Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23476.roa
File: AS23476.roa (raw, json)
Hash identifier: Yo2dMM76k3wW17u9duFs/NcJXcX0C8ZBWe8LM+TyX5Q=
Subject key identifier: 9C:3C:FA:72:01:64:AD:20:7C:DC:FE:5B:1D:26:74:11:A3:3A:6A:DB
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 652AD838064CC4049DFCD949B33977827FC0AA5A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23476.roa
Signing time: Tue 11 Apr 2023 15:14:48 +0000
ROA not before: Tue 11 Apr 2023 15:09:48 +0000
ROA not after: Tue 09 Apr 2024 15:14:48 +0000
asID: 23476
IP address blocks: 67.210.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:2a:d8:38:06:4c:c4:04:9d:fc:d9:49:b3:39:77:82:7f:c0:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 11 15:09:48 2023 GMT
Not After : Apr 9 15:14:48 2024 GMT
Subject: CN=9C3CFA720164AD207CDCFE5B1D267411A33A6ADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:c2:5a:a4:61:00:8e:d6:80:83:3e:13:3b:
73:a4:48:51:a9:6d:20:b6:a7:96:8b:24:52:c8:8d:
fb:47:70:80:74:d9:48:a5:30:a0:18:d1:96:be:3d:
21:d4:b9:4d:04:c8:b9:7f:39:0b:68:96:83:3d:67:
b3:29:db:1f:28:64:9e:bc:0f:94:7e:51:ea:98:d9:
58:1f:43:cf:52:43:6a:f1:da:1f:ae:28:b9:1f:dc:
46:af:7b:a6:1e:69:01:8b:a7:06:e2:e4:12:42:c5:
c7:e3:9a:44:3b:dc:9f:ea:02:54:2c:14:34:7e:a9:
99:e2:7d:e6:ef:46:ab:11:d1:41:26:e1:7e:88:ad:
94:2d:7f:27:e9:87:6a:52:56:44:c4:e3:ab:95:98:
79:04:84:e0:5f:05:77:e0:79:67:eb:22:b0:95:3c:
6d:4b:d1:51:73:62:21:c7:1f:65:cd:99:5d:90:99:
36:ef:d2:76:50:cf:3b:ac:6f:91:5a:b1:ca:ff:15:
cd:9b:a3:6a:16:1e:9f:2d:8c:e5:05:39:2a:97:c3:
9a:be:b5:1d:30:a6:fe:f1:a6:53:a2:b2:b0:a4:22:
74:de:5b:d3:6e:87:a5:6a:c6:c6:c4:33:f5:fc:62:
4b:a3:78:c4:5e:c0:0e:f4:39:7f:31:08:0b:00:3b:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3C:FA:72:01:64:AD:20:7C:DC:FE:5B:1D:26:74:11:A3:3A:6A:DB
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23476.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c2:e9:14:8b:86:25:fb:8a:1b:b2:48:7d:f9:b8:4f:d0:32:
26:06:80:30:ab:6c:96:15:21:86:9a:81:f7:63:f0:4f:6c:6d:
c2:de:6e:42:1d:17:48:5c:0f:bd:ff:5b:1e:59:a7:9b:fc:d2:
24:b3:33:db:8b:b3:db:7a:86:5a:5e:83:8a:2c:63:42:c5:fb:
c6:d9:26:12:6a:bc:63:fa:d0:20:a3:bd:fd:6b:72:fb:63:5d:
8e:ea:be:6b:7a:e0:fe:8a:e2:59:28:8c:e0:22:4d:ef:35:fe:
a9:66:dd:8a:55:55:5f:a4:9c:ea:71:f8:12:38:ee:34:0e:ed:
c4:fc:de:76:b0:bd:7d:02:f8:2f:9e:13:62:52:a5:e5:6f:1a:
83:3d:dd:a1:db:bc:4f:49:29:ad:fb:af:46:33:0b:5e:e3:71:
aa:b7:bb:7b:67:03:32:29:0e:57:16:7c:fe:e9:ec:c9:54:a9:
8c:83:14:ea:f1:de:23:7a:50:ed:5e:69:7b:db:54:76:00:4d:
fb:46:82:c4:bd:45:0b:e0:1c:f4:7d:4d:c5:4c:29:e4:6c:29:
97:2a:ee:d2:3b:98:da:e5:33:70:fd:91:59:b7:51:43:8c:fa:
32:37:8b:45:32:98:01:50:5a:1f:41:90:8e:51:7b:5f:43:32:
0b:f3:99:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org