Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210703.roa
File: AS210703.roa (raw, json)
Hash identifier: cuIdeBLfs1kVLYtlAs0afl9Qd2oUnVpT9JmcGoxLk9Q=
Subject key identifier: 80:75:86:EF:E0:5F:81:54:18:11:97:62:C6:32:09:E0:4D:7B:41:2A
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 73F7E02B5C3B2256EB2F1B3C3FA010B17FBCCD40
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210703.roa
Signing time: Sun 12 Mar 2023 10:00:11 +0000
ROA not before: Sun 12 Mar 2023 09:55:11 +0000
ROA not after: Sun 10 Mar 2024 10:00:11 +0000
asID: 210703
IP address blocks: 98.142.243.0/24 maxlen: 24
104.234.150.0/24 maxlen: 24
104.234.154.0/24 maxlen: 24
104.234.185.0/24 maxlen: 24
104.234.202.0/24 maxlen: 24
104.234.203.0/24 maxlen: 24
104.234.207.0/24 maxlen: 24
104.234.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f7:e0:2b:5c:3b:22:56:eb:2f:1b:3c:3f:a0:10:b1:7f:bc:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 12 09:55:11 2023 GMT
Not After : Mar 10 10:00:11 2024 GMT
Subject: CN=807586EFE05F815418119762C63209E04D7B412A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:70:92:50:3d:44:5c:62:50:57:14:44:79:
bb:36:de:ef:b0:8c:ca:5b:30:45:ff:dd:de:f6:ea:
bd:9f:67:a0:4c:9a:2a:54:ed:fd:6c:a2:82:0f:4e:
a0:ac:02:9f:95:06:a0:73:fc:bd:d7:e1:5f:4e:98:
b4:13:76:b7:1b:69:73:61:29:81:6b:18:76:69:44:
f2:b4:54:56:80:cb:5e:6a:f9:68:5c:9c:d7:ff:9f:
1c:d1:79:fd:ee:97:b3:fb:8c:6b:8d:37:71:a4:f9:
35:ea:01:e0:2a:88:42:0d:a9:26:45:9f:ab:a2:00:
2e:c1:98:a0:10:97:7f:7e:ac:56:d8:1a:b3:de:d7:
a3:c9:6a:8e:94:b0:25:ab:2b:32:e6:45:9a:96:54:
fc:cd:93:47:d2:ac:f5:a6:c3:0d:50:da:21:29:7c:
a9:ba:f5:72:25:74:10:cc:85:58:76:7b:0a:f4:17:
76:8d:75:d6:15:4a:8d:14:19:1c:7a:50:a5:53:d5:
9a:b5:6f:90:dd:00:f3:b2:3e:b0:55:2f:66:9a:7d:
85:46:36:af:f2:30:e7:0c:ea:13:02:4a:2d:3a:3e:
ca:23:b3:7b:d7:7e:2c:63:a3:dd:4f:fb:38:dd:90:
77:d2:f4:1b:67:5c:29:c0:07:7d:53:db:5a:75:40:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:75:86:EF:E0:5F:81:54:18:11:97:62:C6:32:09:E0:4D:7B:41:2A
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.243.0/24
104.234.150.0/24
104.234.154.0/24
104.234.185.0/24
104.234.202.0/23
104.234.207.0/24
104.234.211.0/24
Signature Algorithm: sha256WithRSAEncryption
88:55:7c:ad:89:60:d3:aa:cf:92:05:6a:f9:0a:8d:a7:ff:cf:
50:2c:00:6a:5d:00:e9:bc:ef:c4:53:4f:21:c9:0a:ac:63:ca:
6d:ca:ef:2e:64:2a:35:41:96:11:d9:b7:c1:0e:9d:6e:bb:21:
9b:be:18:9d:52:69:78:b3:07:db:8a:20:37:35:6f:eb:ef:f2:
c2:df:ee:30:d0:b6:59:f1:5f:c1:2d:a9:70:77:af:33:dd:70:
50:cd:3a:eb:d0:64:d0:c2:6d:71:de:7a:4e:4b:18:92:dd:74:
5a:43:4c:86:8e:7c:f7:1d:00:d0:c6:3b:99:43:28:bd:56:6a:
46:f9:0e:1d:07:1f:90:a8:fc:ec:88:55:22:4d:d1:d0:8f:dd:
9b:a8:51:73:86:86:15:67:c9:6a:91:48:db:69:28:53:8e:65:
53:37:73:d4:27:24:7f:aa:99:96:62:7c:54:12:03:48:5e:49:
5c:f3:42:5a:a3:5c:64:06:27:c1:04:a0:62:b4:f7:5a:9a:fd:
dd:ea:65:52:85:40:2c:ae:97:1b:48:bb:79:b7:4f:19:71:51:
ff:03:31:54:9c:e1:b3:4a:ca:39:1f:59:d1:ea:63:a3:2a:0d:
9d:d9:3c:bf:66:5c:72:dc:48:b4:13:d1:7f:0e:0f:a6:0c:d8:
d1:8a:e1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org