Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS57844.roa
File: AS57844.roa (raw, json)
Hash identifier: 9Nd7e1zD8ng1x+nmXo9d9pQGkyGPmkge9xaQtZhYfFo=
Subject key identifier: 59:71:CA:EE:A1:B5:C6:01:B2:2A:63:E1:39:69:5E:EA:76:38:75:09
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 1269DCEDB8439D17C4762A59E921085C9E879E26
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS57844.roa
Signing time: Mon 05 Jun 2023 17:27:18 +0000
ROA not before: Mon 05 Jun 2023 17:22:18 +0000
ROA not after: Mon 03 Jun 2024 17:27:18 +0000
asID: 57844
IP address blocks: 216.246.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:69:dc:ed:b8:43:9d:17:c4:76:2a:59:e9:21:08:5c:9e:87:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: Jun 5 17:22:18 2023 GMT
Not After : Jun 3 17:27:18 2024 GMT
Subject: CN=5971CAEEA1B5C601B22A63E139695EEA76387509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:8c:67:b6:7c:71:d2:51:f0:59:c6:ce:45:
89:28:50:a0:4d:b3:d3:3a:c3:93:e8:d1:98:75:58:
67:c2:9e:65:35:4d:d2:d6:6c:48:7f:1a:4b:bd:3b:
57:52:b6:7a:11:91:e5:0e:86:65:f4:b8:69:3f:44:
1e:e9:12:a7:2d:95:8e:7c:bb:36:6e:bf:d2:ab:84:
1a:55:4e:e8:e5:08:3a:9f:80:a6:6f:c1:fc:70:25:
42:f3:73:f6:fc:31:f5:50:fe:f7:3f:a9:3e:c2:dd:
57:22:6c:70:56:ac:d3:9c:d8:98:e2:95:d7:0f:c6:
9f:b8:90:d8:87:ce:ac:16:71:88:4b:55:fa:0b:33:
f4:2e:90:ba:ed:ca:1d:e3:6c:e2:85:28:b3:d2:b5:
4d:4b:c7:43:94:3c:e0:4e:5e:c3:1b:72:95:0e:d8:
4c:1f:06:d1:05:5d:b6:6e:19:98:28:77:1d:f5:86:
ea:a1:33:d1:0e:14:97:e8:c3:26:3d:2f:52:b4:8c:
9b:b2:9a:4f:79:0d:38:6f:e6:e1:02:94:05:10:fc:
bd:ee:72:a1:a6:86:a0:65:70:49:ad:63:8f:37:f3:
58:24:28:5c:17:5c:a5:31:ca:4a:08:d4:a0:86:76:
a9:3d:f8:0d:af:61:05:e2:56:c6:67:f3:42:f1:18:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:71:CA:EE:A1:B5:C6:01:B2:2A:63:E1:39:69:5E:EA:76:38:75:09
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS57844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.86.0/24
Signature Algorithm: sha256WithRSAEncryption
39:51:34:06:c1:70:a5:3c:35:40:32:3d:c4:8c:e2:e6:e1:4f:
51:ca:db:88:a3:82:37:60:d0:73:73:af:af:e2:1e:86:cb:fe:
e4:2d:0f:a2:4b:6f:36:56:7e:62:bc:40:48:76:d5:b9:d7:22:
2c:9d:bb:1b:80:74:18:c3:0f:65:6f:3f:36:ab:30:87:3e:3f:
1a:e5:bf:14:f8:18:2c:c9:97:94:d8:cc:14:a6:ce:d7:13:c3:
a8:22:a9:cc:19:0b:7d:27:52:8a:44:76:7b:d0:65:d4:e1:9f:
b8:cd:4e:f9:fa:f4:df:c7:bb:b7:09:68:0a:62:74:2b:af:dd:
d3:06:35:20:51:55:27:6b:ae:2f:df:e2:65:95:42:3b:68:4b:
d3:f4:8e:a1:9c:a3:8b:24:68:06:87:f4:95:74:ce:9c:3e:74:
7a:62:cd:62:d5:c9:5e:90:43:8f:c9:06:ce:84:7f:c1:b8:2b:
84:23:9a:d3:dc:87:01:43:05:7c:69:1d:4d:87:b2:8e:3b:f7:
7c:34:76:a6:4a:6b:55:4d:75:5f:a2:92:5a:f4:d7:5e:f7:e3:
2e:bc:70:f5:48:cc:2b:14:e2:7b:1f:c4:bd:da:14:bc:33:32:
34:7b:c2:22:b4:20:d2:76:62:ce:c4:2c:8d:3f:2a:94:d9:ef:
3d:1e:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org