Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43431.roa
File: AS43431.roa (raw, json)
Hash identifier: nzBkCBky6QtjLCwTGu86rjqElU9Hz1+Y0jWqj1+FUEA=
Subject key identifier: 8B:F4:A5:B6:0E:9D:2E:55:E2:EB:4D:07:F5:23:91:D7:36:B4:DB:EF
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1127F7959E787B2D8F8E932531868C8AE1FB2168
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43431.roa
Signing time: Tue 07 Feb 2023 14:53:42 +0000
ROA not before: Tue 07 Feb 2023 14:48:42 +0000
ROA not after: Tue 06 Feb 2024 14:53:42 +0000
asID: 43431
IP address blocks: 209.200.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:27:f7:95:9e:78:7b:2d:8f:8e:93:25:31:86:8c:8a:e1:fb:21:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Feb 7 14:48:42 2023 GMT
Not After : Feb 6 14:53:42 2024 GMT
Subject: CN=8BF4A5B60E9D2E55E2EB4D07F52391D736B4DBEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:51:72:cd:fe:08:00:89:ac:95:49:5b:bf:
2f:7d:db:3c:62:46:0b:8a:9b:e7:5e:25:35:ba:ff:
08:91:f5:07:a7:0b:3e:72:92:68:b0:ef:5a:cf:bd:
5b:db:9f:30:bf:76:7e:05:7b:35:8d:d0:81:a4:35:
14:c6:fd:da:81:c3:b8:0e:55:a1:b0:8e:1d:5a:01:
58:d5:ba:ee:6a:b1:c0:64:8f:ca:6a:8e:66:76:21:
1c:72:77:4d:13:b9:c7:47:73:6e:08:c0:4b:79:18:
ad:2e:94:6c:79:1b:ea:d1:85:9e:2d:ec:08:72:26:
e0:7c:f5:de:d6:70:da:89:1f:2e:c0:e6:3b:f1:98:
d8:fd:96:35:85:bd:33:34:28:8f:a6:3e:b4:e2:41:
52:bb:33:f2:cd:56:1c:b0:3d:4f:e2:77:51:21:e9:
14:1a:59:15:8c:6f:0b:9e:68:a9:ea:19:89:db:62:
1e:bb:a3:51:bf:e4:1c:46:29:8d:6b:bc:fa:02:df:
be:b6:1e:db:da:d7:e0:3d:a9:98:a4:1f:ed:96:c8:
f1:d4:9f:00:bc:54:9f:f7:3a:b7:da:ff:f8:f1:04:
31:c5:1e:e1:09:ea:6b:ab:76:f9:07:0e:3f:3a:a1:
54:da:10:03:a5:a3:4e:38:e2:b6:6c:a6:a1:71:e3:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:A5:B6:0E:9D:2E:55:E2:EB:4D:07:F5:23:91:D7:36:B4:DB:EF
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS43431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.235.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a2:09:c9:84:d3:b3:bb:46:1b:d7:89:57:8b:a9:74:e6:d3:
de:59:e7:95:79:04:2b:7d:77:34:e7:bb:63:c3:05:05:21:20:
f4:b0:f4:f6:82:5f:b0:ca:03:26:58:8d:c4:c0:3f:d2:e2:6f:
ab:ce:15:82:44:e0:f0:9e:b9:90:78:1b:09:8b:10:af:4a:8c:
fe:2a:e1:99:52:5c:9e:42:24:72:8d:c0:51:c4:b1:db:fd:9a:
bf:32:e6:ca:2c:f5:e8:38:bc:d8:25:52:f4:01:8f:c8:1b:77:
ff:3d:91:67:57:5f:d5:a2:c0:d8:6d:f7:30:d5:ce:1f:82:a6:
95:42:8e:32:68:0f:a5:89:ab:4e:d9:a9:f1:47:55:4a:03:7c:
0b:d6:d1:63:8d:46:e4:41:14:84:33:0b:60:5c:cb:b1:32:f6:
0e:ba:3d:4e:9c:4f:50:37:32:5e:bc:ef:dd:6f:77:f4:7d:8d:
5f:62:bd:a7:8f:d6:7f:fe:8e:dc:5a:ba:f1:a0:1b:a9:08:d3:
db:8a:13:6e:a5:d2:e6:70:59:3c:5a:c2:69:4c:8b:e1:11:fa:
9c:bb:76:bb:8d:61:6a:a4:1c:68:5e:bd:e1:13:ba:f0:2d:f6:
70:75:87:cc:f1:f8:8c:07:cf:dc:e4:22:8a:c1:8f:05:3a:3b:
24:a8:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org