Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60117.roa
File: AS60117.roa (raw, json)
Hash identifier: p/9yguzn3GCsayaYfl2lLlng18cHyMpSO1POJV4VnYo=
Subject key identifier: FA:1A:D8:1E:60:CB:16:C7:2C:E4:0D:F6:1C:56:0C:14:E8:2C:73:44
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 4DB05C9DEA08B19D76DE0736E880A589CF7087AB
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60117.roa
Signing time: Sat 27 May 2023 12:46:21 +0000
ROA not before: Sat 27 May 2023 12:41:21 +0000
ROA not after: Sat 25 May 2024 12:46:21 +0000
asID: 60117
IP address blocks: 216.246.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b0:5c:9d:ea:08:b1:9d:76:de:07:36:e8:80:a5:89:cf:70:87:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 27 12:41:21 2023 GMT
Not After : May 25 12:46:21 2024 GMT
Subject: CN=FA1AD81E60CB16C72CE40DF61C560C14E82C7344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:8a:33:1a:b0:95:f4:56:30:ab:f7:1e:a7:
7f:10:87:5d:69:0f:73:be:0c:86:0e:a7:65:3d:96:
2f:a8:95:bc:b6:d2:19:c4:a1:c2:6f:86:d1:7a:e2:
a9:f1:7c:03:fe:bd:57:f0:32:fd:12:90:68:a9:43:
1a:b2:21:23:6b:33:29:a4:99:08:f3:be:62:a5:a5:
c0:b1:6b:39:2c:aa:ba:c1:20:ab:8d:a9:77:bf:0e:
9c:6a:1c:f4:e5:67:1a:7e:ff:69:d6:d3:d6:ee:5c:
a5:6b:22:00:0f:d9:b2:86:fb:c6:2a:3d:ae:11:0f:
b7:a7:b0:df:2a:34:a4:9e:3a:80:67:82:84:0a:d1:
8e:ec:e6:91:1a:0a:08:c0:77:3b:ce:c2:8f:c1:ce:
a3:7c:74:10:ed:84:51:77:0c:ab:49:34:4a:e5:6b:
b1:13:a6:cf:6f:8c:7b:14:23:b4:62:86:d4:b8:7d:
96:4b:5e:99:c8:93:06:3f:44:45:b1:5e:1b:79:b1:
a1:4f:8b:0a:be:0c:f1:31:f2:eb:d5:30:cb:e9:ea:
c5:f6:2a:9f:53:1e:5b:33:29:57:96:bb:ca:d3:b8:
92:a7:34:dc:b0:f0:7a:20:5c:0a:3e:a2:50:4e:28:
76:1b:69:ce:6c:3d:9f:88:49:3d:ba:f3:db:b1:90:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:D8:1E:60:CB:16:C7:2C:E4:0D:F6:1C:56:0C:14:E8:2C:73:44
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.99.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bf:b2:80:f1:c8:46:6f:cc:10:ee:db:36:c1:db:a3:0f:5a:
9d:49:e3:a7:89:ed:d8:96:e7:bf:f2:b3:4b:32:46:9d:de:79:
e4:47:51:e8:af:db:5b:02:64:e9:81:1a:28:00:5c:5c:00:d6:
02:8b:8a:b1:1f:90:3e:e8:5a:8b:8f:26:d8:dd:d3:46:4c:73:
0f:cd:d5:45:cd:09:4d:f9:35:b0:e4:e4:cf:a9:c4:bf:89:ac:
ce:25:38:c4:f1:0a:8f:34:01:52:db:66:0c:a8:8b:71:e1:8b:
55:22:de:e4:b2:73:de:b6:cc:59:e0:b1:b1:5f:22:ac:0c:5a:
8d:95:9a:45:82:d0:70:a6:1a:b8:d9:d5:f0:fc:20:0a:13:ec:
69:2e:fc:0a:14:b5:59:cd:a5:d9:ab:19:7d:c2:fd:73:bb:be:
6f:a4:51:64:51:c8:49:df:40:b3:bf:cb:9d:15:ca:1e:ab:7b:
20:7d:23:4a:39:09:1d:4b:bb:88:5a:b0:a3:3c:0b:2d:82:49:
6a:18:6a:f2:c0:33:41:6b:00:42:73:1e:5d:b6:1d:32:f3:8c:
e1:7a:59:50:a7:90:6a:ea:dc:36:d9:aa:cb:3e:ce:1a:a4:51:
f7:32:61:d5:55:43:49:07:84:bf:9a:0a:96:15:da:20:b9:79:
4f:37:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:35 2024 by rpki-client on console-ams.rpki-client.org