Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212953.roa
File: AS212953.roa (raw, json)
Hash identifier: MJNAGH53+m7fEzckqpaXlKT2mfGhBjW9AkJxXBWCNlg=
Subject key identifier: 89:D9:42:73:60:F1:1B:DA:75:F9:D4:52:B6:3A:6E:FD:AB:AE:C6:C7
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 6B36AD540F24CE4DC9F6339A7749D439E09A095C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212953.roa
Signing time: Wed 12 Apr 2023 07:30:06 +0000
ROA not before: Wed 12 Apr 2023 07:25:06 +0000
ROA not after: Wed 10 Apr 2024 07:30:06 +0000
asID: 212953
IP address blocks: 209.200.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:36:ad:54:0f:24:ce:4d:c9:f6:33:9a:77:49:d4:39:e0:9a:09:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 12 07:25:06 2023 GMT
Not After : Apr 10 07:30:06 2024 GMT
Subject: CN=89D9427360F11BDA75F9D452B63A6EFDABAEC6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:24:91:f4:82:03:7c:c7:51:1d:b5:87:53:
e2:2e:09:33:d4:13:c6:ea:3a:e3:78:fe:2b:a9:51:
f1:fd:1c:c5:80:73:f4:d3:7b:fb:9a:d6:ac:15:2d:
c6:b7:cc:2f:c5:cd:8b:1f:dc:ea:fd:c5:a5:26:10:
2b:6c:5c:52:04:42:00:8e:e4:06:5f:ac:a9:1f:fe:
86:47:da:1f:c9:a7:80:1b:ce:8c:44:d1:23:9a:37:
65:9a:99:ce:65:97:ec:14:a6:a1:76:d2:bf:65:a3:
91:ca:02:a0:35:18:f7:87:25:4c:49:14:27:6a:27:
ec:22:a8:10:8f:e0:d3:80:aa:7d:1b:46:db:44:a3:
f7:84:53:15:30:ba:68:b5:ac:31:10:f6:3f:2c:ae:
2a:25:3e:1f:e6:00:ed:f7:e1:d3:23:14:43:4a:a6:
07:05:4f:a7:b1:7e:d3:f3:f2:f8:22:2f:f9:72:e8:
08:ff:21:e4:c4:b7:f2:4b:bf:33:d0:39:04:cd:11:
af:2f:b4:8f:8d:a5:7b:78:61:0d:ea:92:00:77:a4:
47:d1:a9:eb:14:92:c6:e9:ed:91:c8:57:fe:fb:31:
b1:fe:7d:8f:03:09:e8:e7:02:8b:0c:44:8f:3d:d9:
53:a5:6c:17:cf:87:75:77:8f:5b:3b:19:94:0e:57:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:42:73:60:F1:1B:DA:75:F9:D4:52:B6:3A:6E:FD:AB:AE:C6:C7
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212953.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
69:eb:1a:1d:f1:9b:b5:20:c6:de:3f:8e:d3:35:75:50:d8:6c:
1b:60:e3:8a:91:9b:52:56:33:d2:73:10:e8:74:22:9a:85:08:
fa:f7:1e:94:8d:1c:69:d6:a8:11:d1:0f:e9:95:b7:46:06:11:
50:48:97:4b:62:b0:b3:62:db:a6:95:e2:6c:0a:5e:24:92:7f:
61:af:be:57:fc:c1:bb:0b:3e:8e:64:8e:d0:e7:ec:2a:7e:26:
b3:f1:81:41:32:26:26:1f:0a:fa:10:d0:31:af:09:95:18:c4:
2c:77:fd:04:60:9a:bc:ea:05:86:8f:6e:9c:6b:1d:02:a9:a3:
73:93:bc:e5:43:88:a7:07:70:be:85:06:a9:63:b0:92:e4:8e:
68:b0:5c:41:a2:1a:fb:d1:7b:a0:16:1d:4b:3d:10:92:3f:ca:
72:aa:da:55:9a:df:b3:0e:c0:e2:6f:d6:df:ce:be:c0:e6:ef:
1a:03:a0:e7:83:25:09:38:9c:1e:74:3f:cf:d0:7b:18:f1:98:
d5:5c:d7:83:ea:67:2b:7b:2e:80:a2:20:67:f9:70:17:ec:69:
e6:70:4e:ae:d3:7b:50:5a:21:fe:20:82:7e:92:c8:65:68:96:
73:d5:9f:02:62:3b:87:fb:7f:2b:26:f8:a4:4c:56:17:be:90:
e2:dd:3c:41
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUazatVA8kzk3J9jOad0nUOeCaCVwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwNDEyMDcyNTA2WhcNMjQwNDEwMDczMDA2
WjAzMTEwLwYDVQQDEyg4OUQ5NDI3MzYwRjExQkRBNzVGOUQ0NTJCNjNBNkVGREFC
QUVDNkM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMgkkfSCA3zH
UR21h1PiLgkz1BPG6jrjeP4rqVHx/RzFgHP003v7mtasFS3Gt8wvxc2LH9zq/cWl
JhArbFxSBEIAjuQGX6ypH/6GR9ofyaeAG86MRNEjmjdlmpnOZZfsFKahdtK/ZaOR
ygKgNRj3hyVMSRQnaifsIqgQj+DTgKp9G0bbRKP3hFMVMLpotawxEPY/LK4qJT4f
5gDt9+HTIxRDSqYHBU+nsX7T8/L4Ii/5cugI/yHkxLfyS78z0DkEzRGvL7SPjaV7
eGEN6pIAd6RH0anrFJLG6e2RyFf++zGx/n2PAwno5wKLDESPPdlTpWwXz4d1d49b
OxmUDlevwQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFInZQnNg8RvadfnUUrY6bv2r
rsbHMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIxMjk1My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANHI9jANBgkqhkiG9w0BAQsFAAOC
AQEAaesaHfGbtSDG3j+O0zV1UNhsG2DjipGbUlYz0nMQ6HQimoUI+vcelI0cadao
EdEP6ZW3RgYRUEiXS2Kws2LbppXibApeJJJ/Ya++V/zBuws+jmSO0OfsKn4ms/GB
QTImJh8K+hDQMa8JlRjELHf9BGCavOoFho9unGsdAqmjc5O85UOIpwdwvoUGqWOw
kuSOaLBcQaIa+9F7oBYdSz0Qkj/KcqraVZrfsw7A4m/W386+wObvGgOg54MlCTic
HnQ/z9B7GPGY1VzXg+pnK3sugKIgZ/lwF+xp5nBOrtN7UFoh/iCCfpLIZWiWc9Wf
AmI7h/t/Kyb4pExWF76Q4t08QQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org