Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa
File: AS207633.roa (raw, json)
Hash identifier: bD6pSxUmLPm3ugMfbdmG7zmkMlEafKot30F6JSmZPws=
Subject key identifier: A9:A0:F6:30:D8:FA:24:E0:26:F8:3F:21:7F:DA:72:33:AF:C6:B5:63
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 51FB9EB111F916B3408C0689992B1970B325A3FF
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa
Signing time: Fri 21 Apr 2023 15:30:05 +0000
ROA not before: Fri 21 Apr 2023 15:25:05 +0000
ROA not after: Fri 19 Apr 2024 15:30:05 +0000
asID: 207633
IP address blocks: 104.234.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:fb:9e:b1:11:f9:16:b3:40:8c:06:89:99:2b:19:70:b3:25:a3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 21 15:25:05 2023 GMT
Not After : Apr 19 15:30:05 2024 GMT
Subject: CN=A9A0F630D8FA24E026F83F217FDA7233AFC6B563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:ea:12:5c:b1:6a:9e:92:07:81:9a:2f:cd:
ba:70:77:f3:d8:a6:c0:4e:e4:45:9e:10:7c:06:87:
5a:3f:94:f2:cf:bb:38:60:5a:4e:c7:17:84:a5:85:
3c:f8:00:6a:bd:09:d9:f0:b6:13:1f:cf:4c:04:b6:
c5:9d:15:5f:5b:39:73:a2:cf:94:52:71:00:7d:86:
48:c8:54:42:c7:f3:b0:08:84:ba:7f:6b:65:75:17:
b3:24:8f:56:82:61:15:83:03:a7:fc:ac:de:91:1b:
4c:0e:17:b0:ea:99:47:46:af:f5:09:f0:3d:a2:2a:
4d:f6:6f:4e:68:f0:66:b3:f1:cd:ca:b8:8c:de:a8:
f0:d7:6e:36:02:e2:75:d4:18:b3:c9:6d:fc:a8:61:
4b:81:ad:7e:b2:c1:2e:12:b7:fc:91:11:47:82:e4:
27:6b:18:83:75:37:a9:d6:7b:2b:03:f0:3c:2d:67:
14:f6:a8:6d:b0:8c:c9:83:d4:aa:e1:fc:91:94:f1:
a1:8f:dc:9a:a3:6b:ce:23:8a:3a:74:4d:0f:17:7c:
06:c2:fd:ad:f4:af:14:a2:1f:4e:46:c7:55:b0:ed:
6e:22:c5:65:7b:be:a2:b4:a7:1b:fa:3c:16:7b:6a:
2f:79:74:1a:38:6c:fd:70:63:ee:a2:ea:ed:d4:62:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:F6:30:D8:FA:24:E0:26:F8:3F:21:7F:DA:72:33:AF:C6:B5:63
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS207633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.113.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d9:9d:92:2c:37:26:78:08:5e:c3:bf:2e:a0:19:44:52:6a:
b8:31:59:77:b8:d8:02:1d:21:0d:cd:76:e5:51:6a:03:78:dc:
c8:9f:32:a3:8f:cf:72:50:a2:14:19:67:cd:6e:be:da:22:84:
00:db:01:38:43:25:74:b0:a2:52:25:95:c0:c4:09:38:e4:15:
91:1e:fc:3d:14:cf:82:ad:0b:36:15:31:4d:6f:b4:02:72:be:
90:03:2e:26:41:9d:12:da:2a:f1:3e:36:71:b6:08:d8:25:6c:
10:bb:cd:73:88:20:02:bf:a8:29:53:e3:28:8b:ca:50:58:e7:
9f:6b:65:e6:91:b7:ca:e8:17:eb:31:d4:5b:ae:d2:a6:1c:4c:
ce:e1:a9:80:fa:dd:5f:54:35:56:fa:b6:86:a7:64:87:cb:27:
66:ed:87:e4:6f:4f:66:91:db:34:70:92:59:0d:9f:f7:75:ab:
73:3a:b6:43:74:65:55:09:4a:59:35:d3:44:2b:7d:9e:2e:ad:
e2:46:e3:ac:ff:65:d1:99:08:c8:4a:53:68:48:45:06:db:8c:
eb:a6:2d:e4:30:1e:95:5d:98:89:0e:18:32:ec:79:53:72:b5:
e6:c4:3f:a9:5f:9c:17:04:a2:6b:8c:66:6a:6f:cb:fc:d4:22:
ff:b0:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org