Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230322e302f32342d3234203d3e203631313338.roa
File: 3230352e3233342e3230322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: IIPg0gfTJft94TYVwJdTzem9lNw0DSI2iR7RJkQxZXQ=
Subject key identifier: ED:5D:3C:28:20:A4:0B:20:1D:E8:51:81:FD:89:72:B5:D1:52:B5:AF
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 537AF161FD1DDEE604659E2841D28CC03C2BED23
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230322e302f32342d3234203d3e203631313338.roa
Signing time: Tue 18 Apr 2023 12:45:34 +0000
ROA not before: Tue 18 Apr 2023 12:40:34 +0000
ROA not after: Tue 16 Apr 2024 12:45:34 +0000
asID: 61138
IP address blocks: 205.234.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:7a:f1:61:fd:1d:de:e6:04:65:9e:28:41:d2:8c:c0:3c:2b:ed:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 18 12:40:34 2023 GMT
Not After : Apr 16 12:45:34 2024 GMT
Subject: CN=ED5D3C2820A40B201DE85181FD8972B5D152B5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4c:73:de:64:75:f9:fc:3d:3e:8c:ab:6b:a2:
23:30:27:7e:e7:4b:b9:e3:c7:d9:1d:1d:91:a3:bc:
ae:ed:bb:27:6f:28:4b:ba:03:cf:65:51:7c:b7:de:
84:ba:66:f8:90:ff:f9:2b:78:f3:c6:18:6b:51:3e:
38:7f:8f:46:ec:a1:83:ca:1b:c5:e4:9b:5c:c2:c1:
4a:1b:34:f5:15:eb:c3:a5:2e:e3:5e:45:b7:71:ca:
43:b9:19:d4:77:6c:9b:76:0b:72:4d:92:a9:f3:e7:
48:e0:57:d1:cd:6e:a3:e2:25:e7:bb:c0:17:ba:1e:
f5:61:29:d9:dd:46:cc:0d:0c:52:3c:ed:8d:62:d5:
1c:b9:58:07:4f:a5:57:cb:90:09:d8:bc:c6:a9:98:
bf:83:ec:7e:20:eb:56:f2:20:a0:35:5d:0a:a0:20:
45:fd:00:81:c6:f8:ae:4c:5d:4b:5b:52:9d:b9:7b:
eb:11:f5:91:94:d3:b8:43:39:0d:b1:c8:5f:72:74:
b7:b3:c5:7f:d2:c7:ce:fa:58:a3:90:5d:f5:d2:90:
1c:df:04:af:b3:bc:ee:4b:6d:54:4e:eb:be:08:7d:
8b:09:67:bb:3b:01:9c:57:60:9b:b8:4d:b2:e4:38:
63:c6:dd:be:f6:df:fd:db:8a:51:2a:69:25:72:89:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5D:3C:28:20:A4:0B:20:1D:E8:51:81:FD:89:72:B5:D1:52:B5:AF
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230322e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.202.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5a:df:c2:11:cd:9c:5d:35:f6:70:c8:2c:92:6d:81:67:a6:
09:c7:96:d1:97:fe:24:d7:cf:02:2f:7a:c7:b4:53:54:25:9d:
d2:26:ee:35:58:56:0d:2f:20:86:09:46:67:42:e9:ea:c4:1e:
24:62:c4:53:42:d6:7c:22:d2:f0:51:bf:8e:d7:0a:6b:11:fa:
4c:55:59:24:41:d0:73:a9:dd:83:cc:ef:6a:a8:5a:db:fd:4d:
1d:68:d3:2b:24:a7:00:9d:25:1b:44:70:b1:71:35:c3:b0:af:
06:f8:2e:b3:9c:b9:0c:41:a2:62:0c:e9:a1:93:97:43:3c:c3:
a2:27:57:21:7f:f9:8a:9e:d8:e5:ae:18:04:a2:5d:d5:81:2e:
dc:78:6c:9b:72:a6:8f:d2:25:60:a1:35:ad:b5:2a:04:0e:16:
99:de:b5:19:d8:20:1e:a0:6f:a6:ae:2c:22:ce:3a:43:d2:da:
82:18:1c:a2:dd:e5:11:29:d9:3c:f3:54:25:6f:a9:3f:31:21:
15:77:bd:32:5e:40:7d:bb:55:0e:88:de:6d:b6:64:50:bc:36:
cd:3a:75:a4:9d:37:98:fd:71:88:0c:df:63:8b:bc:4c:07:16:
fb:2c:be:e9:28:b2:17:80:e8:ef:bd:08:d9:10:67:9c:7c:a1:
04:7b:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org