Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3137312e302f32342d3234203d3e203630373231.roa
File: 3230352e3233342e3137312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: HTnF/vmGU4D9/Ob1kPJ5MQPj2jaDbL7czKRLU59HciY=
Subject key identifier: 44:A5:5C:3D:D9:12:90:60:BC:DC:2C:0D:8D:9D:18:00:16:40:D4:84
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 645D6A8CBB0455CF73D20BC2BE8532906B5FC576
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3137312e302f32342d3234203d3e203630373231.roa
Signing time: Thu 06 Apr 2023 09:29:09 +0000
ROA not before: Thu 06 Apr 2023 09:24:09 +0000
ROA not after: Thu 04 Apr 2024 09:29:09 +0000
asID: 60721
IP address blocks: 205.234.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5d:6a:8c:bb:04:55:cf:73:d2:0b:c2:be:85:32:90:6b:5f:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 6 09:24:09 2023 GMT
Not After : Apr 4 09:29:09 2024 GMT
Subject: CN=44A55C3DD9129060BCDC2C0D8D9D18001640D484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:46:b0:a4:4c:28:f0:05:58:ff:68:e2:31:
42:f1:b2:9f:7b:c0:46:ac:4d:f8:99:fd:d9:93:fe:
95:7a:05:80:13:6d:72:71:e0:a1:2d:88:5e:54:08:
07:66:0f:90:71:b4:c6:61:7d:88:d6:8c:74:96:24:
a2:48:d5:e9:1d:a8:5c:94:bb:78:1e:8c:c7:78:5c:
f8:55:41:36:d2:04:f6:52:69:14:27:3e:5f:98:2d:
41:4f:f3:3f:30:a2:58:e2:9b:4a:a9:09:86:46:22:
f8:5c:27:da:1f:f2:83:84:34:e6:0c:53:4f:71:71:
b7:f1:4a:77:e9:24:23:4a:3a:09:e3:c8:92:7f:4f:
e4:8a:b5:c6:4f:9b:05:66:d6:c6:46:7e:48:6d:3b:
a8:14:21:bb:2b:f9:d2:ee:52:9f:59:9c:50:b9:7a:
c4:94:ce:d1:b0:a3:b3:66:22:ad:96:f1:bc:3b:9a:
1d:29:a0:58:9d:e1:e5:db:64:f5:29:23:ee:0d:66:
bd:20:37:97:f0:3e:15:3f:43:0f:36:81:ab:be:2b:
af:af:bb:e1:6b:5e:9f:09:e9:0e:f6:a3:98:41:62:
9e:f3:b8:62:ce:11:e8:08:64:40:56:eb:2d:47:8b:
0f:a8:47:b0:4b:92:f4:6f:57:a1:9d:fe:9f:8e:e3:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:5C:3D:D9:12:90:60:BC:DC:2C:0D:8D:9D:18:00:16:40:D4:84
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3137312e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.171.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2c:3a:3d:4e:a9:f9:b7:dc:25:49:11:3c:62:11:90:36:73:
a1:5e:72:53:e6:d7:1f:f8:df:a5:58:60:f2:da:7b:3f:f2:35:
39:e2:b8:40:55:f8:40:7f:44:6a:86:22:05:2d:1b:6b:ea:be:
1e:b9:7d:39:db:dd:83:65:0c:31:63:da:b4:a1:2f:aa:46:e3:
6f:80:39:da:28:84:fc:c1:58:6f:e5:bc:44:8a:21:b4:74:59:
7d:b6:3b:65:85:09:a7:6c:7c:e1:05:78:50:34:4f:cb:cf:ae:
32:e6:db:e8:f2:78:73:9b:7a:f1:8a:7b:a7:23:da:a0:1c:26:
c7:bc:08:e2:62:71:6e:4a:c2:09:9d:fe:a2:58:50:0f:f4:22:
1c:58:8e:d8:56:50:d8:17:02:65:df:35:22:5f:fb:4c:fd:1b:
5b:1b:71:86:3f:76:7b:c5:c5:4d:af:b3:56:53:bb:9c:36:b1:
4a:78:d6:63:60:b4:fd:80:b9:00:bc:4c:d2:42:ab:7d:17:9f:
7e:44:db:c1:f6:84:49:48:5e:3c:5c:d1:c1:01:6a:aa:83:86:
17:96:7e:64:93:28:7f:07:46:58:86:44:a6:84:c2:3c:7e:a2:
8e:fb:c4:c8:51:6c:30:0b:d4:d6:7a:e8:aa:43:86:9c:97:b1:
0e:7b:f9:dd
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZF1qjLsEVc9z0gvCvoUykGtfxXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDA2MDkyNDA5WhcNMjQwNDA0MDkyOTA5
WjAzMTEwLwYDVQQDEyg0NEE1NUMzREQ5MTI5MDYwQkNEQzJDMEQ4RDlEMTgwMDE2
NDBENDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKxGsKRMKPAF
WP9o4jFC8bKfe8BGrE34mf3Zk/6VegWAE21yceChLYheVAgHZg+QcbTGYX2I1ox0
liSiSNXpHahclLt4HozHeFz4VUE20gT2UmkUJz5fmC1BT/M/MKJY4ptKqQmGRiL4
XCfaH/KDhDTmDFNPcXG38Up36SQjSjoJ48iSf0/kirXGT5sFZtbGRn5IbTuoFCG7
K/nS7lKfWZxQuXrElM7RsKOzZiKtlvG8O5odKaBYneHl22T1KSPuDWa9IDeX8D4V
P0MPNoGrviuvr7vha16fCekO9qOYQWKe87hizhHoCGRAVustR4sPqEewS5L0b1eh
nf6fjuPL4QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFESlXD3ZEpBgvNwsDY2dGAAW
QNSEMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMTM3MzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMwMzczMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeqrMA0GCSqGSIb3DQEB
CwUAA4IBAQBxLDo9Tqn5t9wlSRE8YhGQNnOhXnJT5tcf+N+lWGDy2ns/8jU54rhA
VfhAf0RqhiIFLRtr6r4euX05292DZQwxY9q0oS+qRuNvgDnaKIT8wVhv5bxEiiG0
dFl9tjtlhQmnbHzhBXhQNE/Lz64y5tvo8nhzm3rxinunI9qgHCbHvAjiYnFuSsIJ
nf6iWFAP9CIcWI7YVlDYFwJl3zUiX/tM/RtbG3GGP3Z7xcVNr7NWU7ucNrFKeNZj
YLT9gLkAvEzSQqt9F59+RNvB9oRJSF48XNHBAWqqg4YXln5kkyh/B0ZYhkSmhMI8
fqKO+8TIUWwwC9TWeuiqQ4acl7EOe/nd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org