Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e20383334.roa
File: 36362e3232352e3232382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 3KBfj/C/BhBTY+XO8kjKWHFNxbo2JY7Y0veHClWrF9w=
Subject key identifier: 92:39:84:E3:42:C1:69:2F:E6:B2:A5:30:27:C2:7B:A2:A9:2A:0E:0C
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 11C063E78C3D41D1CA9F159AA60AAD34844D46F9
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e20383334.roa
Signing time: Fri 05 May 2023 00:00:07 +0000
ROA not before: Thu 04 May 2023 23:55:07 +0000
ROA not after: Fri 03 May 2024 00:00:07 +0000
asID: 834
IP address blocks: 66.225.228.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c0:63:e7:8c:3d:41:d1:ca:9f:15:9a:a6:0a:ad:34:84:4d:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 4 23:55:07 2023 GMT
Not After : May 3 00:00:07 2024 GMT
Subject: CN=923984E342C1692FE6B2A53027C27BA2A92A0E0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:7b:36:cc:dd:42:c2:24:90:37:3b:bd:10:
77:0f:37:63:61:e5:bb:de:b0:5f:ea:84:fe:ae:71:
6c:d1:1b:34:8a:21:0c:02:9d:c2:b4:b6:f1:ae:a4:
e0:c4:fe:e7:c2:16:cf:91:59:ac:c5:cd:68:f9:44:
bc:49:a5:ec:94:7c:00:ac:1a:89:92:31:16:0c:5d:
1f:4a:1b:42:51:22:71:37:dc:e6:68:b6:c5:d9:a4:
70:d2:de:64:3b:fc:ce:e2:dc:1e:89:08:fe:45:bd:
ee:21:d7:eb:0c:1c:20:65:80:48:20:f1:cc:59:29:
3a:92:18:ce:3f:a9:f5:2b:a6:fd:34:99:ce:3d:ff:
1c:80:c6:60:5b:62:00:29:89:44:94:7b:3c:bc:f0:
67:5f:2d:ae:56:1b:d4:20:47:80:5e:54:70:26:e3:
b9:b3:71:09:ca:86:e6:2a:9b:d9:82:59:65:0b:03:
16:b0:16:e4:a9:7c:c8:a1:ce:a3:7e:2c:2a:af:ea:
79:79:ce:9d:d5:44:e2:53:d6:74:b5:a5:ac:dc:9e:
85:e7:cd:24:17:83:c1:a3:18:63:e7:9c:42:4c:8a:
a7:71:c3:63:a2:44:0c:fb:23:0f:51:0b:7b:43:66:
57:34:c7:60:42:87:e8:d1:be:e6:5f:22:41:27:d7:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:84:E3:42:C1:69:2F:E6:B2:A5:30:27:C2:7B:A2:A9:2A:0E:0C
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/36362e3232352e3232382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.228.0/23
Signature Algorithm: sha256WithRSAEncryption
26:be:17:44:51:62:ca:27:52:28:0b:07:b1:20:e7:6b:05:f7:
de:3b:a5:ae:af:88:3f:02:f1:cd:3d:a5:22:e7:62:38:c3:60:
5a:d2:05:d4:4f:60:2e:a3:ff:54:cb:1a:a5:dd:f6:90:6c:cc:
33:73:57:d8:2c:11:06:28:50:94:aa:41:c8:1b:91:39:c4:2a:
e1:2b:fa:92:30:d2:74:bb:34:09:e3:c2:87:2f:1d:7f:b9:f9:
da:59:0c:d4:20:78:2a:9f:ba:c1:2d:23:f4:dc:9b:70:fa:33:
68:b0:4f:5c:17:c4:d7:33:ef:be:f6:85:61:8e:52:84:f9:cb:
ea:dc:01:6c:5d:9b:bf:7d:bb:5f:85:84:4c:da:6c:25:dc:7c:
06:3a:74:08:d6:f1:93:eb:69:6f:d9:61:9f:56:e5:79:7b:83:
a2:33:bd:f0:1c:f6:af:c6:47:03:a7:48:28:13:04:92:94:30:
03:d4:bf:a9:4f:17:54:da:fb:8f:30:84:89:f7:2a:6b:0c:4c:
ad:94:a5:4d:26:67:b4:0f:86:1b:3d:d4:0d:d7:9c:04:b2:97:
4f:58:06:90:e1:b9:03:c6:cf:e1:3a:b1:bf:56:25:a7:e3:b7:
66:94:be:06:d9:44:7d:3a:60:20:3b:f5:10:00:b7:27:6f:03:
36:3d:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org