Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa
File: AS211061.roa (raw, json)
Hash identifier: eMdg8WggkZPZYTFyKFbBYvNoAZ2HbtHVTHOgH5+5844=
Subject key identifier: 06:5A:CC:05:39:87:5C:4B:08:2F:E7:B4:21:38:F2:FE:A5:5D:52:B7
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1C03D6FFA710275B8146BAD74EB9ED5402EECF4E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa
Signing time: Tue 10 Jan 2023 00:00:09 +0000
ROA not before: Mon 09 Jan 2023 23:55:09 +0000
ROA not after: Tue 09 Jan 2024 00:00:09 +0000
asID: 211061
IP address blocks: 74.50.31.0/24 maxlen: 24
89.35.94.0/24 maxlen: 24
209.200.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:03:d6:ff:a7:10:27:5b:81:46:ba:d7:4e:b9:ed:54:02:ee:cf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jan 9 23:55:09 2023 GMT
Not After : Jan 9 00:00:09 2024 GMT
Subject: CN=065ACC0539875C4B082FE7B42138F2FEA55D52B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:ee:fd:50:2a:21:c7:d7:62:55:1b:33:ee:
94:20:47:7e:af:cc:bd:7c:09:c2:56:d8:92:24:6b:
61:57:89:fe:3a:df:51:6e:2f:58:a0:0e:56:ca:35:
17:26:8c:d5:a5:9c:a7:c0:ba:90:b2:6b:bd:5b:17:
b9:15:f8:1d:2a:df:e8:16:48:d8:8f:8e:31:2c:1b:
59:7c:d0:c6:04:d3:e4:22:29:9d:87:84:ad:89:71:
22:5e:47:05:52:74:ac:ce:4c:4c:dc:dc:fa:e6:44:
06:fb:1c:ca:56:8d:09:0c:d8:a0:25:09:5a:31:6d:
ed:6d:d4:cc:b3:0d:e9:4d:97:11:cc:8d:b0:e9:07:
63:90:e7:db:3d:4d:c9:33:10:0e:26:65:84:7c:1a:
bf:5d:16:8c:61:3c:af:34:76:cd:71:b8:1c:b3:f0:
62:fb:1d:b4:94:98:31:a4:eb:6a:07:6b:63:d8:2e:
23:1d:d8:8c:be:be:87:52:68:54:dc:8b:20:34:29:
cf:2e:5f:b3:0d:34:d6:6d:76:39:d3:9e:cb:7c:13:
1f:85:33:b0:93:21:1f:6a:e0:15:9e:c0:9f:31:51:
36:02:37:8e:31:b8:7f:af:12:47:97:7e:78:07:0e:
32:58:25:67:47:76:bb:c6:5a:13:fc:68:7e:e5:b4:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:CC:05:39:87:5C:4B:08:2F:E7:B4:21:38:F2:FE:A5:5D:52:B7
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.50.31.0/24
89.35.94.0/24
209.200.226.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:32:7e:a2:94:6d:f0:d9:1e:a8:dd:67:91:1a:ff:9d:41:15:
91:78:f0:04:90:0f:bc:57:e8:b5:0c:d0:b9:d2:ca:66:13:54:
51:a8:9e:83:e1:3d:eb:e4:db:5c:85:42:03:94:3a:57:4f:6c:
4b:87:b7:9c:22:f1:a0:1f:08:06:8e:21:2a:11:7d:24:ff:bf:
24:cf:9d:04:15:99:67:3f:15:9f:e3:cf:2d:e5:25:d6:c9:e4:
f7:f0:18:a0:99:fd:97:9e:a6:a9:b8:d1:3d:c8:bf:a7:41:84:
9a:f8:1a:af:20:a2:29:c9:39:4c:d8:1b:62:e9:51:0d:18:f0:
94:b6:8b:fa:0d:ff:8d:69:5c:c8:47:b4:ca:09:49:6b:92:05:
30:cf:8f:37:80:b5:25:29:b8:08:c8:d7:a8:02:5e:d2:78:bf:
2e:bd:1f:6c:03:8f:7d:c1:69:e5:e2:3e:72:71:7c:c2:98:db:
b4:ac:0b:c4:22:77:99:ea:40:c5:0b:39:3b:bd:69:8c:b4:2e:
02:59:b7:1a:1c:c4:81:6d:a1:dd:61:7f:ac:eb:a8:de:76:1e:
b5:db:0c:e2:5b:f8:64:07:61:f9:ec:07:ba:e3:37:ed:04:40:
5e:18:a0:68:26:5b:e8:a9:29:0c:2b:b7:49:51:90:d8:e4:78:
81:91:ba:ef
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUHAPW/6cQJ1uBRrrXTrntVALuz04wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwMTA5MjM1NTA5WhcNMjQwMTA5MDAwMDA5
WjAzMTEwLwYDVQQDEygwNjVBQ0MwNTM5ODc1QzRCMDgyRkU3QjQyMTM4RjJGRUE1
NUQ1MkI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXju/VAqIcfX
YlUbM+6UIEd+r8y9fAnCVtiSJGthV4n+Ot9Rbi9YoA5WyjUXJozVpZynwLqQsmu9
Wxe5FfgdKt/oFkjYj44xLBtZfNDGBNPkIimdh4StiXEiXkcFUnSszkxM3Nz65kQG
+xzKVo0JDNigJQlaMW3tbdTMsw3pTZcRzI2w6QdjkOfbPU3JMxAOJmWEfBq/XRaM
YTyvNHbNcbgcs/Bi+x20lJgxpOtqB2tj2C4jHdiMvr6HUmhU3IsgNCnPLl+zDTTW
bXY5057LfBMfhTOwkyEfauAVnsCfMVE2AjeOMbh/rxJHl354Bw4yWCVnR3a7xloT
/Gh+5bQ3UQIDAQABo4ICizCCAocwHQYDVR0OBBYEFAZazAU5h1xLCC/ntCE48v6l
XVK3MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMTA2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAEoyHwMEAFkjXgMEANHI4jANBgkq
hkiG9w0BAQsFAAOCAQEAazJ+opRt8NkeqN1nkRr/nUEVkXjwBJAPvFfotQzQudLK
ZhNUUaieg+E96+TbXIVCA5Q6V09sS4e3nCLxoB8IBo4hKhF9JP+/JM+dBBWZZz8V
n+PPLeUl1snk9/AYoJn9l56mqbjRPci/p0GEmvgaryCiKck5TNgbYulRDRjwlLaL
+g3/jWlcyEe0yglJa5IFMM+PN4C1JSm4CMjXqAJe0ni/Lr0fbAOPfcFp5eI+cnF8
wpjbtKwLxCJ3mepAxQs5O71pjLQuAlm3GhzEgW2h3WF/rOuo3nYetdsM4lv4ZAdh
+ewHuuM37QRAXhigaCZb6KkpDCu3SVGQ2OR4gZG67w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org