Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa
File: 3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa (raw, json)
Hash identifier: 2y41w0NKGXceoFO3FiHjoubg3g8yGZ1jK0tJBfawlu0=
Subject key identifier: 73:39:CF:42:54:3E:71:BC:99:BC:28:C1:1E:D8:E7:6A:4D:AD:24:25
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 5A3C2A2A1E15A19270D7A67C5EA8B5F52402747E
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa
Signing time: Mon 16 Jan 2023 18:53:01 +0000
ROA not before: Mon 16 Jan 2023 18:48:01 +0000
ROA not after: Mon 15 Jan 2024 18:53:01 +0000
asID: 203458
IP address blocks: 103.68.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:3c:2a:2a:1e:15:a1:92:70:d7:a6:7c:5e:a8:b5:f5:24:02:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Validity
Not Before: Jan 16 18:48:01 2023 GMT
Not After : Jan 15 18:53:01 2024 GMT
Subject: CN=7339CF42543E71BC99BC28C11ED8E76A4DAD2425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:9b:9b:7d:7e:49:6c:0c:3a:72:f1:99:ca:
b1:bf:02:c7:0f:13:ac:c7:9c:47:24:73:de:4e:ba:
c2:05:c9:8f:17:84:7c:51:8a:42:00:d1:72:be:3a:
f7:90:78:49:66:56:1e:2b:bb:52:20:80:4d:76:f7:
d2:80:7e:02:91:12:34:3f:28:2e:57:3f:a9:1a:0f:
28:32:dd:dc:58:7c:17:63:34:0b:51:a3:35:9d:dc:
4e:e8:2d:c5:85:1d:68:dd:8c:5d:ad:7b:0f:5c:d1:
0f:2e:ae:75:76:57:12:f9:52:58:dd:e5:1a:5c:58:
5c:3b:02:c0:37:33:a4:cd:88:46:a0:96:aa:6e:3a:
2c:ae:11:77:59:96:f7:86:8f:1c:b3:72:9b:4d:2d:
25:85:02:f0:10:8f:d9:1f:ab:25:be:cc:3c:cc:6e:
54:8d:2b:9e:61:67:33:dc:6d:29:3a:8a:95:8e:55:
7b:36:32:e8:83:e9:c1:29:54:15:9c:83:95:1d:55:
e6:9a:4d:79:ac:ae:16:bb:15:3c:86:3b:15:c5:67:
ef:a5:99:df:94:e1:53:b7:cd:4e:c4:c9:e9:72:bc:
2f:56:f8:6b:3d:e6:dc:df:9c:16:5f:c5:e6:a8:2a:
dd:91:cb:ee:65:c0:f2:29:6f:de:fa:2c:e0:53:6e:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:CF:42:54:3E:71:BC:99:BC:28:C1:1E:D8:E7:6A:4D:AD:24:25
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e36382e3130392e302f32342d3234203d3e20323033343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.109.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a1:1f:03:81:c2:aa:ce:98:fd:27:80:40:85:13:2a:4f:f3:
48:00:a6:b7:dd:f2:32:ea:37:db:90:fe:05:73:8b:68:7e:93:
a8:82:1d:22:22:f0:3b:f5:87:c2:fe:c1:5c:35:0e:9f:d1:9f:
ee:11:ed:f8:40:9b:d7:ca:79:8d:e4:a1:a6:76:c5:91:53:28:
ff:07:d7:eb:82:52:d9:47:bc:76:a9:83:a9:b2:2a:1a:6e:ce:
61:0e:fc:8c:f9:9b:f7:b9:7a:61:6f:83:2a:76:01:b9:1c:02:
64:c6:76:47:71:b7:b6:ee:d5:f8:c1:2d:1e:81:0e:94:f7:6f:
9e:d2:07:3b:cd:cf:06:1e:f6:9c:ab:50:4c:fc:f9:b7:0c:aa:
16:af:bf:d9:de:4a:23:3e:85:54:16:20:36:7c:e5:6e:8b:94:
89:9e:7d:a4:bb:68:d6:06:28:ae:f3:ba:0b:a4:b7:02:a7:9c:
ec:84:03:0e:cd:c3:74:b9:8e:a5:27:5a:3c:13:72:01:5f:bd:
10:5d:3a:5c:9d:11:19:a9:52:bf:0f:ac:4e:56:7c:b9:68:0d:
db:2d:ab:20:33:18:b7:0c:b0:08:d6:7e:51:6b:98:4c:e8:63:
15:76:4f:ac:3e:e3:02:d1:49:bc:bb:03:10:52:e4:3b:e2:fd:
c3:f7:1f:55
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIUWjwqKh4VoZJw16Z8Xqi19SQCdH4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTIzMDExNjE4NDgwMVoX
DTI0MDExNTE4NTMwMVowMzExMC8GA1UEAxMoNzMzOUNGNDI1NDNFNzFCQzk5QkMy
OEMxMUVEOEU3NkE0REFEMjQyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKUkm5t9fklsDDpy8ZnKsb8Cxw8TrMecRyRz3k66wgXJjxeEfFGKQgDRcr46
95B4SWZWHiu7UiCATXb30oB+ApESND8oLlc/qRoPKDLd3Fh8F2M0C1GjNZ3cTugt
xYUdaN2MXa17D1zRDy6udXZXEvlSWN3lGlxYXDsCwDczpM2IRqCWqm46LK4Rd1mW
94aPHLNym00tJYUC8BCP2R+rJb7MPMxuVI0rnmFnM9xtKTqKlY5VezYy6IPpwSlU
FZyDlR1V5ppNeayuFrsVPIY7FcVn76WZ35ThU7fNTsTJ6XK8L1b4az3m3N+cFl/F
5qgq3ZHL7mXA8ilv3vos4FNux2sCAwEAAaOCAj4wggI6MB0GA1UdDgQWBBRzOc9C
VD5xvJm8KMEe2OdqTa0kJTAfBgNVHSMEGDAWgBRZU6wKZL+WVrRC08MjE0Ney0lf
aDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8zLzU5NTNBQzBBNjRCRjk2NTZCNDQyRDNDMzIzMTM0MzVFQ0I0
OTVGNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL1dWT3NDbVNfbGxhMFF0UERJeE5EWHN0SlgyZy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5
ZC8zLzMxMzAzMzJlMzYzODJlMzEzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzMDMzMzQzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0RtMA0GCSqGSIb3DQEBCwUAA4IBAQA2
oR8DgcKqzpj9J4BAhRMqT/NIAKa33fIy6jfbkP4Fc4tofpOogh0iIvA79YfC/sFc
NQ6f0Z/uEe34QJvXynmN5KGmdsWRUyj/B9frglLZR7x2qYOpsioabs5hDvyM+Zv3
uXphb4MqdgG5HAJkxnZHcbe27tX4wS0egQ6U92+e0gc7zc8GHvacq1BM/Pm3DKoW
r7/Z3kojPoVUFiA2fOVui5SJnn2ku2jWBiiu87oLpLcCp5zshAMOzcN0uY6lJ1o8
E3IBX70QXTpcnREZqVK/D6xOVny5aA3bLasgMxi3DLAI1n5Ra5hM6GMVdk+sPuMC
0Um8uwMQUuQ74v3D9x9V
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org