Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3234203d3e20323038343835.roa
File: 3230352e3233342e3233322e302f32322d3234203d3e20323038343835.roa (raw, json)
Hash identifier: n8WUnTIxHRam0fT3dZcUf16GVGK6RYdilDnxQ/hRTCY=
Subject key identifier: 24:BB:A6:0B:47:93:34:F4:0D:EB:A8:DF:1A:28:37:5F:69:C3:07:B9
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 0126ACF7AEAB8A151FC585DB62620E12716B29AD
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3234203d3e20323038343835.roa
Signing time: Tue 09 May 2023 02:47:14 +0000
ROA not before: Tue 09 May 2023 02:42:14 +0000
ROA not after: Tue 07 May 2024 02:47:14 +0000
asID: 208485
IP address blocks: 205.234.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:26:ac:f7:ae:ab:8a:15:1f:c5:85:db:62:62:0e:12:71:6b:29:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 9 02:42:14 2023 GMT
Not After : May 7 02:47:14 2024 GMT
Subject: CN=24BBA60B479334F40DEBA8DF1A28375F69C307B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:d2:9d:f1:2a:d6:47:3f:a2:31:70:44:e3:
2e:77:f9:d9:95:28:bd:50:14:fd:31:b3:00:73:80:
a0:29:99:92:f9:6d:08:6b:1c:14:c2:fa:7e:ab:41:
c6:68:30:4a:f9:1e:03:b1:4d:36:b4:f4:64:4f:e6:
81:df:ad:ae:97:39:6b:ab:56:13:d9:10:0e:9b:25:
1c:18:d1:3b:5d:5b:d6:68:c8:1a:6c:f6:ba:e5:30:
bc:aa:6b:85:c9:31:1e:06:aa:c0:eb:30:2c:6b:71:
74:7b:74:97:1b:cc:1b:d3:7c:2d:fb:21:df:79:9a:
5f:15:bc:24:79:a8:13:9f:1d:47:3c:38:b7:c9:c7:
91:18:3f:d3:a6:90:00:d1:c7:d9:50:ec:bb:61:07:
53:88:8b:72:65:0f:7d:1e:34:41:16:12:f6:a3:ea:
56:59:b4:d7:91:5d:e8:e1:df:52:46:a0:a9:d3:fd:
71:a9:3d:0c:06:05:aa:0a:e7:f6:c7:8d:ec:0b:e0:
a5:6b:75:f2:72:2a:b0:4b:03:ee:23:dd:a3:78:b8:
f4:e3:c5:fe:bb:53:4c:6b:70:47:74:7d:bd:c2:63:
72:39:57:dd:e8:97:37:72:e1:b2:7f:c3:cb:42:86:
14:64:a8:42:9a:fe:a3:05:ba:1a:39:ae:55:d7:e8:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BB:A6:0B:47:93:34:F4:0D:EB:A8:DF:1A:28:37:5F:69:C3:07:B9
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3233322e302f32322d3234203d3e20323038343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:1c:18:19:32:c9:a6:00:4c:fc:76:14:b4:61:cd:a8:ce:76:
e6:57:2d:9f:5a:cb:b4:56:77:0a:33:cb:d1:40:ec:de:c5:2b:
6c:85:0b:06:11:dc:08:90:68:07:41:8f:7b:6a:2e:f7:bc:9d:
be:65:03:c0:75:a3:8f:fd:1f:95:b9:dd:a2:46:85:07:3d:74:
1b:94:b5:85:3a:3f:9c:97:8d:c7:f0:91:07:1a:d8:ae:c4:80:
51:be:cf:95:08:06:30:40:62:9f:f2:dd:1b:1c:a1:14:46:ed:
bf:03:fb:22:c3:cd:84:c1:99:22:4b:d6:ba:25:c9:33:4b:56:
d7:33:36:a1:34:b7:c2:aa:58:e7:30:de:31:c4:70:5c:51:6c:
2b:98:22:99:80:70:e7:54:6c:fd:9f:eb:35:c5:99:0e:bd:f1:
64:2b:4a:d7:80:c4:a9:7d:c9:44:46:c0:d5:02:d2:c5:fe:30:
61:06:51:43:ea:82:1c:dd:75:85:d3:55:40:2b:2e:2e:ec:1c:
97:6f:24:f6:0a:07:02:82:26:9f:e5:76:07:e7:be:10:25:59:
26:67:2e:6e:25:27:81:ac:f0:48:d6:af:48:dd:87:4c:f2:f7:
83:f0:39:a3:ab:80:f5:a3:47:fb:68:86:a6:65:5b:ea:8d:02:
3a:b9:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org