Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234352e302f32342d3234203d3e203631313338.roa
File: 3230392e3230302e3234352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: CV328KOpX66M/p9kkEbcbtFW0uArWE17B6Za4xVBjIs=
Subject key identifier: 6F:29:05:57:F5:A2:16:95:44:D6:7A:43:75:E5:73:0F:82:75:86:0D
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 41860286415732E459466A2A97F453E49B4ADA03
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234352e302f32342d3234203d3e203631313338.roa
Signing time: Fri 02 Dec 2022 04:10:36 +0000
ROA not before: Fri 02 Dec 2022 04:05:36 +0000
ROA not after: Fri 01 Dec 2023 04:10:36 +0000
asID: 61138
IP address blocks: 209.200.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:86:02:86:41:57:32:e4:59:46:6a:2a:97:f4:53:e4:9b:4a:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 2 04:05:36 2022 GMT
Not After : Dec 1 04:10:36 2023 GMT
Subject: CN=6F290557F5A2169544D67A4375E5730F8275860D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:f9:d8:5d:f7:2b:ca:87:fd:eb:74:3b:5c:
23:8e:e0:68:1a:c6:f9:28:b9:9c:90:36:e0:7b:8a:
9c:fc:20:7f:2f:fe:92:14:f5:bc:5e:13:34:24:e2:
28:f9:a8:82:92:c9:dd:33:2d:d7:15:62:f5:33:59:
21:7f:45:5c:6a:1d:fa:c1:37:19:87:bb:12:2d:71:
54:73:92:1c:b9:6d:d9:f1:ba:05:08:56:4a:93:61:
62:fc:50:46:04:35:cb:06:b2:13:6b:b3:8a:f7:0b:
46:50:0e:88:76:a7:9e:d7:83:46:78:72:71:57:ed:
05:f3:f7:6b:b5:67:20:db:72:7a:7f:05:f4:ce:7a:
1e:22:f5:9e:85:05:23:4a:12:95:e7:c5:56:dd:44:
80:b3:64:ca:57:0f:a7:2d:a6:29:53:10:80:7a:74:
14:1f:cf:01:e5:cd:7f:cf:df:b1:4b:8a:4b:e2:21:
50:60:c6:c8:fe:10:3b:01:02:75:8d:7a:c2:eb:ec:
c6:8c:86:32:0e:88:84:83:3b:49:9f:7c:11:b1:74:
7e:79:38:e8:dd:d0:0a:98:16:74:e0:77:f9:f0:e2:
92:24:32:4e:70:ec:d1:58:54:8b:a5:46:c5:c6:47:
e1:85:8b:83:18:06:0e:2a:53:0b:44:1f:0b:c5:55:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:05:57:F5:A2:16:95:44:D6:7A:43:75:E5:73:0F:82:75:86:0D
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/3230392e3230302e3234352e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b9:2d:ed:0d:d7:ce:ce:f6:dc:2f:c1:0d:cf:1f:29:2d:7a:
e9:e9:db:7d:87:f3:a4:ba:be:33:40:a8:ac:02:3c:c6:e2:68:
14:a4:58:66:5b:23:a5:c7:1c:e9:66:d7:48:cd:3e:91:2a:e6:
0b:94:34:1f:57:d9:de:61:41:0c:74:f1:64:71:e0:b9:5f:da:
90:34:48:19:30:50:0d:4f:cb:b3:bb:5c:70:17:cf:3f:c4:4e:
c2:62:c3:7d:eb:21:4e:b7:30:15:d2:99:96:96:a5:c0:69:49:
66:98:e9:8d:20:af:f0:b1:d9:20:30:dd:78:ed:e8:d9:58:14:
9a:51:78:5f:1f:83:8d:49:4a:ab:fd:71:1b:66:d7:28:6d:05:
1e:6c:c8:a9:02:50:ce:7b:ee:a7:b4:00:9b:76:75:71:50:a3:
82:12:b2:f0:e1:e2:2b:23:7a:19:9c:db:f9:f4:19:c4:0e:9f:
c9:05:04:c8:d1:09:ab:cd:b7:89:a1:cf:da:9b:be:83:6b:e0:
90:24:b0:ef:7a:ad:7e:13:fc:12:6d:2b:0d:12:12:60:02:0a:
19:ea:e1:04:5c:03:49:65:b3:a5:ff:c7:1f:92:80:76:b7:cf:
90:b9:5d:8f:23:1b:43:e5:37:dc:52:98:f6:3a:a4:b3:f2:89:
d1:3f:c0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org