Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51559.roa
File: AS51559.roa (raw, json)
Hash identifier: z31/lIsISzQ+UE2CP/joazN+a3cBOPebr60ky7zTEAE=
Subject key identifier: A6:F9:79:4E:95:87:34:F5:47:A7:E9:B4:A7:4B:5D:21:A1:FA:C2:AF
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 6C2C0E16026ABE591BB7BAF1B69A763680C3359B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51559.roa
Signing time: Wed 12 Apr 2023 07:30:06 +0000
ROA not before: Wed 12 Apr 2023 07:25:06 +0000
ROA not after: Wed 10 Apr 2024 07:30:06 +0000
asID: 51559
IP address blocks: 209.200.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2c:0e:16:02:6a:be:59:1b:b7:ba:f1:b6:9a:76:36:80:c3:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Apr 12 07:25:06 2023 GMT
Not After : Apr 10 07:30:06 2024 GMT
Subject: CN=A6F9794E958734F547A7E9B4A74B5D21A1FAC2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:8e:c8:b5:7f:35:ec:33:d2:d3:46:4e:48:
f9:a8:10:0f:43:6f:7e:90:f5:bf:71:b2:c8:57:8d:
4b:3b:f3:33:52:03:33:28:bf:48:03:39:04:23:88:
5d:4f:32:3e:bf:d9:7a:f1:5b:dc:73:07:ac:21:30:
fb:d0:b7:3f:15:75:ac:c5:ec:d6:3d:7a:09:87:b3:
b7:45:76:c8:97:21:a1:f1:71:ed:dc:76:4f:a5:c1:
17:ac:2e:15:33:58:ae:8f:8e:44:36:41:8e:2c:d3:
17:f6:65:9c:07:16:34:d2:97:7e:ca:90:a8:8c:72:
cc:75:ca:cd:8d:92:4c:87:7e:d6:3c:39:ae:b0:a8:
d2:58:7f:0e:53:de:8a:e3:77:89:f0:e5:f7:7d:ee:
9a:43:5b:78:11:85:6d:8d:4c:2b:b6:1e:78:60:5e:
a9:7b:41:77:7b:b5:0a:39:8b:61:5c:bf:1f:7e:23:
01:47:ee:fe:9e:46:c6:db:9f:c1:07:a3:e2:b8:b7:
e4:64:e5:a0:bf:4f:5c:0d:c5:ee:75:c3:c0:17:4d:
38:2a:4f:9e:60:08:e5:ea:08:5f:73:69:02:3d:04:
f7:2e:22:24:dc:14:72:6b:59:e8:4e:8d:34:1c:7a:
ce:3d:85:23:46:36:cb:bc:7b:3b:4b:5f:a0:88:54:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F9:79:4E:95:87:34:F5:47:A7:E9:B4:A7:4B:5D:21:A1:FA:C2:AF
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS51559.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.200.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:65:b0:b8:43:cc:3f:5c:9f:5a:27:2c:41:5e:57:61:cf:da:
5b:f8:2c:7a:7c:9f:fd:d7:86:0a:37:86:8c:bd:d8:02:8d:f9:
8b:ec:c6:7f:81:0b:83:e8:19:71:6c:cf:bb:7e:dc:15:c0:29:
71:7c:e6:4b:33:91:59:dd:a3:29:50:53:c4:3a:27:f3:b8:bd:
5e:63:fa:17:cb:be:48:00:73:1c:ac:2a:d7:ac:74:eb:f1:c3:
70:95:80:12:08:a7:51:23:b9:90:bc:7e:6f:3d:cf:60:f2:0b:
ca:fc:d0:28:48:9c:11:5a:bc:2a:51:88:1c:31:a4:70:11:1a:
60:12:ca:b0:e9:96:af:67:61:41:fc:27:5c:10:48:35:f7:a0:
c6:d6:d3:f8:47:dd:6e:5b:d6:d2:b1:19:1c:59:3b:34:64:57:
15:72:bb:75:9b:71:11:f5:f3:b8:d9:54:35:26:83:56:72:e5:
76:95:cb:e8:56:a6:63:2f:72:34:9b:71:97:67:27:a2:89:b1:
e2:2b:55:5f:59:98:c5:31:93:b1:d9:51:80:85:78:75:61:0a:
60:8e:c0:fa:f7:64:18:76:e3:7a:2a:9c:96:35:c5:51:03:32:
8f:b0:6d:20:99:51:39:74:ee:6e:03:9a:80:d5:1c:a4:99:9c:
36:60:c6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org