Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203134333135.roa
File: 34352e34322e34342e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier: nzeLmnWF57kvW64sH2Zyxzz0Z5tY6iOQapvMGBbyIsQ=
Subject key identifier: 85:94:08:23:63:D9:9C:04:3F:AD:DA:7A:4E:B3:BB:08:AF:B3:1C:8F
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 562A95D62D859A850FD33A2C1745E7D304C3384C
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203134333135.roa
Signing time: Fri 24 Nov 2023 12:00:30 +0000
ROA not before: Fri 24 Nov 2023 11:55:30 +0000
ROA not after: Fri 22 Nov 2024 12:00:30 +0000
asID: 14315
IP address blocks: 45.42.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:2a:95:d6:2d:85:9a:85:0f:d3:3a:2c:17:45:e7:d3:04:c3:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Nov 24 11:55:30 2023 GMT
Not After : Nov 22 12:00:30 2024 GMT
Subject: CN=8594082363D99C043FADDA7A4EB3BB08AFB31C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:79:5d:46:5c:77:7d:90:d7:3f:df:e2:3f:
4e:67:b3:98:56:a4:09:f0:86:8d:49:5f:32:ef:33:
e5:a7:9e:1a:03:e3:3c:af:95:32:88:c3:7a:f7:e6:
81:09:ae:c5:24:e7:be:2f:e8:65:40:31:98:7a:31:
ac:1e:4f:7d:98:da:de:67:05:46:47:b6:dd:5b:b7:
1a:a0:ee:cc:dd:da:de:da:f8:14:7d:cc:11:d7:91:
21:78:16:4f:48:4a:55:6f:2e:1f:96:2d:cb:bd:e7:
12:6c:8f:07:6a:a3:3d:04:82:e3:b7:ec:96:95:a2:
37:47:64:ad:ba:72:70:14:3e:22:31:1e:36:d7:2b:
6f:eb:7a:88:86:6e:ff:ea:d6:14:96:e2:40:26:b5:
5f:4e:e8:ec:6a:e9:d1:13:46:b1:ed:02:a7:46:23:
09:b9:64:17:28:f3:45:2f:61:30:8e:6a:4c:3c:88:
9e:2b:d7:35:1b:55:b8:88:b9:d7:61:fa:24:24:97:
6e:25:f0:97:6a:ea:76:f7:00:ef:a3:a6:0d:6d:75:
c7:5e:6f:f7:33:c5:22:3e:8d:48:a7:52:1d:b8:4e:
9a:66:d8:73:a0:61:cd:89:e0:dd:cf:ae:63:85:9a:
1e:de:5e:83:90:a7:62:ee:b0:24:4d:67:d3:85:8c:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:94:08:23:63:D9:9C:04:3F:AD:DA:7A:4E:B3:BB:08:AF:B3:1C:8F
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203134333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.44.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:68:6e:51:c0:36:72:6a:e7:e4:20:75:60:b3:6e:21:a4:a3:
df:3a:34:03:f6:03:d6:ba:a0:72:c4:b9:87:2e:16:9d:4b:eb:
4e:eb:36:97:21:80:ba:80:80:b6:96:50:23:44:2e:8d:a4:de:
c2:53:cd:ce:17:53:cc:f7:d7:92:b6:d5:2c:e5:86:40:91:ac:
cd:06:01:be:4a:d9:04:ef:a7:89:2c:58:b2:f7:84:de:b3:af:
fd:78:d8:92:fa:90:31:bf:eb:62:0e:c3:12:7c:31:10:76:10:
40:32:5f:f8:89:63:e8:b0:6d:3e:71:23:22:aa:e7:52:31:b1:
62:83:04:30:e1:06:73:d0:0c:5e:68:2f:e4:90:87:8f:f1:bc:
64:ff:d5:87:f3:1d:01:fa:e0:6a:84:e6:2e:e5:5c:b9:99:74:
9d:fa:47:3a:4b:31:5e:9b:eb:c6:90:7b:95:2b:6b:7d:b6:35:
c8:71:78:d2:fa:4e:dd:7f:e1:be:04:89:f7:a0:99:f4:48:56:
17:4e:b1:6c:2f:6e:fa:d0:96:5b:ba:29:b9:3d:ff:ed:31:a9:
5a:d2:7b:fa:32:e9:58:ac:a6:fc:8f:01:6b:5e:3a:56:f4:23:
37:29:4f:79:c9:e1:66:a8:e6:01:a7:dc:a2:f7:d8:f5:08:b7:
9d:19:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:15 2025 by rpki-client