Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60721.roa
File: AS60721.roa (raw, json)
Hash identifier: v/rAsCXCXiOj8DPQYkzB8vY5bYOuE7YvwA7ZHQmNkow=
Subject key identifier: 16:E0:69:36:58:7B:6A:CB:68:CD:C3:0A:78:F5:C9:7C:9C:95:BC:E6
Certificate issuer: /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial: 66A06E01E817EF2A7DFC1FE4118C43DBAE1E8ACF
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60721.roa
Signing time: Sat 27 May 2023 12:46:21 +0000
ROA not before: Sat 27 May 2023 12:41:21 +0000
ROA not after: Sat 25 May 2024 12:46:21 +0000
asID: 60721
IP address blocks: 205.234.146.0/24 maxlen: 24
205.234.171.0/24 maxlen: 24
205.234.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a0:6e:01:e8:17:ef:2a:7d:fc:1f:e4:11:8c:43:db:ae:1e:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Validity
Not Before: May 27 12:41:21 2023 GMT
Not After : May 25 12:46:21 2024 GMT
Subject: CN=16E06936587B6ACB68CDC30A78F5C97C9C95BCE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:a0:41:96:f2:f5:c8:be:e5:a3:c0:d7:b0:
48:22:19:38:82:05:77:8a:32:c1:89:83:05:3f:f3:
44:d9:79:2d:03:26:72:88:56:e2:be:22:19:b2:69:
32:be:14:60:04:86:04:89:aa:a2:22:c1:25:6f:0d:
2c:d3:56:0a:a8:9e:59:48:e6:63:e9:4b:2e:9a:55:
60:b9:1d:7c:ff:e0:84:f1:31:4a:13:43:f9:a5:df:
d6:50:65:c5:03:a1:a2:a5:11:0b:72:1f:51:f8:5f:
7c:70:71:8d:d8:f6:0b:35:e2:f0:7c:53:42:f5:ca:
e4:f6:db:6d:f6:83:da:c8:75:49:00:6d:97:29:f4:
98:d4:23:9e:69:82:38:b1:fb:7d:32:fd:80:89:bf:
3f:a8:c5:41:6a:bf:18:28:b6:e0:a9:7a:54:00:cb:
84:94:dd:02:7c:40:4f:62:20:d6:35:6a:f2:07:bf:
df:f1:14:48:d7:65:85:e7:a0:61:09:74:64:34:7e:
ea:8a:53:8e:0d:3b:ee:f2:1e:dc:fd:35:0d:89:9f:
7e:f3:69:63:f7:1a:51:8d:59:c5:5b:ca:28:7e:e8:
cf:d0:bf:79:01:4e:9c:44:47:af:27:c5:b7:e6:93:
ec:a3:80:d3:49:0a:76:e6:66:d4:93:9f:f5:8a:e3:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:69:36:58:7B:6A:CB:68:CD:C3:0A:78:F5:C9:7C:9C:95:BC:E6
X509v3 Authority Key Identifier:
keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS60721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.146.0/24
205.234.171.0/24
205.234.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:20:87:11:ab:be:2e:ed:36:22:83:e3:00:6a:eb:88:70:72:
e3:ca:2d:38:a8:4d:80:63:88:7a:b3:7b:f2:f7:89:a5:5a:c6:
2b:de:cf:ca:05:6b:cf:0c:2f:d9:6e:6a:b3:2a:2f:1e:32:33:
ec:1e:0f:fa:fa:b1:bd:66:3e:93:ca:71:24:bb:39:73:f6:68:
ac:bd:96:29:6c:dc:09:23:79:9b:b7:d0:89:5d:00:2e:28:79:
f0:2f:d7:29:0e:55:ae:cd:34:a0:04:ea:aa:77:64:e1:d3:94:
c0:5e:b9:41:d5:6a:2a:92:ef:9f:34:6d:87:d5:46:8e:d0:54:
56:7f:f2:94:5b:ac:74:92:12:e0:d5:a6:83:60:f5:92:a8:2f:
ea:61:f0:04:d0:3c:6a:4f:2f:16:2c:00:f9:5e:96:d8:04:6b:
6b:fd:46:69:70:e3:24:73:a5:29:5e:fb:fc:f5:5b:86:d5:61:
c0:31:d9:8f:d1:13:f6:df:11:a9:51:9f:5a:ef:a9:5d:10:88:
eb:c7:cc:a0:40:b2:a8:d2:b5:7a:61:29:c8:ec:f0:49:f4:a7:
5f:32:56:c7:6b:2d:8b:9f:4d:3c:a8:06:44:26:ae:14:1e:63:
a5:1b:59:f4:03:ad:32:e0:91:ab:31:6c:b3:2c:13:45:ff:e1:
e5:bd:32:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:05 2024 by rpki-client on console-fra.rpki-client.org