Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa
File: 34352e34322e34372e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: XTMhnNeS8EnyQDGYQ+g+tHIB+qx+9vMPwtaAcnfVyWI=
Subject key identifier: D8:53:FB:31:63:F0:FE:BF:53:86:81:A9:40:12:45:A1:D8:3C:C5:25
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 7DA6CE9C2CE563AA08D7974A0552541542130A3E
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa
Signing time: Thu 12 Oct 2023 13:17:08 +0000
ROA not before: Thu 12 Oct 2023 13:12:08 +0000
ROA not after: Thu 10 Oct 2024 13:17:08 +0000
asID: 42055
IP address blocks: 45.42.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a6:ce:9c:2c:e5:63:aa:08:d7:97:4a:05:52:54:15:42:13:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Oct 12 13:12:08 2023 GMT
Not After : Oct 10 13:17:08 2024 GMT
Subject: CN=D853FB3163F0FEBF538681A9401245A1D83CC525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:eb:b8:c3:36:44:de:ef:8a:d2:41:c4:10:
b4:1c:73:4e:dc:29:2f:d6:6a:65:84:36:a4:e9:15:
a6:24:cb:77:8c:fc:81:1a:1c:89:57:f1:9e:e0:6a:
bb:53:51:c3:b6:4a:f8:1b:91:fe:3a:dc:89:52:6d:
14:0e:13:a8:83:b4:9f:9e:58:df:d3:06:b5:2f:eb:
72:04:51:47:a2:1e:04:57:f6:9e:8e:21:71:ef:67:
3b:4c:86:55:f1:54:21:f6:6e:db:dd:42:a5:c2:2c:
75:49:9b:fa:c4:1d:5a:a6:a3:72:62:72:f0:93:79:
a7:0c:b6:b8:f8:c6:02:2c:69:98:a9:47:95:5e:8c:
cd:5c:ff:f3:ae:71:08:56:58:06:54:1a:a1:fe:bd:
86:20:33:39:aa:1f:81:9f:c8:c1:1b:e7:cc:ae:27:
75:7f:3b:04:62:2e:c2:34:84:61:e6:97:e7:bb:dd:
68:79:f3:45:02:26:d0:9b:67:9b:97:d6:c0:d4:d8:
3e:a7:70:07:71:56:93:88:b7:58:df:b0:9b:93:52:
56:d2:2b:20:ff:dd:f4:32:f0:21:ac:2d:b9:16:78:
64:41:c2:cf:02:53:38:d5:71:85:33:37:fb:67:45:
fc:90:d2:2f:4d:c4:e2:c9:c0:47:84:45:b3:45:c9:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:53:FB:31:63:F0:FE:BF:53:86:81:A9:40:12:45:A1:D8:3C:C5:25
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.47.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:9c:2f:52:79:ba:f5:86:9f:25:62:64:f1:7a:3d:45:d3:
b8:94:70:a5:ab:a8:c8:f8:7d:38:a6:a0:7b:39:d5:01:82:65:
8e:bd:2b:69:46:a9:93:4b:82:f1:76:0d:54:b6:ff:87:a4:08:
ee:b8:6c:72:bc:92:95:4e:f4:90:0b:5f:2d:bc:31:a4:70:18:
5c:ee:f8:bd:31:64:6a:f5:20:b2:b4:9a:c5:25:53:ea:f9:6b:
6e:9b:b1:d6:62:17:97:a2:30:0a:86:cf:e1:ff:be:c8:24:37:
f4:8d:32:fd:cb:c9:76:68:f2:b6:fe:5c:bc:6e:4e:7e:f2:46:
cb:02:fd:41:09:62:a6:e2:5b:eb:a7:77:9f:54:ae:aa:29:d0:
0a:53:7a:a9:6b:43:9c:c1:99:1f:6b:7d:50:8e:9c:df:8a:a4:
13:ae:d2:ea:77:16:3f:c0:6f:9d:ed:25:9f:c1:8a:dd:b6:be:
38:2c:cc:f8:ed:08:9e:6a:a2:0e:00:69:01:03:71:98:a3:4a:
86:fc:e0:d7:71:98:a4:31:9e:f8:46:fd:b2:06:92:e2:30:e7:
be:68:ac:26:3d:0a:c4:c4:f8:5c:04:a1:0a:36:9b:b6:6e:4b:
e9:c8:81:2a:04:56:69:b8:bd:e5:81:ac:46:8b:24:b6:09:3a:
f8:84:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:20 2025 by rpki-client