Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203631313338.roa
File: 36342e3230322e3130352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: 2JuwD2x4kw9jzd1mdvqiTFhHE8j8WOSG7HfgLibBo6o=
Subject key identifier: 35:9A:CF:61:58:B8:35:E2:30:57:D2:36:C0:49:EC:8B:3B:85:23:3D
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 7F33E5223DC66643BEB6651DFB3224C7885028AC
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203631313338.roa
Signing time: Thu 25 May 2023 14:57:29 +0000
ROA not before: Thu 25 May 2023 14:52:29 +0000
ROA not after: Thu 23 May 2024 14:57:29 +0000
asID: 61138
IP address blocks: 64.202.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:33:e5:22:3d:c6:66:43:be:b6:65:1d:fb:32:24:c7:88:50:28:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 25 14:52:29 2023 GMT
Not After : May 23 14:57:29 2024 GMT
Subject: CN=359ACF6158B835E23057D236C049EC8B3B85233D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:be:6d:a5:29:80:e0:f3:0c:05:b4:9f:ca:
17:65:00:a4:1c:5a:ab:f0:b8:81:9c:2b:8f:97:14:
b6:f9:8c:f6:7d:fc:99:73:2b:f4:62:9e:11:00:ac:
bb:61:13:2e:f7:75:5f:28:31:98:b5:47:4f:6c:8b:
1f:73:4c:33:9a:d8:ef:e0:ff:4c:b6:61:a2:76:43:
6f:c9:e8:44:35:71:a5:68:36:fb:2f:0f:60:43:98:
ce:b0:c6:cc:57:af:af:d6:79:d0:5d:75:f0:ae:b4:
6f:c0:3c:b2:25:f5:65:f3:ed:a9:5e:93:cf:e3:11:
e2:82:87:57:c6:6e:d1:7e:8a:58:f3:0e:39:06:0a:
58:ca:22:b9:8d:9d:3b:27:4e:0c:00:5a:e4:43:85:
7e:da:98:47:61:f5:fe:37:91:d4:88:25:d0:44:11:
68:64:19:44:91:57:77:0b:6d:a7:eb:05:dc:36:a1:
ce:e2:1e:2f:69:ce:57:f4:54:50:ef:88:fd:c5:33:
23:e6:d7:50:1f:0a:67:3c:52:85:24:94:d0:69:26:
bf:96:81:4c:7f:65:33:f9:65:4f:d7:e1:ae:5b:32:
2f:84:7e:66:4a:d2:ff:32:62:99:cd:2f:5e:35:be:
c7:5c:d8:a6:06:5b:38:41:5f:db:6b:c3:87:05:fd:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:CF:61:58:B8:35:E2:30:57:D2:36:C0:49:EC:8B:3B:85:23:3D
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36342e3230322e3130352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.202.105.0/24
Signature Algorithm: sha256WithRSAEncryption
21:46:38:cf:1e:e1:7a:08:5a:36:0c:c9:d4:e3:08:9a:cd:06:
80:80:48:c3:e5:c2:3f:54:0f:eb:cd:8f:67:cf:06:df:d8:36:
bb:e0:4d:c6:60:13:0e:32:ca:1e:e6:3a:f2:ee:91:15:a3:c2:
0b:af:5f:54:92:21:2f:4a:49:fb:3f:8b:28:f6:18:49:7e:61:
2a:24:46:85:08:45:06:79:b5:e3:ec:3e:7a:90:b6:94:a4:ba:
be:d0:e2:ec:e9:50:7a:05:ab:fc:b5:25:82:8d:f2:c6:84:e8:
9f:3a:35:75:1a:1f:0c:54:fd:e3:9f:f5:7f:23:e2:4c:25:75:
46:39:c9:61:92:b2:79:67:58:c1:c8:46:78:f7:6a:96:5d:2b:
5e:3b:93:dc:5f:56:94:fd:34:87:03:49:76:b5:79:50:cd:84:
ad:06:61:c1:e5:0a:c3:48:40:96:b7:3b:66:00:13:ad:76:61:
ec:23:82:ec:71:79:89:9a:80:97:28:37:1e:9f:73:29:ce:5d:
ee:cd:b6:74:7e:73:43:47:e4:c1:72:e3:e0:e8:14:a5:71:d9:
e6:a4:d1:7b:c5:24:a9:2e:e8:aa:db:2c:e1:e5:a4:3c:f3:80:
1c:65:37:39:dd:83:fa:54:a0:60:07:1f:56:c6:66:cd:6a:44:
dc:b6:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org