Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e203631313338.roa
File: 3231362e3234362e322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: ZAzR1zu0lJVmfeohea6/eaji45ETPa3eXIFcLu0jCEY=
Subject key identifier: C2:61:40:3D:53:B6:80:FA:8B:0E:C6:8B:35:A5:33:7C:7A:52:E7:39
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 63DB882261BA4B82F1DDC91114F13195E215502F
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e203631313338.roa
Signing time: Fri 07 Apr 2023 11:57:30 +0000
ROA not before: Fri 07 Apr 2023 11:52:30 +0000
ROA not after: Fri 05 Apr 2024 11:57:30 +0000
asID: 61138
IP address blocks: 216.246.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:db:88:22:61:ba:4b:82:f1:dd:c9:11:14:f1:31:95:e2:15:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 7 11:52:30 2023 GMT
Not After : Apr 5 11:57:30 2024 GMT
Subject: CN=C261403D53B680FA8B0EC68B35A5337C7A52E739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:8c:dd:db:e1:ec:52:96:c3:ef:ab:70:a2:
ac:92:2f:09:23:4c:96:47:ca:cb:3c:28:19:88:c2:
74:61:6e:5b:fd:14:4e:3c:1f:bf:a2:b1:00:69:55:
df:d2:3b:e2:c8:c7:fa:59:6e:58:fc:72:0b:93:48:
f8:c7:80:e3:d1:3a:cd:cc:03:58:3e:55:3f:2e:c6:
48:be:65:09:f4:38:32:cb:c5:4c:b3:d2:99:33:e8:
9d:3e:28:8f:32:4a:f9:0b:9f:89:64:ff:b9:84:0d:
99:50:d6:8e:ce:97:4b:77:97:a5:1d:f5:de:9b:64:
10:da:dc:99:15:09:86:05:ec:f2:20:3c:4d:5b:27:
86:1a:ca:bd:83:71:d6:ea:d5:c1:24:66:91:d4:1a:
de:0b:b5:14:a9:53:40:0e:5c:8e:65:be:4b:25:36:
df:92:47:ce:dc:5d:22:00:db:de:fe:04:7e:5f:4d:
8e:0c:0d:3e:13:22:fb:a8:75:32:fb:c3:71:32:9d:
9f:eb:e5:77:c2:c1:46:a5:8d:8e:e3:3a:4d:c5:72:
34:41:11:6f:b9:52:0b:e0:b3:ab:21:b2:64:ca:54:
26:6d:bf:0a:31:0f:be:76:1c:50:5e:bf:ab:98:90:
a3:79:8f:df:ce:b6:c0:cd:e6:9c:57:c4:e8:06:99:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:40:3D:53:B6:80:FA:8B:0E:C6:8B:35:A5:33:7C:7A:52:E7:39
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3231362e3234362e322e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.2.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:03:08:0e:43:53:f8:ae:ba:cc:ef:77:fc:ce:ef:d8:a3:34:
d1:fb:98:9e:73:96:b5:6a:26:21:72:88:13:1d:d8:a0:e0:cc:
58:de:21:66:c6:5d:9e:c1:09:f7:71:fd:d9:9b:be:32:0c:75:
7b:c1:f9:f3:ee:68:80:73:e0:54:73:14:fa:07:ce:19:95:c2:
ed:6f:64:7e:da:38:df:f3:9b:2f:56:cc:c3:97:fd:0b:4e:05:
cb:8e:55:dc:e1:a2:fd:cf:9c:88:ce:e8:1c:3b:de:e3:07:ec:
48:f9:ee:c5:d1:26:52:35:55:cc:b4:c9:d4:ed:6f:55:f1:4f:
0d:06:f3:89:45:91:29:f7:b7:63:bb:7b:0b:e3:7a:ec:b1:01:
ae:7e:7b:8d:30:a0:74:a7:14:08:c3:e1:38:f0:c3:eb:3e:16:
4a:4c:96:7a:21:72:da:4c:44:4a:fd:9c:f4:13:9d:e9:bb:48:
f5:f1:34:05:9d:99:d4:63:68:6d:ca:9d:ca:e9:86:d4:74:03:
48:e3:85:9b:88:35:27:65:6d:bf:d5:c7:c7:e3:87:69:7c:e0:
89:c6:3e:b9:5a:e5:2b:b6:e4:a4:7f:33:a7:ca:96:77:1f:b3:
9a:37:b8:12:15:33:70:7e:64:44:0d:10:43:68:32:23:2f:4b:
09:b8:9b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org