Route Origin Authorization
$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
File: 3230382e38352e382e302f32322d3234203d3e20323030343534.roa (raw, json)
Hash identifier: R51a4mo7+Q5Ou64DYeMr+NB1i5VnRxK7caBZjyyykUA=
Subject key identifier: D6:B7:A9:6D:E4:C3:DA:E4:60:0E:70:3E:2F:01:C9:D0:F9:8E:F8:28
Certificate issuer: /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial: 596D767BF5FBC90DF82F5ADB98C66B0B53577ABE
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
Signing time: Mon 17 Aug 2026 22:48:10 +0000
ROA not before: Mon 17 Aug 2026 22:43:10 +0000
ROA not after: Mon 16 Aug 2027 22:48:10 +0000
asID: 200454
IP address blocks: 208.85.8.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6d:76:7b:f5:fb:c9:0d:f8:2f:5a:db:98:c6:6b:0b:53:57:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Validity
Not Before: Aug 17 22:43:10 2026 GMT
Not After : Aug 16 22:48:10 2027 GMT
Subject: CN=D6B7A96DE4C3DAE4600E703E2F01C9D0F98EF828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:00:d2:03:00:4f:ac:0d:06:ac:6d:ee:66:
bd:29:e2:ec:f7:a0:9f:e9:ec:cd:6c:06:aa:61:c6:
08:0d:7b:59:6d:3d:b2:13:ba:a3:47:8f:05:9a:59:
b8:77:87:a6:46:3a:6e:4c:c1:ca:25:ec:32:5a:36:
16:64:2c:d1:2a:dc:a5:3a:da:d3:df:51:86:62:02:
36:ff:f7:9f:55:db:eb:ff:b0:30:8c:71:e9:d5:0e:
05:ad:6e:0a:0e:72:e0:4b:44:b5:02:e8:d8:23:33:
7e:e7:49:1c:48:e0:48:03:58:a0:e6:47:cd:09:34:
b3:45:6b:27:db:db:de:c7:8d:50:d2:e6:46:5d:a6:
50:eb:6a:59:ea:a0:e1:17:40:b5:d9:f2:03:61:99:
db:eb:06:b1:27:ed:16:d0:8c:e1:48:c8:99:5a:31:
48:89:aa:03:8b:a4:37:93:9a:97:17:cd:ac:81:c8:
54:99:b1:4d:e9:56:9e:91:1d:04:5a:cc:46:d7:ed:
12:6c:43:06:9d:ce:11:f4:40:72:4f:b0:e1:0b:cd:
96:7d:94:9a:51:7c:87:d1:0d:d2:a6:14:7e:92:9b:
91:ab:76:b5:88:53:bc:29:d1:4b:57:98:23:3c:c6:
f6:7e:cc:27:3b:6d:99:b9:19:51:2c:20:70:a3:6c:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B7:A9:6D:E4:C3:DA:E4:60:0E:70:3E:2F:01:C9:D0:F9:8E:F8:28
X509v3 Authority Key Identifier:
keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e382e302f32322d3234203d3e20323030343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.85.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:94:46:4a:16:b7:95:b7:b2:20:ed:6e:75:d8:e3:3e:37:0e:
24:66:ac:b4:c6:fb:96:d0:91:01:60:0b:8f:23:49:02:6b:0f:
bf:72:22:4a:27:50:e7:f0:aa:ce:11:21:72:24:a3:66:b8:e6:
d1:ea:ea:22:61:f5:89:9a:45:c3:5d:6c:a0:86:87:c7:81:f7:
22:7d:ad:00:60:dd:89:8b:a6:28:4c:02:55:a2:bd:8b:78:ff:
ea:73:7c:b0:a1:14:64:1e:90:15:86:cd:68:79:08:f2:30:3b:
8c:df:14:df:fd:48:5b:b8:40:2a:13:b0:f4:a8:a5:11:5d:82:
e8:b8:21:4f:4f:ad:f1:86:4e:48:78:e0:49:bc:5b:6b:0d:a2:
17:8f:fb:e2:8f:e5:58:cb:66:1e:c7:46:b8:b8:e0:79:83:b3:
ea:bb:12:16:d4:2e:a8:2e:2c:ad:b0:e2:5b:54:c2:a6:2c:3c:
60:90:61:d7:30:28:a4:1e:72:6b:64:25:d4:56:6a:99:c9:9a:
31:09:3b:8d:ed:93:34:0a:d0:09:48:ab:18:8a:0b:53:66:04:
c4:b1:2c:a9:d2:82:7f:2d:cd:e6:8f:56:24:11:3a:62:42:4f:
6f:28:e2:f3:3e:2c:a6:11:ac:51:b6:df:eb:73:93:d9:a1:72:
c7:9d:49:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:29:21 2026 by rpki-client