Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20323030353134.roa
File: 3130332e3230382e38342e302f32342d3234203d3e20323030353134.roa (raw, json)
Hash identifier: MIJm+GSDbF/o1Ytw8cyjNUHKeN3TnHWtar/R2b1j370=
Subject key identifier: B5:53:07:69:1C:39:FB:03:1F:83:14:84:2B:54:AA:0D:C1:D5:4F:4C
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 7877B3178F995586D78896EE2D29DD6F5047DDFD
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20323030353134.roa
Signing time: Thu 01 Jun 2023 13:47:07 +0000
ROA not before: Thu 01 Jun 2023 13:42:07 +0000
ROA not after: Thu 30 May 2024 13:47:07 +0000
asID: 200514
IP address blocks: 103.208.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:77:b3:17:8f:99:55:86:d7:88:96:ee:2d:29:dd:6f:50:47:dd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jun 1 13:42:07 2023 GMT
Not After : May 30 13:47:07 2024 GMT
Subject: CN=B55307691C39FB031F8314842B54AA0DC1D54F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:2c:51:2e:37:80:fa:69:ad:ef:f2:a5:d3:
6b:eb:00:3c:6f:c5:64:31:dd:48:64:70:07:ca:4f:
60:66:3c:4b:92:43:07:da:25:c3:86:d1:5c:52:fa:
45:6c:76:9e:d9:4a:28:8d:40:4e:ec:4c:42:a0:9c:
3c:13:95:25:95:62:26:98:d9:b8:ef:cc:1d:5e:a0:
c2:28:45:27:ed:98:08:00:21:e7:b0:65:f5:32:61:
2b:a4:ff:3c:c5:77:ff:ef:47:27:14:81:fe:60:cd:
4f:2b:cd:d9:a2:9a:25:59:e1:4a:35:dd:fb:62:a6:
5e:a2:85:72:ea:43:c5:87:24:3d:64:c4:9d:ba:5d:
c1:73:4d:1e:8a:d8:df:5e:9b:a9:36:c4:82:f5:dd:
07:ff:99:5e:d4:85:69:a6:02:35:91:c3:32:12:7e:
35:0e:11:5d:a1:f1:80:68:d3:a1:a5:5e:b5:38:7e:
7d:cd:6d:71:8d:93:04:ca:e4:88:33:72:29:c8:7e:
ba:0a:a6:0f:c2:87:a4:0c:20:68:ff:fd:ed:76:43:
c7:0d:75:0c:18:01:94:0e:c3:39:f3:38:e9:9f:bb:
99:0b:83:29:1a:33:75:1e:2b:19:93:01:d5:92:5f:
c3:26:42:c0:0e:ea:46:5c:d8:7b:f3:60:b3:58:85:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:53:07:69:1C:39:FB:03:1F:83:14:84:2B:54:AA:0D:C1:D5:4F:4C
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38342e302f32342d3234203d3e20323030353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.208.84.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f8:73:c2:70:21:a7:1a:75:66:5e:02:97:f4:51:a7:c6:0c:
6a:8f:c1:29:1f:9c:a9:5c:fc:8d:7e:7c:aa:57:79:cc:3d:05:
c2:8c:de:0f:55:1a:1d:c1:d6:d8:cf:90:16:c0:b5:dd:0d:a9:
18:be:9f:e6:f0:4d:9f:c5:3c:be:f9:63:6e:49:33:7b:28:0d:
6a:0b:b0:cd:8a:53:cb:21:67:c3:fa:64:4a:08:81:34:2a:c9:
43:4e:3b:c1:08:2d:c0:86:74:79:fb:06:ed:5d:52:87:c0:82:
12:f4:61:b8:18:6e:c1:10:9d:03:90:fc:d9:57:b4:3c:3c:70:
36:54:18:b0:f7:6d:31:2e:9a:e2:63:2d:d1:5b:cd:09:6a:11:
5c:03:39:4c:da:e8:24:f5:71:03:c9:1f:24:9d:3f:1a:39:9d:
47:d9:c7:af:49:29:b3:4e:73:1f:b1:4f:23:c9:da:d5:8c:8a:
d9:f4:82:11:27:95:20:23:ff:84:77:14:fd:16:6d:71:ca:31:
b9:28:99:45:39:b8:d3:ea:3e:91:03:75:54:a5:ce:4d:7e:33:
47:6c:d7:22:64:cc:da:65:96:07:86:21:18:e2:90:84:fb:e4:
b2:da:50:81:fc:a9:63:5e:ae:6d:d0:61:9d:9e:21:05:10:a9:
55:c6:e4:3c
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUeHezF4+ZVYbXiJbuLSndb1BH3f0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMDYwMTEzNDIwN1oX
DTI0MDUzMDEzNDcwN1owMzExMC8GA1UEAxMoQjU1MzA3NjkxQzM5RkIwMzFGODMx
NDg0MkI1NEFBMERDMUQ1NEY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKq5LFEuN4D6aa3v8qXTa+sAPG/FZDHdSGRwB8pPYGY8S5JDB9olw4bRXFL6
RWx2ntlKKI1ATuxMQqCcPBOVJZViJpjZuO/MHV6gwihFJ+2YCAAh57Bl9TJhK6T/
PMV3/+9HJxSB/mDNTyvN2aKaJVnhSjXd+2KmXqKFcupDxYckPWTEnbpdwXNNHorY
316bqTbEgvXdB/+ZXtSFaaYCNZHDMhJ+NQ4RXaHxgGjToaVetTh+fc1tcY2TBMrk
iDNyKch+ugqmD8KHpAwgaP/97XZDxw11DBgBlA7DOfM46Z+7mQuDKRozdR4rGZMB
1ZJfwyZCwA7qRlzYe/Ngs1iF5aUCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBS1Uwdp
HDn7Ax+DFIQrVKoNwdVPTDAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzIzMDM4MmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzMDMwMzUzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9BUMA0GCSqGSIb3DQEBCwUAA4IBAQBw
+HPCcCGnGnVmXgKX9FGnxgxqj8EpH5ypXPyNfnyqV3nMPQXCjN4PVRodwdbYz5AW
wLXdDakYvp/m8E2fxTy++WNuSTN7KA1qC7DNilPLIWfD+mRKCIE0KslDTjvBCC3A
hnR5+wbtXVKHwIIS9GG4GG7BEJ0DkPzZV7Q8PHA2VBiw920xLpriYy3RW80JahFc
AzlM2ugk9XEDyR8knT8aOZ1H2cevSSmzTnMfsU8jydrVjIrZ9IIRJ5UgI/+EdxT9
Fm1xyjG5KJlFObjT6j6RA3VUpc5NfjNHbNciZMzaZZYHhiEY4pCE++Sy2lCB/Klj
Xq5t0GGdniEFEKlVxuQ8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org