Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135752.roa
File: AS135752.roa (raw, json)
Hash identifier: BWdVqAX04AKa4yv9AYkFn7RO+HKT+a84OR6ewMXBoEE=
Subject key identifier: AC:EF:5B:98:EA:4E:2C:24:2B:15:E4:E6:6A:DD:60:0A:F8:22:9B:3C
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 53A03539C8142566B1B4E7246647EFB6017B344D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135752.roa
Signing time: Mon 06 Mar 2023 13:00:09 +0000
ROA not before: Mon 06 Mar 2023 12:55:09 +0000
ROA not after: Mon 04 Mar 2024 13:00:09 +0000
asID: 135752
IP address blocks: 208.76.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a0:35:39:c8:14:25:66:b1:b4:e7:24:66:47:ef:b6:01:7b:34:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 6 12:55:09 2023 GMT
Not After : Mar 4 13:00:09 2024 GMT
Subject: CN=ACEF5B98EA4E2C242B15E4E66ADD600AF8229B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:ed:ee:95:ff:16:ae:75:62:41:c8:90:fd:
4c:9e:d0:b0:04:d4:9a:29:2d:1a:19:a7:3f:f1:f1:
d1:75:d2:d8:37:a1:a8:7a:e5:f2:6c:62:29:01:60:
5a:82:82:4d:d1:51:06:f6:e1:42:b5:6d:d5:fe:77:
88:47:fa:09:02:de:65:71:51:57:a9:78:a3:0d:e4:
9f:c3:9d:aa:d0:56:ff:f8:81:bb:60:64:13:2e:b2:
a3:1c:33:0d:e8:ef:31:7f:e9:80:75:d2:e6:49:28:
81:3a:3f:fe:82:75:5e:a7:7b:95:ee:d7:e9:3f:e6:
1b:69:8f:1a:e7:a2:75:8b:1f:0b:ef:76:45:f2:4b:
ac:3f:da:ce:34:b7:6e:3a:05:9b:a6:d3:bd:b0:7d:
a8:ce:54:ef:5d:ff:97:f4:73:e6:3a:57:94:8b:08:
26:7b:51:af:a0:d0:f3:3b:78:ff:42:f6:3c:fe:d2:
95:29:d2:37:52:f8:f0:74:b8:7e:c7:12:9c:03:2c:
4c:0c:8a:70:75:db:00:3e:8d:e7:a9:58:1b:31:9f:
b4:3a:ab:ba:ec:cf:99:50:21:b2:76:ff:75:3d:f8:
fe:2e:81:2b:76:42:3f:5f:fb:23:ae:3e:22:71:77:
1b:d3:92:d1:f9:35:e2:52:99:4c:8d:a0:31:cb:22:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:5B:98:EA:4E:2C:24:2B:15:E4:E6:6A:DD:60:0A:F8:22:9B:3C
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:68:5d:7b:5c:46:94:f0:83:60:d4:f6:47:3d:7c:34:1d:f0:
8d:58:71:50:4a:82:1f:86:da:05:a8:2a:ae:d7:2c:c0:3f:74:
90:ec:08:da:13:3e:7b:f4:db:f8:bb:47:0a:21:62:7a:8c:df:
89:88:0d:28:e0:30:3c:bd:51:1d:c4:a2:2d:fc:cb:52:45:14:
e7:a3:b0:9b:bb:b9:a8:b1:40:6d:1d:0e:62:31:59:e0:c5:b5:
f4:85:cd:ed:87:ca:de:00:51:5a:c2:ae:96:2b:90:70:86:65:
48:ae:76:2a:7c:84:5f:86:0e:43:4d:e5:09:75:81:c2:1c:0c:
01:e4:4a:03:85:b6:ec:8d:02:1a:21:6e:c5:75:2d:7c:23:b8:
4d:21:67:6c:20:c2:f7:56:0f:b0:dd:30:fe:68:07:d0:75:5a:
64:ef:6f:79:d3:00:2c:58:f1:46:0c:77:0d:a6:3c:a3:f8:38:
14:7a:7d:0b:a2:0e:5e:b8:18:38:9a:45:84:80:f6:6b:b1:79:
68:ac:f6:70:96:41:4b:8f:de:4d:dc:d7:80:b3:01:55:c6:d8:
ee:b9:17:18:91:7d:de:47:35:68:75:22:fd:21:9e:dc:4e:5f:
78:63:a3:26:6b:e2:62:6f:54:e3:b7:4d:35:dd:88:1a:60:26:
99:42:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org