Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e203239383032.roa
File: 36362e3232352e3232382e302f32332d3234203d3e203239383032.roa (raw, json)
Hash identifier: LJlWs6vF8tuLxfe9O/vye4nRAG+3gLfTtaWAZAlWP2Q=
Subject key identifier: B5:1E:71:64:9F:9A:9C:BD:0E:E9:D2:AF:14:CB:E4:6A:AB:94:FD:85
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 087EB6347550AE51B2B8AC8465BD2364FAD5C3E4
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e203239383032.roa
Signing time: Wed 05 Apr 2023 17:16:32 +0000
ROA not before: Wed 05 Apr 2023 17:11:32 +0000
ROA not after: Wed 03 Apr 2024 17:16:32 +0000
asID: 29802
IP address blocks: 66.225.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:7e:b6:34:75:50:ae:51:b2:b8:ac:84:65:bd:23:64:fa:d5:c3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Apr 5 17:11:32 2023 GMT
Not After : Apr 3 17:16:32 2024 GMT
Subject: CN=B51E71649F9A9CBD0EE9D2AF14CBE46AAB94FD85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:11:c1:90:88:2b:fe:af:c4:ad:e2:ca:17:
07:9e:68:67:e1:dd:ee:12:6f:e9:35:02:6f:d2:2a:
14:3c:4c:a1:a7:02:91:13:bc:cd:67:d2:e9:7d:70:
9c:b6:23:bc:c0:00:40:14:61:26:07:41:8c:2d:c1:
fa:6f:ef:d6:83:52:16:59:c6:92:d3:06:08:3f:c3:
c0:c5:92:ec:91:5a:4d:2e:38:35:76:04:79:79:d8:
b1:01:2b:42:77:76:61:77:f6:86:e6:f1:8a:38:82:
30:91:5e:36:79:70:66:a2:cf:32:d5:14:ff:b3:b0:
ba:c7:03:23:68:70:56:85:60:a9:c8:63:69:77:1c:
ff:9c:c1:16:7a:cd:ce:89:e1:97:5c:71:47:44:38:
cf:76:0e:b8:6f:42:b4:3f:b4:aa:f4:16:93:e8:95:
32:69:87:c9:ce:8f:4b:a4:4a:83:52:b3:bb:e0:49:
80:8c:2d:31:e1:79:56:13:79:ed:7b:df:90:40:e0:
d9:47:19:f5:f4:5f:c2:01:68:b5:9d:2b:38:52:dd:
74:25:34:41:ec:17:ed:9d:8b:8b:70:53:7d:c9:76:
fc:69:83:51:84:ef:1d:c3:fb:0c:51:c0:57:98:60:
25:fb:83:e0:2b:42:16:a5:6b:66:36:d9:7b:89:cb:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:71:64:9F:9A:9C:BD:0E:E9:D2:AF:14:CB:E4:6A:AB:94:FD:85
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.228.0/23
Signature Algorithm: sha256WithRSAEncryption
02:a0:08:18:2f:b4:f2:2b:5b:14:0f:e5:94:bd:75:8f:01:55:
48:1c:95:ee:43:23:a3:6e:ef:63:42:59:5e:7d:c4:da:cf:01:
a6:d6:1b:b3:68:af:0e:a1:2c:d0:8d:0f:e1:6e:a6:d7:93:81:
05:01:c4:a4:c8:c8:d8:1b:42:7a:aa:86:c7:f1:a4:3b:3e:82:
78:4b:db:36:17:d6:25:39:e5:1c:47:37:64:a1:7f:db:fd:9b:
2c:4c:4e:f7:f4:5a:72:cf:87:c4:33:50:11:7a:54:25:5c:6f:
52:c0:7a:04:ac:33:cf:83:5e:2d:e9:f9:7f:ff:b3:ac:e3:d6:
4b:47:06:a8:25:ea:d7:9d:b1:91:77:cc:c1:c9:47:64:94:bd:
2e:56:93:fd:fa:78:ad:93:2e:ba:45:39:4e:fe:f7:f2:c0:98:
ed:2c:97:6f:9a:cd:bd:25:2d:11:80:71:06:b4:e5:e3:af:a6:
98:5b:78:a5:da:8b:4b:a4:03:db:b1:a3:c5:4b:e7:90:93:77:
3a:c6:47:4f:e0:d9:6c:b7:af:96:52:a5:9c:41:df:5b:84:45:
d7:72:b0:f9:97:81:a8:7e:e0:42:d4:da:06:44:56:95:ef:b9:
e7:34:a8:fb:e4:4c:4b:85:f9:39:fa:0d:10:df:7f:28:4e:89:
94:0c:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org