Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS35758.roa
File: AS35758.roa (raw, json)
Hash identifier: dg8sm7WtSc5GLuzcw2pmYjUASuHjtMltsv7fG6I7Gko=
Subject key identifier: 0E:C5:4F:96:EB:FC:6E:8D:D9:92:72:BE:B8:2B:D9:7A:D0:79:3F:B1
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 61149696C0DDD3D98407FCB2D41447C04B146C69
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS35758.roa
Signing time: Thu 12 Jan 2023 14:23:26 +0000
ROA not before: Thu 12 Jan 2023 14:18:26 +0000
ROA not after: Thu 11 Jan 2024 14:23:26 +0000
asID: 35758
IP address blocks: 67.210.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:14:96:96:c0:dd:d3:d9:84:07:fc:b2:d4:14:47:c0:4b:14:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 12 14:18:26 2023 GMT
Not After : Jan 11 14:23:26 2024 GMT
Subject: CN=0EC54F96EBFC6E8DD99272BEB82BD97AD0793FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:f3:75:c8:f8:c6:a2:e3:e8:d3:4f:25:d2:
cd:93:f1:5b:9f:24:f5:71:71:b5:af:cf:94:df:ba:
34:24:ee:4f:5f:1e:b7:c6:57:87:fa:8e:53:e4:24:
c9:d7:48:3a:1e:c1:36:04:db:27:a0:02:c0:40:15:
fb:2a:ac:52:68:51:69:de:57:8c:65:ed:ac:99:48:
9e:d5:fa:7f:3a:c2:a1:e5:27:a1:d7:11:64:39:f0:
1a:b2:0c:18:ce:02:d2:a6:4f:96:f4:34:ce:c2:73:
69:5d:7d:a7:3a:d1:d5:7b:f0:d6:05:07:2d:3e:81:
05:65:84:e0:49:3e:7f:09:93:73:25:aa:6b:d2:69:
cc:f7:80:c0:5f:02:2b:13:c0:47:bd:cd:9c:a6:47:
58:dc:88:64:5e:fc:0a:57:a1:07:dc:db:88:0c:a7:
1b:9f:e8:d0:9c:af:55:a8:66:9a:31:af:bc:65:4a:
87:69:87:5a:04:1c:98:3e:d1:5f:cd:e0:65:3a:05:
d6:04:53:cd:c8:ff:31:4b:f0:77:e8:7f:e6:41:c2:
11:e6:5e:d8:6c:47:05:1f:5e:d3:b9:94:66:10:9d:
f3:8a:31:c9:ce:ec:ca:69:3f:2f:fe:57:ce:b9:20:
97:1e:40:e5:10:f7:b7:3e:e2:6b:93:ef:25:a0:7b:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:4F:96:EB:FC:6E:8D:D9:92:72:BE:B8:2B:D9:7A:D0:79:3F:B1
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS35758.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:25:e1:9d:2c:0d:d0:2b:0d:5d:47:d8:8b:04:37:59:8b:7f:
81:fe:3b:08:09:94:c5:71:3a:ef:76:f9:48:77:6a:b6:70:9f:
34:e9:b2:3e:5d:0a:78:78:f1:7b:8d:1e:6c:2e:99:4e:48:fa:
5f:81:80:ec:79:2d:98:ae:9d:85:e3:49:2f:1b:c2:45:f3:36:
17:54:41:8a:7d:83:4c:89:2b:58:37:60:55:d9:93:e0:f2:62:
48:f2:ac:38:24:35:ba:46:1b:bb:79:7d:4a:2f:5e:17:d6:96:
1b:4a:2e:61:a6:80:79:84:00:cd:5f:dd:19:b7:30:97:ff:1a:
a0:db:3c:f3:31:d2:52:6d:62:59:4b:89:30:a5:67:ab:36:f0:
9c:2f:8b:36:1b:97:d2:78:85:b4:b0:39:f0:4b:fd:59:1d:75:
65:50:7f:ac:1b:50:76:0a:00:8e:65:d3:61:70:0d:2d:4c:38:
a9:93:62:75:f3:cb:2b:e8:6f:81:6b:d6:11:45:9d:03:71:3f:
78:1c:4d:5b:3a:66:98:b2:ce:eb:e0:09:39:a4:53:75:ff:07:
f7:17:ea:18:c9:44:ee:0c:65:ff:08:29:a1:bc:bb:c8:c0:21:
e7:8b:52:6d:a9:37:c5:49:81:a2:a9:62:28:70:02:98:03:16:
84:0b:3d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org