Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa
File: AS212219.roa (raw, json)
Hash identifier: FLzIlO6WpPt0en3lZ9qS+UzzYZr6p7TWDYsjQj/RolA=
Subject key identifier: BA:CA:6E:DD:FA:10:DB:1C:5D:67:F7:81:38:3E:DF:FA:4A:16:8D:BB
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 43F34E16D52C2EA35A4CD098E8C8B79A3E994101
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa
Signing time: Wed 18 Jan 2023 17:16:44 +0000
ROA not before: Wed 18 Jan 2023 17:11:44 +0000
ROA not after: Wed 17 Jan 2024 17:16:44 +0000
asID: 212219
IP address blocks: 98.142.250.0/24 maxlen: 24
104.234.47.0/24 maxlen: 24
104.234.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f3:4e:16:d5:2c:2e:a3:5a:4c:d0:98:e8:c8:b7:9a:3e:99:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:44 2023 GMT
Not After : Jan 17 17:16:44 2024 GMT
Subject: CN=BACA6EDDFA10DB1C5D67F781383EDFFA4A168DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:a6:df:bf:ae:07:00:39:d3:fc:df:1b:92:
0b:63:b6:54:17:97:2f:19:55:b2:34:5d:a8:a5:e5:
9f:d6:34:0f:69:e7:20:ef:67:14:20:d6:4d:b5:80:
c1:62:36:b8:73:b4:59:34:d6:0f:7a:35:1a:b9:48:
7f:c8:e8:76:e2:25:aa:d5:91:cc:e5:4a:66:33:38:
47:08:6e:31:20:72:ac:9d:ce:ff:15:fc:9f:d5:e7:
9c:d1:6f:01:67:87:80:06:fa:96:08:67:3b:4b:9b:
80:9b:ff:6c:c6:f8:95:a3:0f:ae:85:33:d5:71:ac:
63:cd:b9:6f:8d:1d:24:0b:60:a4:69:39:34:7b:08:
64:6e:42:7c:6b:ca:27:cc:65:3f:de:70:e0:f1:2a:
e5:3a:00:e4:70:16:c1:86:96:f6:e3:b9:83:6f:1b:
ac:2d:46:06:40:bc:38:e6:71:5d:09:ad:e7:fe:3e:
82:d5:31:20:ed:c6:db:dc:c2:77:da:7b:36:f3:f5:
40:cd:0c:22:c8:cb:11:a4:e2:a5:9f:6f:35:98:a4:
11:a6:ff:30:c9:6d:e7:7b:62:b8:b1:7a:d3:99:b1:
d2:dc:e7:83:eb:d3:0c:8b:51:87:9f:87:06:a8:b5:
19:42:82:7f:06:88:23:87:78:33:be:4e:9c:03:9c:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:6E:DD:FA:10:DB:1C:5D:67:F7:81:38:3E:DF:FA:4A:16:8D:BB
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212219.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.250.0/24
104.234.47.0/24
104.234.116.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d4:d0:19:6f:62:10:d5:f6:d7:fa:54:9a:db:df:20:a6:b5:
3f:3d:32:a1:07:dd:9f:a9:aa:c8:25:6e:ca:15:0d:28:d3:f4:
65:bf:02:74:d4:09:14:6d:f3:20:16:fe:19:08:df:8b:c7:22:
64:3d:f2:f8:b9:bf:e1:1b:d8:87:0c:c5:0c:2b:7b:5d:13:85:
0b:6f:53:47:9d:75:66:dd:f1:7d:a8:9a:c4:2f:f6:da:ad:1c:
b6:a5:16:c7:39:a4:81:de:db:37:e7:1a:6c:0d:5e:99:bd:c8:
f8:e4:a1:79:ad:c7:56:ac:8b:c4:5a:39:75:fe:8b:7b:21:27:
1e:07:00:66:60:d4:24:47:cc:34:29:60:1b:00:b0:91:1d:8c:
9f:8c:eb:54:9a:38:cb:6b:7a:87:ad:83:5e:5b:67:e6:f8:b0:
31:85:6b:44:37:8f:a3:49:b8:6d:ff:20:b0:4b:a3:2a:9a:95:
78:96:79:cd:c4:c4:ec:b8:64:f3:dc:0e:61:bc:ff:bd:d9:e2:
6c:77:7c:8e:86:c3:fb:2e:64:51:7e:b3:e3:13:c7:3b:ca:8b:
44:b1:38:d6:65:6f:51:b9:e6:12:bc:0b:64:04:bb:e6:ff:16:
e4:9a:15:e3:52:3f:58:2e:a9:5b:b4:25:b7:35:15:67:67:86:
49:d3:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org