Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: mXdoimaF3LOyZtOky9Hfz9StX/M7RPlAVAr7NDEnTXU=
Subject key identifier: 63:7A:82:2D:BA:9F:33:64:09:61:FE:12:9C:1C:15:EB:95:C6:ED:DA
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 6746DD45DCA2B5153FBC17103632A3090C4BB78B
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS29802.roa
Signing time: Sat 03 Jun 2023 16:03:33 +0000
ROA not before: Sat 03 Jun 2023 15:58:33 +0000
ROA not after: Sat 01 Jun 2024 16:03:33 +0000
asID: 29802
IP address blocks: 64.202.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:46:dd:45:dc:a2:b5:15:3f:bc:17:10:36:32:a3:09:0c:4b:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jun 3 15:58:33 2023 GMT
Not After : Jun 1 16:03:33 2024 GMT
Subject: CN=637A822DBA9F33640961FE129C1C15EB95C6EDDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:e1:7a:1b:61:d6:9c:39:0f:61:1d:65:02:
ba:1a:68:c1:2b:b2:c7:20:98:1d:84:1b:b4:80:a1:
04:c5:da:70:c5:a4:5e:75:e6:60:67:09:26:35:cc:
dd:ec:61:96:90:39:f8:be:3f:d1:69:91:bf:68:3e:
a6:6c:6f:18:e4:60:bf:9f:4f:38:5f:61:6b:db:e5:
ee:97:6c:cf:da:f7:e8:06:57:1a:6f:fc:bd:31:b4:
aa:27:35:61:ec:63:17:21:65:7b:b1:7c:46:4a:97:
4a:e1:24:e5:57:d2:df:c0:f5:ff:76:1c:47:19:4c:
63:b3:95:0a:23:f1:48:6a:b1:ac:1f:11:8a:4d:bc:
fe:24:ab:55:51:77:2e:6c:f2:86:09:22:ce:b7:47:
e8:8d:80:e0:ed:21:31:6f:e0:9f:00:02:b9:83:b1:
60:98:e5:14:58:12:9f:c0:8a:35:67:6d:d6:d6:3c:
5a:0b:f5:85:23:cc:d4:64:6f:38:dc:8d:bc:9b:9e:
f4:19:ab:b2:e4:b1:53:a3:a0:57:66:20:1a:07:fe:
e5:f7:65:73:e3:7f:fd:e3:44:23:ef:7b:24:be:a7:
14:80:9d:4c:99:ba:9e:21:cb:3c:df:ac:34:c5:08:
79:7f:e8:0f:9a:79:29:89:1b:51:c8:c2:fd:d6:c8:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7A:82:2D:BA:9F:33:64:09:61:FE:12:9C:1C:15:EB:95:C6:ED:DA
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.202.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d7:ff:52:6d:6e:f8:71:40:c3:e4:1f:ba:1f:a5:ca:ba:0f:
78:99:6d:4e:1b:a8:58:29:cf:b8:46:5d:f7:fc:1f:5d:a5:be:
d8:09:fc:80:1c:1b:80:76:38:4e:0c:6b:c9:cc:69:c4:89:b2:
c2:6d:73:18:f5:24:04:a1:14:96:4b:55:40:74:10:16:b3:47:
1a:d3:41:81:7c:8c:31:2a:bc:24:1b:55:6b:28:f8:68:c3:e2:
48:a0:70:3b:24:3e:79:be:13:70:02:fc:ee:a5:50:8e:c0:da:
b1:85:3a:a4:8f:74:16:f4:ab:da:61:69:11:52:c4:eb:41:36:
df:3b:2d:08:41:0e:00:81:de:b7:15:57:9a:3e:52:1a:32:32:
d7:d7:78:23:c1:c2:d2:3a:79:ff:55:25:f3:c0:d2:63:18:61:
6a:18:74:bb:f7:40:fc:77:8e:a3:96:49:bc:54:75:b8:1b:28:
12:32:69:88:0a:0e:44:52:97:e1:85:4f:d4:2e:98:c2:d3:09:
40:c6:64:47:4b:c5:ce:1c:70:d4:3b:ac:17:ac:8f:1d:08:f1:
6e:21:7d:56:de:06:ec:f1:5e:dc:33:83:0c:e7:80:96:f5:01:
5e:92:8a:48:8f:24:ee:2e:36:7a:1e:46:61:36:33:72:98:5c:
3c:80:19:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org