Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200010.roa
File: AS200010.roa (raw, json)
Hash identifier: a4VjVnPAkwf/R028xIMS55ASeL7VW10xiYvf6NQLN50=
Subject key identifier: F4:91:40:FD:E1:64:AC:33:43:BF:B6:CD:89:09:B5:18:94:9F:4E:E4
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 5543511B43A5D2EC4A51D52273D9F9C9D6FC6154
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200010.roa
Signing time: Mon 10 Apr 2023 14:00:12 +0000
ROA not before: Mon 10 Apr 2023 13:55:12 +0000
ROA not after: Mon 08 Apr 2024 14:00:12 +0000
asID: 200010
IP address blocks: 216.97.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:43:51:1b:43:a5:d2:ec:4a:51:d5:22:73:d9:f9:c9:d6:fc:61:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 10 13:55:12 2023 GMT
Not After : Apr 8 14:00:12 2024 GMT
Subject: CN=F49140FDE164AC3343BFB6CD8909B518949F4EE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:de:1f:af:cf:22:92:6e:90:5e:a7:95:58:
0d:42:d9:61:e1:b7:1a:c9:06:fa:4a:f2:88:8c:99:
80:65:d3:ee:80:e2:43:cd:7b:37:95:ac:1f:27:59:
c4:45:29:0c:97:49:7e:5c:15:06:5c:92:9a:c4:cc:
e8:96:66:46:d9:d7:c9:f5:b2:68:c6:94:72:1e:2b:
80:8c:91:c2:f2:8b:a1:4d:e6:c3:f4:2f:37:16:64:
76:0b:ff:b9:b8:70:20:a2:bf:39:83:f0:38:4b:06:
1f:3d:b7:4d:8f:15:f2:b1:1f:b3:5b:5d:c9:ac:06:
dc:7a:2b:6c:20:94:b5:3c:70:6a:69:87:2a:82:7b:
95:ff:50:dc:08:27:8d:3d:92:3e:b3:ee:27:0e:0c:
77:49:14:a1:d9:88:83:34:82:e9:3f:94:16:df:67:
18:5c:b1:c9:f6:78:33:6b:4b:1b:f5:13:be:d9:8a:
e6:67:0d:09:67:a3:03:10:05:fb:96:bf:ce:1f:19:
23:1b:c9:fa:b9:a8:a1:ea:13:03:b0:0b:3f:df:17:
9c:e6:69:9b:22:8b:16:45:a0:51:dc:18:dc:c2:83:
68:95:5a:c5:dd:18:5d:5a:b8:de:a5:bf:2e:1e:88:
19:35:92:4b:9e:8f:81:a4:a5:59:43:db:56:58:3f:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:40:FD:E1:64:AC:33:43:BF:B6:CD:89:09:B5:18:94:9F:4E:E4
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200010.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.97.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:42:b2:67:ff:29:54:b1:37:85:10:76:75:02:e0:05:b2:a1:
55:d1:00:d8:45:7f:c8:ee:a1:40:5a:0b:2b:be:d5:1a:35:a5:
a3:6e:3c:c8:21:8e:68:e6:2d:2c:11:9b:bb:5d:55:73:94:0b:
d9:f8:6b:b6:c3:cd:7e:d0:93:89:14:e5:f5:b0:62:13:e5:f5:
37:04:48:0d:80:b7:1c:4f:e3:ae:cb:54:d3:74:35:7f:c7:18:
67:7f:5e:66:8b:9e:b1:fd:75:78:ae:01:4d:45:6c:5d:fa:57:
14:56:a7:ca:93:c5:fa:58:ef:3b:a9:ff:fa:ff:b5:11:8c:91:
8b:9b:dc:d4:62:10:95:11:c9:5d:ec:51:a6:ae:41:9e:06:52:
09:f9:9c:bf:73:c1:0c:ca:b7:26:c7:30:68:2c:10:9b:71:17:
fa:34:8a:43:17:8f:a4:d2:8f:fe:65:4d:3d:bf:72:1c:66:f9:
2f:7c:5a:3b:d1:7d:53:11:b3:a3:a9:99:82:29:26:f2:c0:53:
33:88:11:5c:32:d4:52:39:e0:4c:a1:28:5b:2c:71:7c:f3:21:
bf:69:95:d6:a7:4e:a6:0e:1c:08:83:be:6d:f4:e5:9a:81:ba:
8b:d3:61:54:35:a7:f1:7c:4f:32:f2:0b:d8:6b:d2:55:2d:f4:
93:88:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org