Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138312e302f32342d3234203d3e203631313338.roa
File: 3230352e3233342e3138312e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: nXOGUUIVVp6OenFHMw+vXL8D7zxgYSdFQLaPsdAaX/k=
Subject key identifier: BC:D5:4C:03:92:7D:47:F3:10:D8:83:6C:AD:3F:37:5D:DF:FD:22:6A
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 62BB5EEB412EA2C64DACAA390A7B3AD4CE23CB1C
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138312e302f32342d3234203d3e203631313338.roa
Signing time: Tue 09 May 2023 19:40:52 +0000
ROA not before: Tue 09 May 2023 19:35:52 +0000
ROA not after: Tue 07 May 2024 19:40:52 +0000
asID: 61138
IP address blocks: 205.234.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:bb:5e:eb:41:2e:a2:c6:4d:ac:aa:39:0a:7b:3a:d4:ce:23:cb:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 9 19:35:52 2023 GMT
Not After : May 7 19:40:52 2024 GMT
Subject: CN=BCD54C03927D47F310D8836CAD3F375DDFFD226A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:c6:6f:df:9e:0f:92:52:d9:36:e5:75:f4:
fb:01:f2:1c:15:e2:13:95:27:7e:49:c6:e4:09:7f:
a7:de:b6:ee:e7:8c:07:f8:73:ac:01:d7:4e:d6:2d:
63:4f:dd:d8:b7:c5:4a:84:61:6c:d5:d6:d9:14:cd:
de:2d:74:40:0a:46:18:e4:3c:f3:36:c2:14:8c:22:
1a:d0:7e:57:cb:bd:06:cd:19:63:00:c0:49:88:cd:
ef:20:8a:55:60:2e:6e:2a:ec:d2:75:bf:bd:45:72:
f2:5e:c9:dd:d9:1e:54:db:16:f5:7b:f2:5b:fd:71:
2f:7a:b2:73:74:33:3c:c4:dd:ed:13:06:54:56:20:
ed:46:5f:08:21:c9:db:1c:22:2a:f4:c1:ec:ac:3c:
45:24:ab:66:c9:f3:87:bf:b3:e8:e6:68:0f:16:a5:
f8:95:de:4e:6d:f2:e4:31:de:cc:98:6f:9e:7c:94:
e7:55:8c:33:5a:f8:61:86:a8:05:51:46:76:5b:fc:
76:65:5d:33:29:ab:19:2f:15:ac:64:4f:a5:04:83:
33:2b:88:07:a3:a8:19:58:5f:d3:28:25:05:19:85:
22:6b:a2:f7:9c:6a:76:f2:aa:3f:ac:5d:00:8d:4f:
e4:a3:f3:b1:1b:5a:02:81:17:fb:ed:ea:b8:bf:21:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:4C:03:92:7D:47:F3:10:D8:83:6C:AD:3F:37:5D:DF:FD:22:6A
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3138312e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.181.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7f:d0:3b:d1:ce:1b:ed:d4:a5:23:5f:00:86:bf:28:8f:80:
1e:2d:6a:b4:73:9f:9d:6f:02:0c:7d:ec:99:fb:fe:49:67:de:
76:8c:f0:13:b8:cd:28:cd:6f:6a:e6:96:a9:99:d1:3d:10:0c:
57:8c:06:6d:92:80:86:30:da:60:9c:ae:29:65:23:e6:47:22:
70:4b:db:7a:12:2d:56:44:10:25:5b:75:91:91:08:90:88:6a:
0a:d3:ec:6c:c7:05:f5:60:37:5c:a1:c0:9b:09:fd:fa:57:3b:
94:fe:e8:c1:2b:4b:f0:6f:e9:e6:a6:31:4b:d4:52:f8:44:7c:
2d:52:b4:a0:a2:d5:b6:f0:a3:5c:11:81:89:ec:ca:7d:24:a5:
b2:84:a9:fa:81:d1:32:b7:13:3b:08:35:c8:2d:fa:5e:41:9c:
95:a8:ff:c6:60:4f:cc:00:15:1e:bb:bb:b0:8a:78:2c:86:a1:
e2:19:c7:ba:86:4c:92:4c:59:9d:18:67:16:a5:25:6c:93:7f:
3b:0a:a3:2a:b6:77:a1:69:e9:0e:49:6a:e7:b2:96:6c:3d:d1:
0e:e2:60:82:67:87:e9:b6:96:59:2e:f3:4e:ee:ba:8e:da:81:
da:3a:f9:0f:cd:24:c8:bc:a5:1b:81:59:41:2d:68:4e:24:3f:
f8:e8:7b:c5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUYrte60EuosZNrKo5Cns61M4jyxwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNTA5MTkzNTUyWhcNMjQwNTA3MTk0MDUy
WjAzMTEwLwYDVQQDEyhCQ0Q1NEMwMzkyN0Q0N0YzMTBEODgzNkNBRDNGMzc1RERG
RkQyMjZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte/Gb9+eD5JS
2TbldfT7AfIcFeITlSd+ScbkCX+n3rbu54wH+HOsAddO1i1jT93Yt8VKhGFs1dbZ
FM3eLXRACkYY5DzzNsIUjCIa0H5Xy70GzRljAMBJiM3vIIpVYC5uKuzSdb+9RXLy
Xsnd2R5U2xb1e/Jb/XEverJzdDM8xN3tEwZUViDtRl8IIcnbHCIq9MHsrDxFJKtm
yfOHv7Po5mgPFqX4ld5ObfLkMd7MmG+efJTnVYwzWvhhhqgFUUZ2W/x2ZV0zKasZ
LxWsZE+lBIMzK4gHo6gZWF/TKCUFGYUia6L3nGp28qo/rF0AjU/ko/OxG1oCgRf7
7eq4vyEm1QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLzVTAOSfUfzENiDbK0/N13f
/SJqMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMTM4MzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeq1MA0GCSqGSIb3DQEB
CwUAA4IBAQB3f9A70c4b7dSlI18Ahr8oj4AeLWq0c5+dbwIMfeyZ+/5JZ952jPAT
uM0ozW9q5papmdE9EAxXjAZtkoCGMNpgnK4pZSPmRyJwS9t6Ei1WRBAlW3WRkQiQ
iGoK0+xsxwX1YDdcocCbCf36VzuU/ujBK0vwb+nmpjFL1FL4RHwtUrSgotW28KNc
EYGJ7Mp9JKWyhKn6gdEytxM7CDXILfpeQZyVqP/GYE/MABUeu7uwingshqHiGce6
hkySTFmdGGcWpSVsk387CqMqtnehaekOSWrnspZsPdEO4mCCZ4fptpZZLvNO7rqO
2oHaOvkPzSTIvKUbgVlBLWhOJD/46HvF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org