Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33387.roa
File: AS33387.roa (raw, json)
Hash identifier: g+orz5I0LkOzIRmjcGiuXSwxdfW2TEzcdRb/WBI+8ZY=
Subject key identifier: 6B:31:A0:19:CA:0C:10:26:C3:FF:E2:7B:44:DF:89:CB:23:BC:CD:F2
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5549FB50CD52F7F35B1F0F6856449D74B8426D24
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33387.roa
Signing time: Wed 18 Jan 2023 17:16:42 +0000
ROA not before: Wed 18 Jan 2023 17:11:42 +0000
ROA not after: Wed 17 Jan 2024 17:16:42 +0000
asID: 33387
IP address blocks: 206.53.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:49:fb:50:cd:52:f7:f3:5b:1f:0f:68:56:44:9d:74:b8:42:6d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:42 2023 GMT
Not After : Jan 17 17:16:42 2024 GMT
Subject: CN=6B31A019CA0C1026C3FFE27B44DF89CB23BCCDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:d6:e2:2b:fa:3e:8c:ee:19:85:20:c4:f5:
b7:92:a9:3d:8c:f2:13:3b:97:dc:85:f1:04:02:9f:
fb:ff:c5:b9:cc:e0:1d:e8:26:74:3c:b5:bf:d7:9c:
fc:97:3c:0c:43:5e:7c:33:f2:c1:87:53:9b:56:d2:
99:2b:71:3b:a9:d8:48:01:21:10:14:88:60:61:81:
a0:12:c7:50:8c:5a:b6:70:0d:53:a4:24:85:68:f3:
c9:a6:25:fc:b5:80:26:6b:68:c4:e3:bc:1d:8c:f6:
70:86:9c:11:f5:c4:4c:ac:38:44:be:9a:ff:6b:73:
90:4d:c0:16:d9:fa:f6:32:62:d7:a1:4d:0f:b9:b2:
fa:90:44:c9:41:57:26:3e:f0:0e:07:1c:ed:1e:f1:
4a:04:34:7e:a2:a6:48:74:6b:05:76:f4:83:61:43:
58:66:46:d0:4c:39:b3:b1:90:2a:23:ed:38:74:78:
14:ab:70:3c:65:3d:8d:91:18:ee:50:74:47:c1:7d:
2f:18:5b:0c:4d:7b:9b:cf:99:ff:fa:f5:44:84:32:
62:c1:52:da:3e:31:ec:fa:49:df:e2:b2:12:54:98:
41:56:13:f5:e4:99:61:0a:6a:d8:68:6a:82:05:59:
ac:c4:38:ab:08:19:2e:c9:c1:e3:ec:23:24:69:ee:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:A0:19:CA:0C:10:26:C3:FF:E2:7B:44:DF:89:CB:23:BC:CD:F2
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33387.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.53.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:2e:ab:54:15:da:d7:2b:5a:c9:6f:b4:d1:5c:0d:94:53:73:
67:6b:45:b4:6f:be:ab:7e:dc:6f:8b:e5:7d:e1:fb:b4:5d:33:
19:d7:8b:b7:6d:e2:db:d5:3d:73:82:af:3e:50:45:a0:76:3d:
73:ed:e3:28:ab:76:8e:04:2a:db:eb:ad:6f:5f:c2:fd:5a:f9:
0b:2c:36:55:af:89:82:94:3b:e6:97:5b:95:6b:d6:c3:44:45:
50:b1:ea:3f:9b:33:2b:9c:32:f7:f7:d7:0c:1d:1f:b0:7b:9c:
49:f7:01:c7:b2:9d:f2:85:5c:b8:1c:81:0b:4e:d9:6c:a7:bc:
3c:19:17:13:c6:8f:cb:71:db:7f:ac:9c:ad:25:5a:be:8e:a6:
17:f9:89:b8:f0:f8:21:9b:93:d6:5a:89:23:26:55:bd:2c:1d:
d0:93:8e:02:46:09:bb:48:1a:9e:d2:88:06:a6:e1:60:c9:f7:
04:aa:3b:54:bd:32:23:b6:03:0b:6a:18:0d:95:b6:f2:ec:31:
64:e9:c2:91:db:68:77:2b:d4:8f:fa:57:e8:be:58:54:c9:cf:
6c:ae:c8:9f:c0:0c:0e:08:e2:e9:1b:53:6d:ed:24:b5:d0:4b:
47:4a:ae:41:84:39:90:39:52:c3:ab:1d:41:e0:ac:58:78:3d:
37:ea:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org