Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234332e302f32342d3234203d3e203439393939.roa
File: 3230392e3230302e3234332e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: lGQ63Zl2mtiffz/7HSbDwLtZUcYW6JrpB/meMbYtl00=
Subject key identifier: 5E:23:7C:85:64:EE:BB:39:B6:79:06:9A:48:E3:23:81:89:F6:12:71
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 68A80B4D77052DA1E477606BF69E7BBA54123EEB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234332e302f32342d3234203d3e203439393939.roa
Signing time: Wed 07 Dec 2022 22:16:22 +0000
ROA not before: Wed 07 Dec 2022 22:11:22 +0000
ROA not after: Wed 06 Dec 2023 22:16:22 +0000
asID: 49999
IP address blocks: 209.200.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a8:0b:4d:77:05:2d:a1:e4:77:60:6b:f6:9e:7b:ba:54:12:3e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 7 22:11:22 2022 GMT
Not After : Dec 6 22:16:22 2023 GMT
Subject: CN=5E237C8564EEBB39B679069A48E3238189F61271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:46:cc:88:ba:29:44:94:e3:36:eb:3b:75:
a4:19:69:70:21:e5:70:dd:7f:45:af:e6:f4:cd:32:
92:a7:77:f2:2e:3e:a2:11:8d:de:29:09:10:27:96:
a5:31:31:c2:30:e0:a1:44:12:6d:82:00:cf:16:58:
40:29:4b:35:4c:74:15:43:c1:97:8a:8d:87:ea:0c:
ea:a0:60:e0:88:9c:d3:91:41:f5:8b:6d:5a:5a:e8:
d1:01:95:da:01:ee:f5:c4:3d:35:c1:af:14:c4:eb:
d4:1b:de:58:eb:31:3d:d2:8b:0d:15:6c:99:24:88:
73:1d:8b:cd:e8:3b:a3:95:8b:6d:62:6d:49:0b:f6:
0e:ae:ca:f1:f5:fc:51:67:80:70:a1:33:83:38:f6:
44:80:a9:68:cf:89:eb:e6:6d:2a:b6:44:57:90:b6:
ef:02:38:42:5e:25:ac:e7:28:da:96:8d:cf:37:ff:
1e:32:df:5d:3c:5d:5b:1b:a9:08:b1:b8:36:e7:79:
d7:d1:28:ac:01:50:72:38:6f:fb:28:51:5f:5d:71:
af:bc:74:bc:96:90:a2:64:a8:0d:e6:82:2f:14:d8:
ca:ca:b3:30:08:6b:8e:bd:ac:b0:b6:56:40:94:b7:
bb:b3:07:0d:17:69:ad:7b:c6:57:8d:8a:be:38:b0:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:23:7C:85:64:EE:BB:39:B6:79:06:9A:48:E3:23:81:89:F6:12:71
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234332e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.243.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:05:17:8e:2f:56:8a:2e:09:bc:43:fc:c9:26:ba:7b:a7:95:
97:2f:02:01:32:f4:2c:0c:78:a6:52:2d:1a:22:d1:c1:f8:15:
c9:82:59:0c:2d:57:92:91:0f:cd:2a:c7:00:b1:23:9f:a2:51:
d4:66:ae:8f:19:ef:75:fc:31:d7:ba:90:c8:94:2e:b0:05:51:
ac:36:dd:83:3b:c0:65:fe:c5:62:55:b5:80:d2:2a:cf:fa:c1:
05:32:87:1f:97:14:c9:d6:1e:fd:ff:c3:14:64:ed:a2:b4:d5:
aa:3e:b8:d1:07:1a:80:36:50:5d:ee:a3:db:a3:70:55:c1:84:
c0:d3:98:38:00:e1:6f:f0:83:10:0c:9d:a5:96:e0:f8:72:2d:
76:6b:f2:f0:65:17:63:f8:8b:19:d5:a7:8e:72:e2:f0:ec:13:
8b:a3:3a:e6:a1:7a:b0:72:4c:dc:ea:81:1a:60:ad:0f:7e:88:
c8:ba:e6:fc:28:78:5c:85:fb:06:69:2b:47:3e:0b:2f:8a:ac:
f7:f3:8a:4c:06:8c:87:35:6f:29:88:18:81:e7:b0:df:e9:6a:
64:1a:84:8c:9e:3a:5f:52:1f:51:49:40:d4:d7:33:ac:44:a2:
fb:bb:86:18:0d:ce:b5:ef:a6:5a:3f:b3:94:61:d4:7f:0b:81:
23:ef:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org