Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32342d3234203d3e20383334.roa
File: 36342e342e3137302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: +o5QWGZUo2QckdzJ+qM4vKSJ+NBzw3XrziALjvUE0GI=
Subject key identifier: 2C:7F:9F:4F:33:4F:D3:9B:40:A6:BD:F3:7D:BE:0B:32:A6:AD:E9:23
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 49AF6739CAE2965CAF4CDC636F53971AEF9A0D6D
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Aug 2023 00:00:07 +0000
ROA not before: Mon 31 Jul 2023 23:55:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:07 +0000
asID: 834
IP address blocks: 64.4.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:af:67:39:ca:e2:96:5c:af:4c:dc:63:6f:53:97:1a:ef:9a:0d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Jul 31 23:55:07 2023 GMT
Not After : Jul 30 00:00:07 2024 GMT
Subject: CN=2C7F9F4F334FD39B40A6BDF37DBE0B32A6ADE923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:68:11:2f:66:d0:45:05:cd:b7:03:b4:40:
5a:86:b3:42:62:4e:af:20:8f:55:56:6e:e3:f3:69:
a7:5b:38:30:5d:56:41:fe:d3:94:26:3a:03:8e:95:
4e:c1:9f:7c:35:9d:21:d7:92:90:4b:67:5b:d4:b2:
36:78:4a:b4:21:8d:57:bd:cc:19:da:58:9b:54:45:
ff:85:e3:9a:b8:d9:e1:02:97:37:f0:c7:c9:38:fc:
26:89:e0:77:86:d1:d7:48:df:39:6a:c9:be:be:9a:
10:5c:63:eb:60:2f:62:30:c3:c1:26:50:9b:2b:71:
47:72:6c:cd:ba:b7:60:c7:7c:b6:08:bc:91:ae:d6:
18:05:cd:b3:52:8b:fd:f4:f9:0c:b0:33:5f:57:a4:
f4:dd:01:04:2c:f5:12:27:70:e0:87:4b:7f:d5:72:
5d:ff:ef:74:27:b9:91:1d:c0:8f:c4:08:55:2b:07:
38:d9:a5:68:87:68:f4:5d:6a:d5:73:f0:03:58:63:
96:f4:ff:81:eb:ed:df:da:e6:a8:d9:de:99:9c:ee:
28:fe:84:8f:6d:20:a6:53:6d:9b:72:5a:3c:cf:96:
61:0d:d7:26:66:94:ee:d0:1c:8b:31:3f:f3:82:0b:
fd:07:32:68:f4:a2:cf:d0:e4:a5:a9:a2:12:9d:97:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:9F:4F:33:4F:D3:9B:40:A6:BD:F3:7D:BE:0B:32:A6:AD:E9:23
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3137302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.4.170.0/24
Signature Algorithm: sha256WithRSAEncryption
22:91:72:93:b6:ff:ec:df:89:5e:23:b2:27:e0:aa:92:07:4a:
e0:1e:8d:62:75:c0:0c:72:46:f0:e1:7d:54:bb:ce:e6:e0:47:
49:a9:eb:88:9e:d7:71:78:51:17:7b:32:6c:c1:49:e8:b7:c1:
d2:d0:cb:b3:58:73:33:a8:8a:7c:a0:ab:a9:9f:7c:32:d5:76:
e2:d7:74:98:b4:89:90:08:0e:59:f1:a5:9a:75:76:49:6c:1e:
4f:3a:32:82:37:9f:e6:6c:c3:a8:03:22:20:c6:47:32:17:35:
33:82:17:00:ed:1b:af:78:24:b0:b8:35:99:32:ca:ed:26:03:
0b:4a:eb:0c:1e:d9:87:e0:77:df:83:e8:45:04:16:04:82:e2:
5b:54:6a:07:a0:ce:73:ee:50:3d:10:5a:09:5e:22:e5:de:60:
45:93:4f:df:1b:d0:22:52:10:5c:43:99:0c:b7:8e:25:79:05:
ca:d0:36:e8:e1:8e:e7:ce:e4:df:1f:d3:95:5d:8b:e4:95:7a:
58:84:83:98:42:d4:56:e7:5c:3a:db:9b:fc:a7:59:82:ba:8b:
bf:3a:1a:6a:52:39:ec:0d:8d:ed:94:d1:0d:f6:b5:a9:ba:fc:
8c:0f:31:a9:f2:f0:09:22:b4:62:97:57:05:3d:ed:cd:15:b1:
10:bf:e0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:02:07 2025 by rpki-client