Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa
File: AS3507.roa (raw, json)
Hash identifier: Xs4zzy8WpJqCExC/sk+b/SHi+Wh33/YAwSb+Ffwr//g=
Subject key identifier: C1:CF:08:18:56:A3:87:06:40:1D:1B:8E:D6:B2:58:AD:6B:45:BF:AE
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 30121AAD3D11919C862F2647996B73A1F1EC973D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa
Signing time: Tue 25 Apr 2023 11:34:02 +0000
ROA not before: Tue 25 Apr 2023 11:29:02 +0000
ROA not after: Tue 23 Apr 2024 11:34:02 +0000
asID: 3507
IP address blocks: 216.227.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:12:1a:ad:3d:11:91:9c:86:2f:26:47:99:6b:73:a1:f1:ec:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 25 11:29:02 2023 GMT
Not After : Apr 23 11:34:02 2024 GMT
Subject: CN=C1CF081856A38706401D1B8ED6B258AD6B45BFAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:d2:92:fb:be:72:c7:61:56:31:45:fe:8c:
be:f6:0f:e9:0f:7c:58:dd:73:94:62:56:e4:41:5e:
8e:66:32:7f:36:9a:2c:c9:d9:e1:10:07:c3:b0:6d:
f5:20:77:43:dd:88:af:2b:c9:53:14:87:3e:57:fc:
d6:27:da:4e:09:41:23:be:e8:7d:a8:81:19:c3:17:
b8:0a:54:2a:7f:17:9c:f9:27:ce:71:db:79:d4:71:
1e:f4:be:eb:e6:dc:d7:05:26:eb:9c:ca:67:32:08:
89:55:51:f1:81:5c:31:c4:72:bb:35:50:e6:e1:01:
59:a2:a6:19:cd:d7:5c:52:4d:64:c4:e1:03:1b:a4:
29:40:b7:f4:13:c9:c1:be:03:67:06:04:63:77:8d:
5f:92:e6:1d:1c:c2:ef:76:8f:8f:84:fe:4c:9a:78:
92:6f:9a:7a:23:5e:52:58:b6:dc:46:22:0d:77:e7:
3c:32:8c:d6:29:b7:c5:d8:ed:d0:aa:fd:38:8c:dd:
8d:ca:3d:1f:07:e2:cf:fc:76:a3:82:5c:63:e3:e0:
28:17:39:ac:08:a3:35:ea:e4:08:ff:d2:ec:95:e6:
60:8e:77:13:ec:6c:21:e5:41:54:14:1c:3c:3c:dc:
d6:37:63:d8:5f:59:50:a9:26:54:63:b4:4e:f5:2d:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:08:18:56:A3:87:06:40:1D:1B:8E:D6:B2:58:AD:6B:45:BF:AE
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.227.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6b:be:b3:2e:96:7e:ab:90:6b:f7:8c:65:ea:69:f4:34:2a:
89:6f:0a:78:b5:93:87:6a:0c:04:91:5f:c3:1f:ea:86:bc:5d:
85:6a:0d:40:25:58:e4:b4:26:ce:55:ff:99:86:d0:35:44:8e:
ba:ec:b8:9f:ff:a1:9d:2c:a3:fc:96:f1:55:4f:4b:db:46:2c:
00:5e:d3:72:83:31:94:5e:c7:d7:7f:79:6e:1f:bf:7d:55:4c:
24:46:72:5a:c8:91:8c:77:ba:f1:7f:6d:b0:d6:fe:f6:2d:22:
6a:4e:e6:9b:bf:e6:a5:85:8e:4c:9a:3d:bd:0c:ca:4d:1c:95:
86:27:c4:b5:5f:7e:66:fd:6c:70:96:34:d4:f6:42:7c:b4:7a:
f8:9c:64:37:f6:bb:8f:49:7b:32:f3:be:e1:5e:10:cd:1d:33:
d6:5a:5f:cc:32:60:f5:4c:d8:0d:79:1a:45:20:de:c2:ac:94:
9c:3d:9f:cc:de:aa:6d:60:4e:ea:e9:fb:4d:8d:ec:78:b6:0e:
72:ef:4b:2d:2f:76:71:d1:63:06:76:6e:35:9f:0e:f2:44:56:
3d:5f:33:d4:e6:89:e5:6f:46:98:bd:12:e7:86:52:fe:57:09:
4c:01:11:22:cf:90:07:ec:bd:40:f0:e3:0f:82:cd:7f:f0:7f:
27:5f:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org