Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60790.roa
File: AS60790.roa (raw, json)
Hash identifier: X4saP5k+e59nvVQKKCL/LxrxjdQddLGn6/5X38KLHtE=
Subject key identifier: 9C:F8:2D:AB:AE:FC:E0:F8:D4:64:DA:ED:3A:51:B3:96:AD:86:30:18
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 22B203772DB8BC4C913E5F1B2B912594D1ADF8C9
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60790.roa
Signing time: Sat 18 Feb 2023 17:56:41 +0000
ROA not before: Sat 18 Feb 2023 17:51:41 +0000
ROA not after: Sat 17 Feb 2024 17:56:41 +0000
asID: 60790
IP address blocks: 104.234.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:03:77:2d:b8:bc:4c:91:3e:5f:1b:2b:91:25:94:d1:ad:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Feb 18 17:51:41 2023 GMT
Not After : Feb 17 17:56:41 2024 GMT
Subject: CN=9CF82DABAEFCE0F8D464DAED3A51B396AD863018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:4e:db:3d:c1:68:03:ff:36:cd:b2:81:f3:
3b:21:1d:aa:2c:7e:6a:e9:12:27:21:94:3b:e0:e1:
b2:c2:1a:10:d2:10:02:53:12:f6:ad:f5:5b:25:99:
10:58:0e:34:b4:24:b9:2c:8a:b3:ae:5a:e5:29:34:
c1:60:7b:16:62:98:82:1d:8c:7e:00:a8:6d:b9:d2:
72:38:f0:c7:95:1b:49:ee:b3:82:50:6c:ed:86:0a:
5c:bb:83:f0:a1:00:2c:40:5d:6a:c4:10:35:ee:c1:
ff:40:7b:53:19:4e:3b:da:31:f2:be:df:31:d3:34:
5d:e2:d5:4f:63:4a:29:41:b7:51:dc:24:bc:f6:25:
11:ae:63:fc:67:40:10:95:f5:f2:66:29:13:6f:98:
4d:06:da:c6:8f:50:21:04:86:82:89:56:61:39:37:
fa:ff:71:d5:97:fa:fd:f0:69:53:1e:08:33:73:cc:
78:bf:4b:0b:50:cf:a1:1c:dd:d8:06:ae:06:6b:9a:
3c:98:d9:03:74:e7:3f:03:78:2b:80:a8:d7:60:77:
78:ae:5a:bb:8a:fa:c5:55:cb:49:5b:af:32:95:2a:
f5:a0:0d:bb:b9:8a:da:b5:d4:3a:37:07:5e:cc:b7:
50:29:05:27:16:e1:db:f6:01:1e:9e:ee:49:b3:84:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F8:2D:AB:AE:FC:E0:F8:D4:64:DA:ED:3A:51:B3:96:AD:86:30:18
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60790.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:97:49:29:cb:d1:ec:b7:63:93:2c:3c:81:de:8e:00:b8:d3:
68:56:d7:da:5c:11:a6:91:b5:e5:d6:68:55:48:02:18:cb:8e:
1f:b5:a9:7f:c9:1c:9f:f0:43:59:e0:b0:f3:93:f3:67:6c:1b:
e0:ef:a4:95:6b:c5:fe:ca:33:0a:16:f7:9e:ed:2b:9b:94:a0:
60:fd:cf:30:ee:d6:b1:b1:24:e8:9c:8a:91:5d:20:41:d9:76:
19:6f:be:dd:a1:d9:29:67:27:70:04:e0:88:28:c8:f4:5f:8c:
d4:61:a3:44:3e:be:29:6b:ac:a1:3d:39:7d:3d:45:d2:aa:cd:
09:ff:dd:2d:ee:b9:0f:a9:b6:54:55:27:9a:e7:1a:06:5c:2f:
2e:a7:45:b3:ed:1b:b9:54:63:0d:dd:73:85:23:56:43:38:44:
db:f0:34:c2:3d:f5:89:62:87:dc:97:0e:86:e8:02:c5:24:d6:
47:10:01:d3:20:d6:07:69:b0:91:7e:e1:df:d6:cc:33:1a:b5:
ef:da:28:09:bc:12:c5:94:c1:13:3a:0d:4f:f8:7e:d7:68:b6:
9c:5a:42:85:4d:50:d8:bf:9f:75:63:e2:92:eb:55:b7:cc:d8:
fb:1c:75:ab:9a:7e:00:e6:9e:67:fa:31:6c:86:14:0c:2b:17:
c6:d8:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org