Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e203432303535.roa
File: 3130342e3235342e3230392e302f32342d3234203d3e203432303535.roa (raw, json)
Hash identifier: dddcxIbKZSsUG0trWO94YqqLt7yDke/HxkP8XdkfBVc=
Subject key identifier: 58:7B:77:02:E9:EC:CC:C9:E6:5B:DA:CD:6C:41:B8:D4:9B:1A:AD:FE
Certificate issuer: /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial: 47389A4AB42995AE6E4F76102BF9D7F0AE2CB35E
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e203432303535.roa
Signing time: Tue 03 Oct 2023 17:49:02 +0000
ROA not before: Tue 03 Oct 2023 17:44:02 +0000
ROA not after: Tue 01 Oct 2024 17:49:02 +0000
asID: 42055
IP address blocks: 104.254.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:38:9a:4a:b4:29:95:ae:6e:4f:76:10:2b:f9:d7:f0:ae:2c:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Validity
Not Before: Oct 3 17:44:02 2023 GMT
Not After : Oct 1 17:49:02 2024 GMT
Subject: CN=587B7702E9ECCCC9E65BDACD6C41B8D49B1AADFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:e6:81:b6:bb:ad:4d:6a:c1:42:33:e9:40:
e1:ac:42:be:0b:2c:eb:2b:39:54:0c:75:d9:fb:5e:
76:34:7a:f8:d5:4e:06:3b:41:cf:64:34:94:de:2a:
99:8c:f4:aa:ce:52:bc:b5:f1:bf:ef:6b:70:a8:ee:
a5:0b:4b:f7:ad:fc:73:a3:c0:51:f5:7f:b4:55:16:
db:e2:bf:52:5a:ec:aa:a3:5d:8d:a4:6f:2f:46:67:
59:0c:b2:fe:ea:b2:f8:9b:e8:5c:c5:c1:b4:9f:fe:
04:7e:91:60:f5:46:88:7b:95:63:8d:94:50:15:6c:
f8:a9:18:08:15:22:fe:bb:56:63:49:89:7d:bf:6a:
41:98:f7:8e:f8:ab:03:50:2c:87:e9:d4:73:04:16:
f8:d0:de:0b:d4:e4:2e:4a:be:22:1a:75:92:95:7f:
8c:03:7f:6a:71:10:9a:81:6f:62:e9:f7:3d:68:b5:
d8:19:27:1a:df:43:51:64:06:4c:87:8b:2d:29:e8:
9c:3e:9f:8f:5a:e4:bc:75:a9:16:26:9d:a8:88:87:
82:6a:c6:d5:97:91:f0:2f:82:e7:ae:4b:62:27:79:
8a:d9:e8:bf:d5:e0:73:00:4e:18:b8:c4:fd:42:9c:
c8:d9:3c:2a:f7:f6:a2:3c:cb:3c:77:7d:ad:81:07:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7B:77:02:E9:EC:CC:C9:E6:5B:DA:CD:6C:41:B8:D4:9B:1A:AD:FE
X509v3 Authority Key Identifier:
keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e203432303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.209.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:df:e8:6e:6d:c2:00:6c:fc:70:6d:22:97:3f:a7:1a:6d:e6:
c2:98:e3:19:42:6b:36:45:81:bf:71:ce:29:49:be:ea:7b:92:
40:4e:81:21:cc:84:5c:b3:f8:80:85:dc:0b:f6:4d:31:7b:01:
b4:cc:b8:98:0d:01:a0:97:75:e4:1d:fe:71:5c:01:42:bf:61:
28:89:98:9a:24:f3:da:fe:81:81:30:10:ff:53:e9:7a:87:2c:
a3:0f:38:ea:97:30:0e:e0:17:d7:e7:1d:9a:b4:dc:6c:20:da:
0f:dd:22:05:01:10:ff:be:bf:9a:75:97:d2:a9:33:5d:7e:64:
b2:ed:e4:64:6a:93:7c:90:2b:ce:39:11:bc:56:50:98:c7:0e:
93:ac:a4:63:c1:65:6c:97:7e:31:7d:8a:b6:eb:8c:3a:94:80:
94:5e:fd:c4:fc:e0:04:e8:5f:89:26:33:60:99:9b:38:da:bd:
d5:c6:15:13:6e:6e:8d:6e:49:fe:aa:3b:ac:5f:d3:0b:a0:3b:
d1:bf:98:18:6e:1e:03:27:96:c0:64:e1:e4:a0:70:04:7c:f5:
fc:37:24:f4:aa:36:08:29:58:c6:a8:25:cd:5c:73:5e:f8:54:
3b:d1:db:f1:e0:10:99:06:50:4e:53:04:40:80:cd:65:af:37:
bb:df:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:54 2025 by rpki-client