Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3130372e302f32342d3234203d3e203631313338.roa
File: 36372e3231302e3130372e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier: /5NYXTSYRdyRBpWbHACLUAFYfCTCEw1y1ywHZyyE1Iw=
Subject key identifier: 60:2B:1F:66:D8:AA:67:D8:07:A9:73:1B:28:A1:ED:B3:E0:E9:BB:82
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 40DB6A589866D166D81DDF135169780561EA7D38
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3130372e302f32342d3234203d3e203631313338.roa
Signing time: Fri 02 Dec 2022 17:49:28 +0000
ROA not before: Fri 02 Dec 2022 17:44:28 +0000
ROA not after: Fri 01 Dec 2023 17:49:28 +0000
asID: 61138
IP address blocks: 67.210.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:db:6a:58:98:66:d1:66:d8:1d:df:13:51:69:78:05:61:ea:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Dec 2 17:44:28 2022 GMT
Not After : Dec 1 17:49:28 2023 GMT
Subject: CN=602B1F66D8AA67D807A9731B28A1EDB3E0E9BB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:37:49:a8:4b:27:db:57:e0:2e:ce:27:bc:
20:76:c9:34:de:11:e3:97:f2:b2:10:e5:8c:0f:21:
a6:ba:50:84:05:cb:94:fc:5a:76:c3:46:f6:98:3d:
71:a0:c4:10:70:b6:bd:23:2c:a9:9f:5f:8b:14:3d:
3b:8b:7d:9f:92:07:68:d1:89:01:60:e9:5d:93:b2:
0d:81:98:b3:c2:48:ad:57:14:de:46:6a:92:ed:6b:
9c:d6:ef:13:3a:22:e6:f0:5b:f6:0a:0a:52:f3:40:
aa:f9:8a:1a:39:4e:2c:83:e0:f9:73:2d:81:de:29:
1c:4b:39:12:c3:45:70:ef:40:d2:37:b3:dd:3b:4c:
dc:05:85:c9:1b:b5:a5:ea:98:ec:cf:1e:06:81:59:
07:b2:7d:ee:2a:11:90:f8:3b:f4:dc:7b:15:21:d4:
46:1b:95:d2:94:91:5a:e5:70:64:90:ee:71:0b:e4:
7b:33:5e:6c:72:27:7b:14:b2:27:67:b0:5e:12:95:
b1:e2:3d:2d:6b:64:8e:5e:7e:10:e6:72:31:a8:35:
79:1a:09:38:84:3d:ab:a5:63:76:b6:4c:75:50:f5:
a9:cd:28:31:c5:3b:79:6a:39:91:de:91:ea:3b:9d:
b7:b8:45:80:1c:a1:ac:82:41:1a:90:eb:30:07:e0:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:1F:66:D8:AA:67:D8:07:A9:73:1B:28:A1:ED:B3:E0:E9:BB:82
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/36372e3231302e3130372e302f32342d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.107.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c2:3f:55:0d:6e:d8:d3:30:60:2a:76:69:e5:3d:5e:e1:58:
75:46:92:19:9d:cc:21:05:a0:5c:9f:a1:d6:6a:00:0f:77:64:
db:89:a4:45:ab:d8:38:13:24:ff:4c:5f:7e:74:2f:53:93:2e:
b5:4e:79:12:5b:71:ee:0f:fa:15:42:59:00:7e:79:da:be:34:
79:a5:57:cb:a4:ca:22:b1:bf:d7:4e:d7:00:ac:b1:7b:61:03:
75:45:e2:d0:c0:e8:35:2d:7e:2e:4c:6a:67:d7:7d:5c:48:aa:
b2:e4:9f:c4:53:51:11:3b:c1:74:b8:ce:1d:f0:31:3a:aa:bb:
f2:90:55:97:22:57:8f:c6:66:29:67:f4:aa:83:fd:66:90:a9:
08:c0:78:ee:e1:5b:cc:5b:f2:30:78:3d:96:20:b5:35:0b:ee:
9a:7b:4c:5b:08:89:96:09:74:6c:d0:4a:45:c5:f6:bf:62:a9:
44:f8:34:4b:3b:65:ab:60:c3:7b:83:42:b5:1a:43:42:65:e1:
39:ee:52:65:a5:e5:57:b4:1c:6e:08:ae:f5:9f:43:51:4c:c7:
97:31:1c:63:66:f5:bf:21:d8:c1:6e:41:1d:e5:e2:a0:18:40:
13:6d:f8:01:ca:91:90:6c:81:be:72:a2:c1:59:1e:27:e4:88:
13:9c:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org