Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233382e302f32342d3234203d3e203631313338.roa
File: 3230392e3230302e3233382e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: RnhAN8xYGBw3GffSO7dLvgV/4z8RQa7RWgQolEpKwo4=
Subject key identifier: DF:2D:26:63:6C:34:C1:3A:D9:65:EB:90:DB:5F:A3:B8:1D:07:5A:1B
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 52DF4FAE2B4BF3439F75190073BFD7F5EC0CDD8C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233382e302f32342d3234203d3e203631313338.roa
Signing time: Mon 05 Dec 2022 13:02:28 +0000
ROA not before: Mon 05 Dec 2022 12:57:28 +0000
ROA not after: Mon 04 Dec 2023 13:02:28 +0000
asID: 61138
IP address blocks: 209.200.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:df:4f:ae:2b:4b:f3:43:9f:75:19:00:73:bf:d7:f5:ec:0c:dd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 5 12:57:28 2022 GMT
Not After : Dec 4 13:02:28 2023 GMT
Subject: CN=DF2D26636C34C13AD965EB90DB5FA3B81D075A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:bf:29:1a:27:ba:40:31:bc:de:92:d3:aa:
36:47:9e:9a:2c:b5:c3:af:a0:37:ca:bd:d0:4c:4f:
80:22:c8:77:a1:e6:5a:6b:c3:80:72:32:30:55:50:
29:ed:7b:4a:2c:3f:fe:b6:14:a8:9c:43:10:5a:54:
a0:50:ad:d0:23:69:65:81:c6:d1:85:61:c4:18:27:
0e:6d:79:11:1c:77:31:81:1a:5f:89:53:44:2c:92:
1b:2e:3a:1a:5f:ba:f3:18:65:44:f0:b3:3c:80:95:
53:a8:a2:6f:51:dd:d3:56:50:01:3c:80:ad:6d:27:
53:ec:72:4f:7b:0a:fb:58:3a:92:eb:e1:b4:19:14:
00:fe:0a:90:69:f0:95:9f:79:44:45:b0:42:6d:f6:
60:cb:5e:d1:96:fa:63:54:a3:23:84:f8:7e:f0:07:
1a:2b:b5:fb:9d:4b:5c:da:cd:47:27:82:75:43:27:
93:b8:ee:4b:87:2f:16:66:ad:ac:72:1c:a0:22:c8:
96:70:cb:b0:4b:b0:44:fa:6d:b8:38:eb:08:ee:da:
cc:85:ec:1e:72:4a:3c:37:3b:b5:4d:ee:49:3b:52:
eb:cb:5d:fe:88:6d:2a:c9:7c:14:6c:bc:bb:be:d3:
bb:15:62:2c:62:66:ef:ac:d6:e9:27:82:04:86:96:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:26:63:6C:34:C1:3A:D9:65:EB:90:DB:5F:A3:B8:1D:07:5A:1B
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3233382e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.238.0/24
Signature Algorithm: sha256WithRSAEncryption
15:96:72:94:c3:89:4e:7d:c8:c4:93:ff:41:12:2d:e2:17:fa:
94:5a:36:74:64:1a:12:f1:65:06:87:cd:a6:12:70:e7:2a:de:
f4:a7:3c:03:89:cd:95:63:3b:8b:0d:4d:0a:7e:7e:fe:74:1a:
f2:4d:a1:89:d5:97:5f:0e:ac:9c:38:e4:37:8b:b6:9f:66:2d:
ab:45:a7:08:62:6c:ca:bc:2d:2e:e0:40:be:95:6d:b4:42:b2:
f4:b8:4d:45:14:9b:20:5a:a8:67:95:94:00:f9:de:df:91:93:
24:d6:6f:37:9f:fe:01:0f:6f:91:1c:9f:d2:9b:3e:a8:99:9e:
75:91:61:77:2f:e8:a2:11:de:78:51:14:02:03:94:1d:10:64:
cd:7a:68:8b:39:df:61:9a:26:b2:08:3d:57:0c:60:bd:31:69:
32:03:d1:8e:9e:77:55:3c:c0:06:5f:d8:ac:d0:9a:4f:41:46:
a6:05:5b:1b:57:c8:be:86:f9:81:fb:ce:bc:42:00:88:4b:8d:
ed:94:ee:74:a9:19:cd:6f:c1:73:c1:d2:48:2e:03:0c:fd:e9:
31:6c:2b:63:10:60:e2:e4:dd:5e:20:00:93:63:6a:f9:1e:3e:
09:84:48:5c:4d:a7:a4:01:dd:98:13:c6:f5:ba:e1:72:da:0c:
2e:8d:0e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org