Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS147287.roa
File: AS147287.roa (raw, json)
Hash identifier: LT0wdq3fJ/ow1mB/bv27+cuaPvyaCRr/RBQhRujtM9Q=
Subject key identifier: 07:DB:0A:BA:79:41:3B:A8:5F:92:AC:24:E7:CC:10:9B:50:14:76:DA
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4E7E70B58A83928C80ADD738E70B1157593F05A9
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS147287.roa
Signing time: Sat 27 May 2023 12:46:21 +0000
ROA not before: Sat 27 May 2023 12:41:21 +0000
ROA not after: Sat 25 May 2024 12:46:21 +0000
asID: 147287
IP address blocks: 205.234.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7e:70:b5:8a:83:92:8c:80:ad:d7:38:e7:0b:11:57:59:3f:05:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 27 12:41:21 2023 GMT
Not After : May 25 12:46:21 2024 GMT
Subject: CN=07DB0ABA79413BA85F92AC24E7CC109B501476DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:c9:96:35:29:ba:ad:57:8f:3a:ad:e7:9e:
10:e7:de:52:93:0f:73:b2:42:82:00:70:ba:69:13:
99:32:e9:8c:24:5b:68:56:81:42:dd:2b:54:50:42:
14:54:0d:df:38:e2:0b:33:5f:27:e4:ed:38:ba:75:
aa:e8:25:a2:43:65:dd:9d:e8:95:9b:d9:ca:30:93:
e7:10:c0:00:fb:3b:c4:a4:da:a7:32:26:b3:dc:a9:
45:2e:cf:52:94:b1:db:1f:f9:80:2a:91:59:57:d9:
66:c9:d8:e4:7a:1d:d3:7f:3a:79:14:da:c7:4c:cf:
fd:56:9f:b0:ef:15:33:0c:70:d8:f4:fa:b8:ae:e0:
2c:e0:46:73:88:e2:24:0e:e2:f6:1a:53:8d:12:70:
30:80:6e:0e:95:4d:2e:f1:97:f9:0b:d8:c8:18:4d:
e8:c5:87:5a:11:c8:c8:20:1e:a6:47:ea:a3:ea:11:
2e:bb:1e:87:eb:11:ae:3c:2a:09:0a:b2:46:87:30:
ab:21:ba:81:64:a1:60:b8:e4:0e:82:f7:91:c6:32:
31:9c:20:75:d1:8a:01:78:8a:3f:27:5f:c6:da:c8:
15:96:f0:65:58:f9:f6:22:22:d5:1b:a4:3b:12:65:
13:fa:65:4c:69:08:a4:d2:95:aa:ee:0f:f6:4f:cb:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:0A:BA:79:41:3B:A8:5F:92:AC:24:E7:CC:10:9B:50:14:76:DA
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS147287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.228.0/24
Signature Algorithm: sha256WithRSAEncryption
49:be:01:76:ca:88:01:1d:5c:c6:3d:d4:f2:4b:64:30:aa:11:
26:1e:cf:80:9f:1e:b4:17:27:d7:59:8b:26:b0:96:44:ed:08:
47:c4:51:cb:16:73:f7:43:ae:97:0a:e0:e2:af:a0:b8:56:2d:
94:45:fe:a9:45:77:43:99:be:65:d9:c1:3a:f7:4e:e8:e3:29:
1f:f2:ad:ca:a2:f3:e7:1c:16:27:7d:34:c6:e3:4a:16:76:07:
b0:8c:9a:0a:c2:99:ef:8e:57:7d:aa:d9:21:c8:f3:00:c0:b0:
1a:d5:53:f2:ed:5e:94:57:e5:a7:b2:86:0e:ea:30:95:92:b7:
c1:ad:b2:a4:01:38:8c:49:c8:06:16:65:f7:ef:8b:ad:65:35:
03:43:e4:30:20:ee:bf:f5:be:ee:f6:01:77:7b:f4:29:cc:ff:
1f:bb:53:98:40:fd:a4:de:e3:e6:01:59:3a:c3:44:ab:99:ee:
b0:6c:73:e0:06:40:af:55:43:e5:7e:01:c4:85:d0:d6:83:cb:
9c:8a:77:1c:79:23:f5:75:21:d9:9b:6b:52:05:40:b6:3a:1c:
73:1e:8d:4e:86:2b:b8:c5:ec:53:f7:81:ec:03:92:34:2e:ea:
27:24:34:b4:0f:5c:85:c3:dc:49:49:64:7c:ed:63:bb:bf:4b:
5c:bc:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org