Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62005.roa
File: AS62005.roa (raw, json)
Hash identifier: gZ+rzw3TsMs9t6gJdi2hTY4oykbTITRPT+8j9hLw7e8=
Subject key identifier: 06:FB:BC:16:14:DB:54:78:E3:01:29:D0:49:E9:1A:7F:63:AB:54:D7
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4EF5C30841D45A598858FD6B2309B310F768C6E5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62005.roa
Signing time: Wed 18 Jan 2023 17:16:44 +0000
ROA not before: Wed 18 Jan 2023 17:11:44 +0000
ROA not after: Wed 17 Jan 2024 17:16:44 +0000
asID: 62005
IP address blocks: 98.142.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f5:c3:08:41:d4:5a:59:88:58:fd:6b:23:09:b3:10:f7:68:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 18 17:11:44 2023 GMT
Not After : Jan 17 17:16:44 2024 GMT
Subject: CN=06FBBC1614DB5478E30129D049E91A7F63AB54D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:f9:fe:3c:50:5a:9c:35:36:00:2a:77:1b:
56:4b:b7:d3:78:9d:c9:fd:13:a2:96:58:76:45:a2:
46:fa:d6:fc:23:19:19:5b:cc:5a:3e:a7:98:4e:83:
76:d2:cb:cf:bd:89:99:a9:eb:1d:e8:9a:76:21:33:
eb:7e:79:f6:ec:25:7c:97:75:88:17:85:89:bd:32:
f0:0f:70:9f:1a:cb:cd:38:a2:bd:89:62:d8:bc:a8:
6c:56:e5:61:27:39:95:0b:11:ed:0d:f5:1b:30:d9:
aa:a7:85:24:3f:9c:13:61:40:8d:b4:f5:31:c7:5b:
bc:3d:a8:af:11:31:de:6c:73:0f:ca:02:b8:8d:59:
84:79:9d:e2:6c:43:79:4f:69:cf:f7:d9:e9:3c:dd:
c0:02:17:6b:40:ce:fb:0c:1e:52:9c:65:1c:94:8b:
2d:c6:6c:87:bb:46:33:d9:5f:b2:f3:6e:72:0b:9a:
5c:c0:00:54:ba:fc:e2:ed:12:00:c7:0d:ff:97:ce:
62:18:e7:79:ec:84:8f:81:f6:4d:c1:fd:7e:80:54:
22:19:00:c8:c1:d1:cb:21:46:1a:17:c1:69:01:44:
d9:ee:73:eb:6d:64:9c:9d:70:b1:26:c2:e8:b3:5f:
9a:32:8b:59:32:d2:36:4b:ea:0e:0f:d4:c8:de:3e:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:BC:16:14:DB:54:78:E3:01:29:D0:49:E9:1A:7F:63:AB:54:D7
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62005.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:71:d9:4c:da:db:ef:ff:7f:05:e7:96:2c:ac:a5:16:93:45:
05:51:ee:aa:17:df:a1:fa:05:bf:e5:55:7e:d1:f7:ee:d2:b9:
b1:ac:31:e3:6b:29:dd:19:07:d3:13:4b:40:29:ba:3e:10:ee:
25:4e:53:fc:25:73:9e:37:38:2f:86:c4:b0:3f:de:0f:34:42:
50:0c:ab:e0:5a:7f:5d:d4:db:15:77:f6:bf:3e:95:48:fe:e8:
7a:2d:d4:2b:ae:84:ce:f9:49:de:4d:73:b3:b7:2b:6e:55:53:
2c:4f:b4:c9:66:1b:7a:82:b5:b2:f6:1f:47:7b:87:97:4d:ae:
e7:84:59:8f:d0:8f:c5:a0:07:fb:4b:0f:cd:8b:7b:ac:37:a1:
7a:95:92:db:e1:87:26:75:c3:18:3c:4d:60:14:0a:9a:85:29:
6e:e8:0b:c6:16:23:bf:4a:3e:99:fa:6b:be:b6:3a:e9:df:29:
04:b0:ea:4d:96:87:38:3f:f2:b0:63:09:7b:dc:82:ca:e6:6a:
5d:94:e3:3d:ff:7d:3f:ed:af:44:d8:08:bb:22:a6:85:00:24:
ab:99:70:02:54:12:c1:e4:38:82:f8:c0:a6:08:5f:a0:e9:a9:
7a:03:81:8a:2f:e8:e3:19:27:08:e5:f1:14:04:2f:4b:fa:bf:
65:75:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org