Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147287.roa
File: AS147287.roa (raw, json)
Hash identifier: U99/iVRwUWw3MtaIwKpDHEk4+txxTy1VxDxPezgKQ2U=
Subject key identifier: E3:B9:C7:A7:34:3F:C7:E3:72:9B:3F:0C:DC:2D:F8:C8:78:E3:71:8E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 74CE3D986950A9A3A650D87AF126576CCAE07A45
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147287.roa
Signing time: Sun 02 Apr 2023 00:00:12 +0000
ROA not before: Sat 01 Apr 2023 23:55:12 +0000
ROA not after: Sun 31 Mar 2024 00:00:12 +0000
asID: 147287
IP address blocks: 98.142.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ce:3d:98:69:50:a9:a3:a6:50:d8:7a:f1:26:57:6c:ca:e0:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 1 23:55:12 2023 GMT
Not After : Mar 31 00:00:12 2024 GMT
Subject: CN=E3B9C7A7343FC7E3729B3F0CDC2DF8C878E3718E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:66:44:d1:2e:e0:ff:1c:af:62:68:ce:2d:
81:f8:05:26:11:f5:67:8e:48:81:3f:26:75:d1:53:
41:1a:b6:a3:58:88:b0:15:ea:77:3e:2a:e1:8f:d0:
81:fe:8d:4f:4c:c8:3b:6b:5e:d7:e4:8f:bb:cb:24:
a3:ec:fc:b1:e1:e1:8f:09:d7:00:47:eb:6d:2e:30:
bc:a2:b7:10:a2:1c:31:85:82:01:f6:af:50:5c:09:
73:72:7d:f8:be:bb:eb:9c:5e:1c:ef:df:69:ad:67:
e3:fe:8c:39:22:ff:a5:09:c3:12:a2:eb:47:2e:c9:
c5:23:a6:25:5f:56:7f:7a:be:17:88:34:2a:2c:40:
ef:e8:fa:a8:4d:54:48:40:a6:19:e4:9e:5a:29:a0:
aa:76:15:32:8a:a3:70:68:d0:3b:e5:6a:96:40:ca:
c7:a6:27:4d:3f:06:bc:86:fc:bf:3b:cc:45:7b:64:
32:b3:9d:f8:78:5a:9b:57:ac:6b:99:0a:0c:1b:4c:
fb:d1:0a:1d:5b:e3:15:da:98:ff:c5:4e:ab:cc:c8:
73:50:2b:ea:2e:be:f3:0e:24:5c:6b:a0:ec:0a:d7:
26:ec:2c:46:cf:2b:27:74:4e:14:70:5b:25:cb:3c:
88:d7:f9:f3:9a:f4:60:d3:96:8b:8e:51:b6:6d:f0:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B9:C7:A7:34:3F:C7:E3:72:9B:3F:0C:DC:2D:F8:C8:78:E3:71:8E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.249.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bf:70:6b:3b:15:84:5c:a3:93:06:29:9b:25:fe:d2:0b:c4:
82:0c:db:ac:28:be:2d:8c:f4:e2:05:27:30:3b:0c:7d:e8:0f:
05:ce:fa:fe:a4:b2:a8:f1:06:d5:93:6c:b9:8d:63:57:07:89:
8a:f1:05:a0:66:b1:30:dd:ba:e1:77:27:bc:07:bb:ed:0c:66:
45:e0:00:5d:6e:a6:22:6e:70:b5:62:ef:ff:31:4b:23:ff:1f:
c5:70:08:8f:ce:a5:4b:6e:c4:ab:9c:80:b9:f4:c2:09:18:8b:
06:44:ad:36:9e:c2:9c:d5:c1:9a:6d:66:79:cb:ce:93:b0:d6:
60:3a:93:2e:18:d4:41:a3:4d:a7:aa:29:70:fb:dd:08:78:b0:
e5:c2:21:71:44:c0:08:59:11:a3:a3:18:b2:ed:73:69:51:0d:
43:c5:0b:4f:6f:17:38:fc:16:90:dc:c1:27:76:9a:e1:b5:b2:
8e:9e:51:1f:2e:9e:b0:ca:6e:00:6c:55:0b:71:07:06:97:52:
a1:a9:1d:20:72:63:c1:b5:0e:c3:c5:59:63:09:eb:2a:9f:15:
4e:95:47:28:f8:b6:56:98:24:66:ee:c2:af:eb:98:82:56:29:
b8:6d:99:c3:07:2f:63:34:8c:92:81:8c:5f:91:6b:ac:12:48:
90:4f:74:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org