Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231312e302f32342d3234203d3e20383334.roa
File: 3130342e3235342e3231312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 2cboqZpvIaEwy3YXEj9GpNJBxTUfUo2Npzh8+Y5UWqM=
Subject key identifier: FD:9B:FE:D1:F5:FF:2F:08:0D:8C:74:BA:AC:A3:48:99:60:FA:FB:09
Certificate issuer: /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial: 18368CC9E2A66A7DBB83C5E67FD4FE4F9C616334
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231312e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Oct 2023 08:30:10 +0000
ROA not before: Thu 19 Oct 2023 08:25:10 +0000
ROA not after: Thu 17 Oct 2024 08:30:10 +0000
asID: 834
IP address blocks: 104.254.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:36:8c:c9:e2:a6:6a:7d:bb:83:c5:e6:7f:d4:fe:4f:9c:61:63:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Validity
Not Before: Oct 19 08:25:10 2023 GMT
Not After : Oct 17 08:30:10 2024 GMT
Subject: CN=FD9BFED1F5FF2F080D8C74BAACA3489960FAFB09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:1a:f5:a6:3f:ce:5f:83:1b:dc:05:37:59:
20:4f:76:d1:ab:11:75:3e:d0:9c:fc:af:61:37:95:
e3:b0:2d:74:89:5b:a8:c3:cc:3e:6d:f2:57:54:00:
b3:e7:44:b1:e4:db:4d:b1:c6:a0:3a:e2:2e:60:1d:
93:c3:fb:c7:89:a1:65:f6:2d:88:27:0e:14:e6:64:
db:a7:08:96:35:e1:84:8e:59:a5:63:7b:d9:52:0a:
88:2c:c8:a0:47:90:f3:96:2c:32:e1:b8:78:72:c9:
aa:d3:99:9a:5c:01:59:4f:32:e6:76:66:f9:62:04:
e9:15:5b:b1:32:19:48:59:9e:3b:da:14:af:58:65:
4f:c4:57:6c:cf:f0:ce:d4:74:ed:37:64:1a:30:d3:
c9:3c:4c:ea:71:cd:8f:9c:90:ce:a8:05:13:6c:40:
b1:fb:38:30:84:d8:70:46:d6:50:cc:aa:1d:82:f1:
c9:ae:c6:a3:1b:22:a7:88:0f:bf:65:79:68:5a:51:
77:bf:90:b8:d3:9e:80:0f:49:03:35:d1:d1:a6:11:
a6:5f:07:5c:04:0c:2e:78:ef:19:74:94:9b:7f:09:
49:af:02:2b:d8:cf:bd:de:bd:25:3d:de:90:52:57:
1e:79:e6:d5:29:52:46:6a:92:d3:f9:35:f0:17:6e:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9B:FE:D1:F5:FF:2F:08:0D:8C:74:BA:AC:A3:48:99:60:FA:FB:09
X509v3 Authority Key Identifier:
keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.211.0/24
Signature Algorithm: sha256WithRSAEncryption
86:13:17:99:bd:64:38:1e:5a:7d:e8:4a:6c:c4:09:0d:ae:56:
b3:56:29:95:77:14:84:25:0c:70:4a:63:8a:0d:95:ed:6c:d0:
e3:bf:0a:b9:40:26:ac:0f:e1:3d:08:c8:41:86:3f:4a:04:c0:
06:b8:86:d5:99:06:aa:f6:9b:f6:bd:48:08:9a:fd:50:dd:1b:
2f:c8:ce:32:8e:44:ad:fb:26:a8:cb:3f:14:8b:5e:a4:18:0d:
c5:0e:31:be:bb:0d:a3:39:25:dd:58:fd:6d:d6:96:6e:0f:9a:
30:40:59:5a:b0:82:af:44:9b:20:d1:8e:88:47:b7:a2:6f:ef:
3d:7d:84:d0:71:9b:50:1d:e3:b4:20:29:0c:43:d0:e8:5a:3d:
49:8b:d9:19:59:8d:2f:ca:58:84:da:96:bf:68:a5:85:a3:6b:
22:94:08:f3:b1:b4:52:00:96:3a:0a:c1:25:42:eb:3c:d1:8b:
31:c7:e0:de:27:fd:48:6d:07:8c:97:20:a9:35:ee:bd:3e:f4:
88:35:05:d0:6f:f4:c2:07:87:6a:fa:10:12:b4:ec:ee:70:c9:
a3:77:fe:ac:db:ee:1d:44:4a:14:b4:1e:2d:01:d4:19:16:38:
8b:45:54:37:af:67:aa:dc:9c:aa:03:e4:e3:21:46:e3:2a:f7:
77:cc:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:14 2025 by rpki-client