Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211585.roa
File: AS211585.roa (raw, json)
Hash identifier: njVJjoIBTu4/eTfRVtSwBK7+jbfPOiEW1t9A/llXL04=
Subject key identifier: 33:5F:CE:8D:24:BC:7B:9F:74:4C:F1:74:9E:09:03:09:FE:F5:A5:9D
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4142143013DF78F311AE27946AEB63D140D02B93
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211585.roa
Signing time: Mon 05 Jun 2023 12:00:05 +0000
ROA not before: Mon 05 Jun 2023 11:55:05 +0000
ROA not after: Mon 03 Jun 2024 12:00:05 +0000
asID: 211585
IP address blocks: 75.102.48.0/23 maxlen: 24
75.102.50.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:42:14:30:13:df:78:f3:11:ae:27:94:6a:eb:63:d1:40:d0:2b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jun 5 11:55:05 2023 GMT
Not After : Jun 3 12:00:05 2024 GMT
Subject: CN=335FCE8D24BC7B9F744CF1749E090309FEF5A59D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:f7:28:98:21:31:f9:30:8b:38:85:05:82:
e8:6f:66:9e:9e:f2:78:aa:e5:17:4b:97:a4:b0:3b:
a4:16:40:0a:65:33:89:e0:0d:eb:e5:c9:4f:4d:96:
eb:cd:bc:89:06:8b:17:6b:9c:1b:52:e4:27:0f:4e:
9b:c6:cb:a6:2f:0c:15:30:25:aa:a1:be:10:85:18:
19:19:e3:11:bd:42:58:51:c9:39:37:51:1d:75:78:
a9:0e:59:9f:a8:bc:48:d7:cc:0e:50:ce:b2:4d:5c:
af:5b:17:bb:51:83:5f:e6:95:30:a6:cb:7c:48:64:
e8:50:40:7e:71:ee:8b:96:b3:af:e9:0b:0f:45:24:
31:b9:b1:7e:93:58:53:9e:71:ca:f4:9f:96:3c:72:
48:f9:ba:9d:de:47:14:ac:f9:0e:2f:eb:87:09:59:
2e:b2:55:9e:db:84:80:1c:32:e0:cf:bb:f3:2d:d1:
aa:1d:e4:ff:0b:0f:c1:58:d0:1e:70:52:b4:4b:e1:
32:24:0c:14:76:99:09:91:d2:c9:3b:0a:20:43:78:
0d:d3:9d:4f:ae:07:96:03:ac:30:24:eb:fe:da:4c:
a3:cd:5b:a0:4e:0c:86:ea:41:90:91:36:c9:63:ce:
96:0b:38:4d:5a:d8:86:82:b6:5b:74:ac:79:07:2d:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5F:CE:8D:24:BC:7B:9F:74:4C:F1:74:9E:09:03:09:FE:F5:A5:9D
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS211585.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.102.48.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:0c:2f:53:83:2c:59:83:92:51:60:08:23:ff:6e:2d:0a:bd:
35:9d:04:d1:b9:3c:ac:58:49:d6:0a:a7:31:b7:56:d9:9f:70:
b1:8a:a6:30:4d:56:4e:81:b5:5a:7a:48:36:0c:c5:df:94:49:
6b:dc:9d:4e:f7:06:f5:14:f6:8c:3f:06:7d:1f:ee:5e:0b:a5:
02:d4:7c:f6:9f:9e:eb:db:9e:51:ad:53:46:ad:82:f2:56:8c:
8e:87:12:0e:0b:2f:8f:98:4a:08:be:78:6c:e7:33:33:f7:dd:
ba:75:6e:59:9f:d5:a9:60:91:27:47:ef:ef:d3:28:48:c8:70:
dd:d0:6f:ac:ba:95:9f:ea:78:17:e0:e3:a0:8b:fc:dc:b6:b4:
e6:b1:1b:1c:ab:dc:c7:a5:70:c5:f9:a3:48:e6:e5:d7:78:f3:
53:f5:a8:c2:16:f0:cc:6e:01:ad:d9:2d:44:6e:0b:9e:59:87:
7e:8c:4c:19:f4:78:93:f4:cb:41:03:18:94:7a:8e:f0:7c:f0:
44:4a:83:ff:65:c3:e8:e3:bc:d7:c9:70:0a:7a:ec:9f:a8:b8:
fe:42:43:44:3c:75:99:4a:c3:f4:23:83:ab:9b:5f:55:a6:56:
a9:f2:7a:3f:cf:9a:5b:84:de:a8:c4:61:9e:da:a7:9d:93:b0:
99:4a:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org