Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230342e302f32342d3234203d3e203630373231.roa
File: 3230352e3233342e3230342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: dCTPT546Yzuk5ERsTYIPMo/SDDY+6ZA9L+su9EqXbWc=
Subject key identifier: E4:FA:5D:76:A7:9B:DC:2A:85:20:EA:29:F9:89:3B:09:1A:77:10:64
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: E3E0596EF756D88AD84163AC36AA77402AE334
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230342e302f32342d3234203d3e203630373231.roa
Signing time: Thu 06 Apr 2023 09:29:09 +0000
ROA not before: Thu 06 Apr 2023 09:24:09 +0000
ROA not after: Thu 04 Apr 2024 09:29:09 +0000
asID: 60721
IP address blocks: 205.234.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e3:e0:59:6e:f7:56:d8:8a:d8:41:63:ac:36:aa:77:40:2a:e3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 6 09:24:09 2023 GMT
Not After : Apr 4 09:29:09 2024 GMT
Subject: CN=E4FA5D76A79BDC2A8520EA29F9893B091A771064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:98:a2:e0:ba:65:c5:5b:a9:da:23:83:60:
a3:8a:d6:e6:dd:d2:34:70:1a:68:92:93:87:7e:c0:
02:7f:c2:57:41:87:a9:b5:b1:72:f0:9b:05:f7:3a:
91:50:59:4c:26:47:94:c7:81:86:93:40:1b:74:60:
87:e4:0f:ec:97:6b:bb:07:f8:47:cc:d0:75:02:51:
16:db:eb:57:09:00:8f:63:a1:96:25:cb:24:98:d8:
9a:cd:24:72:33:47:41:b4:59:fd:17:a8:dc:21:a8:
8f:c2:22:1a:87:f1:18:07:f6:de:0b:b3:34:22:be:
d7:d7:02:e8:52:f4:c3:f4:18:b8:70:03:fc:7c:bf:
df:5b:93:f8:d8:d3:08:bb:e3:e9:2a:57:26:91:3f:
ce:b5:11:e7:bf:de:19:0b:f6:d1:1e:4c:04:31:4c:
55:2a:80:fd:46:a9:07:1c:bd:a7:24:75:3f:98:10:
96:24:79:7b:d8:aa:ab:62:77:e9:64:a0:1b:db:bb:
40:44:e0:1c:62:49:43:73:70:3b:5a:a2:9d:36:9d:
f2:35:15:5c:3b:1c:5a:f3:12:0a:fa:fc:75:2e:2f:
c7:d6:2f:db:12:bf:8e:f9:83:48:0c:1b:ed:04:84:
d9:85:fc:0a:68:1d:ea:33:f1:ef:24:36:4c:d5:e6:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FA:5D:76:A7:9B:DC:2A:85:20:EA:29:F9:89:3B:09:1A:77:10:64
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3230342e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b1:23:a2:b6:44:e9:27:87:a8:71:a3:6a:d3:61:49:70:31:
fa:d8:d8:f4:75:20:4d:6e:81:e8:dc:17:09:8e:44:06:65:6b:
10:96:ef:9e:0a:7b:54:aa:42:a5:75:c8:c3:71:3d:43:fd:17:
e9:17:aa:d1:03:7c:0e:7a:4c:39:7b:33:d6:4a:7d:3f:63:78:
5a:81:59:c4:df:9b:58:3d:54:d5:22:bc:e1:d7:8b:65:cb:3c:
c4:64:6d:a8:56:99:32:03:8d:de:98:a8:36:c1:ff:cd:1a:34:
cd:29:b7:b2:7c:69:86:0a:d4:3b:82:10:71:6f:55:eb:5b:c0:
08:10:f8:6a:8a:a9:fc:b6:64:5b:bc:ff:40:ed:b5:52:fc:a4:
e0:df:98:2c:08:03:54:c3:47:76:ed:be:d2:aa:47:cd:be:ae:
a3:9d:04:00:ae:e9:41:4c:72:0b:80:8f:f6:b9:8f:47:09:64:
5c:0a:03:d2:9c:cc:4c:63:5c:c4:d4:fc:27:7b:0c:10:04:4c:
95:bb:82:1b:a0:48:5c:d7:1d:08:96:1b:cd:22:ff:80:4f:13:
ae:16:4a:85:fa:46:c3:ce:6a:62:19:c7:f4:d4:b3:9d:b8:94:
82:3d:01:cc:7b:5d:dc:8f:60:36:38:95:a3:78:b1:51:13:e9:
88:d8:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org