c:fc:d8:
4a:8d:bb:e0:c7:b7:b2:ba:58:f4:49:b8:03:31:b6:
cc:aa:8d:57:e2:13:9a:4c:f8:ab:d4:2f:23:8d:02:
51:d4:f0:bc:c7:20:2d:7b:83:90:aa:58:53:f6:6d:
cf:52:98:0c:70:33:70:df:04:06:06:78:aa:68:ae:
07:98:81:84:9d:24:69:14:32:2c:d0:32:3e:67:cb:
dd:6f:3b:42:98:3a:11:d9:dd:c3:bf:23:1e:50:7c:
7f:64:c7:b7:d4:9f:77:23:a0:f9:43:48:f3:f2:94:
de:15:c9:22:82:bc:76:51:db:06:fc:49:07:0b:61:
5a:a0:fa:db:a4:38:3a:f7:39:34:99:0e:bf:99:e3:
24:bd:f9:4a:ac:56:c5:b0:a4:8f:9f:13:92:65:24:
89:88:f5:1f:6f:2a:1c:15:81:39:bb:40:b8:2b:92:
38:b6:df:d1:ca:96:a2:37:3a:a9:15:63:5f:56:e0:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AB:26:93:9E:44:CC:F6:6F:14:FA:64:57:E4:98:6A:F0:E9:B5:15
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230342e39332e3233352e302f32342d3234203d3e2031323339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.93.235.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6a:03:80:4f:cb:5a:12:06:70:d4:29:d1:3f:dd:bf:b6:d9:
3e:0e:e0:e9:40:45:42:d7:84:d3:1f:2a:ac:b5:95:cd:62:04:
b3:58:eb:41:d9:49:c6:fa:d9:aa:8f:5f:30:ac:5e:90:c6:70:
02:00:fd:a3:71:41:f4:33:a6:17:c8:e3:c1:61:ab:55:9d:bd:
d4:4e:0d:f2:cc:a5:c1:6b:26:39:a2:8f:27:27:a3:4b:eb:c1:
c0:ed:63:4b:a7:fd:59:8a:7d:ab:ff:e8:12:6c:6e:cc:91:70:
e2:7e:2d:55:9e:d7:fb:0d:9b:31:e6:84:9e:5a:56:26:62:19:
c8:54:1c:2b:69:d6:8a:f2:08:22:c6:a5:d7:65:fc:8b:79:6c:
a3:8b:92:32:8b:7e:c7:c3:96:d8:4b:9f:cb:0a:72:19:38:3f:
c7:d2:b2:ec:22:0d:30:fa:da:ea:78:83:41:eb:81:ae:1e:0f:
7b:00:d2:bb:62:4b:36:da:e5:c7:13:b2:f9:a9:63:41:be:bb:
73:d3:26:73:33:84:bc:b8:7d:5e:65:20:d1:29:3d:52:de:a3:
b5:2d:fa:67:dc:d2:ae:47:95:af:20:fb:34:1c:55:3a:07:5d:
fc:e0:6c:fd:f9:5f:b9:6b:b7:2a:f6:59:46:2e:f3:3a:97:8e:
73:d2:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org