Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60707.roa
File: AS60707.roa (raw, json)
Hash identifier: XzcknEIYyMdLpkZ2JVIjXB9j5aXPTh6Jz9L74+p6vPA=
Subject key identifier: CE:D2:B8:54:FB:C9:C8:27:59:CD:2F:4C:84:E2:7C:63:0F:A3:03:5D
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 4353E31B0E05E657C0D4FE106756B5323B1BA2D1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60707.roa
Signing time: Mon 20 Mar 2023 22:10:53 +0000
ROA not before: Mon 20 Mar 2023 22:05:53 +0000
ROA not after: Mon 18 Mar 2024 22:10:53 +0000
asID: 60707
IP address blocks: 64.50.184.0/24 maxlen: 24
162.213.1.0/24 maxlen: 24
216.227.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:53:e3:1b:0e:05:e6:57:c0:d4:fe:10:67:56:b5:32:3b:1b:a2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 20 22:05:53 2023 GMT
Not After : Mar 18 22:10:53 2024 GMT
Subject: CN=CED2B854FBC9C82759CD2F4C84E27C630FA3035D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:4b:ef:05:96:d6:fe:b0:e2:f8:43:30:2f:
7f:61:9c:57:de:7d:8d:af:10:b4:24:23:7b:b5:ba:
d3:82:96:d0:51:c2:f3:2a:1e:00:fe:03:a4:36:53:
30:2b:e1:36:a0:68:d0:3b:fe:03:dd:ea:f7:a1:cb:
59:eb:fb:0e:18:29:ba:7c:0c:69:e0:c1:0f:f8:ea:
58:07:d5:3a:32:c2:1e:17:95:b4:f2:3d:a4:b6:a9:
61:fc:24:4c:bf:10:d6:f2:0e:bf:79:16:10:b5:5e:
2e:29:90:92:cc:9b:1a:20:e1:29:f0:97:66:48:98:
28:92:81:e4:c6:32:88:7e:13:22:82:f2:56:70:ec:
1e:59:e4:a7:b3:f8:fe:a5:61:3f:37:54:85:93:a7:
56:86:bd:b4:a2:8c:a8:1d:00:55:3a:c7:2f:37:54:
5c:be:50:00:42:fd:de:90:1c:c9:97:fd:53:16:ae:
23:6d:a5:86:18:8d:02:27:b4:0d:08:4b:d0:61:57:
79:31:b6:5f:29:5d:5e:33:40:ea:54:22:41:b7:e2:
28:1e:46:38:7b:3d:94:ab:0d:79:0b:bd:12:9f:3f:
ad:4d:96:0b:44:aa:0c:ba:a5:50:eb:57:e3:68:0e:
be:91:74:00:72:79:b1:2e:13:6c:53:aa:dc:b0:bf:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:B8:54:FB:C9:C8:27:59:CD:2F:4C:84:E2:7C:63:0F:A3:03:5D
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS60707.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.50.184.0/24
162.213.1.0/24
216.227.222.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b7:7d:e0:27:0f:23:27:2c:ce:9b:6a:26:55:5d:71:01:dc:
2e:e4:cb:ee:ac:91:63:32:65:6c:9b:68:39:05:e8:68:0c:f5:
68:73:9e:4a:d4:16:71:a4:1b:57:3d:11:ea:71:31:7d:b6:06:
10:1a:88:46:73:f2:30:44:c7:30:65:1c:de:d7:dd:d9:08:30:
28:83:6d:84:87:d5:73:a6:90:86:0b:54:22:a8:a6:86:34:f8:
69:89:49:f7:b0:70:2f:97:c3:5b:ce:ed:f7:f4:75:ca:17:63:
55:53:f7:ad:37:ff:24:f9:8b:dd:57:98:d0:11:ad:bb:bd:97:
64:a4:1a:56:59:c7:9a:0d:5e:2c:41:80:04:60:a8:4d:70:bd:
2c:69:48:bc:5d:d8:37:80:88:7a:52:c3:ee:13:b0:2c:d6:6d:
a0:b5:48:fe:8a:fb:0a:5e:ba:63:13:b2:ab:a2:1d:e1:49:56:
e9:0f:1f:a5:a9:56:e5:55:a2:22:31:05:63:40:1e:ab:5f:b1:
6b:cd:3b:a7:9e:a4:86:dd:25:6b:44:55:c4:47:56:b1:d1:ad:
61:c3:78:23:1c:30:d5:69:51:a9:1d:d0:d7:08:0b:50:88:3d:
61:bf:53:90:6d:df:25:87:92:5b:b2:9d:4c:26:fc:27:4f:ed:
40:f3:8a:26
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUQ1PjGw4F5lfA1P4QZ1a1MjsbotEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwMzIwMjIwNTUzWhcNMjQwMzE4MjIxMDUz
WjAzMTEwLwYDVQQDEyhDRUQyQjg1NEZCQzlDODI3NTlDRDJGNEM4NEUyN0M2MzBG
QTMwMzVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvltL7wWW1v6w
4vhDMC9/YZxX3n2NrxC0JCN7tbrTgpbQUcLzKh4A/gOkNlMwK+E2oGjQO/4D3er3
octZ6/sOGCm6fAxp4MEP+OpYB9U6MsIeF5W08j2ktqlh/CRMvxDW8g6/eRYQtV4u
KZCSzJsaIOEp8JdmSJgokoHkxjKIfhMigvJWcOweWeSns/j+pWE/N1SFk6dWhr20
ooyoHQBVOscvN1RcvlAAQv3ekBzJl/1TFq4jbaWGGI0CJ7QNCEvQYVd5MbZfKV1e
M0DqVCJBt+IoHkY4ez2Uqw15C70Snz+tTZYLRKoMuqVQ61fjaA6+kXQAcnmxLhNs
U6rcsL8wGwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFM7SuFT7ycgnWc0vTITifGMP
owNdMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzYwNzA3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQDK4AwQAotUBAwQA2OPeMA0GCSqG
SIb3DQEBCwUAA4IBAQBFt33gJw8jJyzOm2omVV1xAdwu5MvurJFjMmVsm2g5Beho
DPVoc55K1BZxpBtXPRHqcTF9tgYQGohGc/IwRMcwZRze193ZCDAog22Eh9VzppCG
C1QiqKaGNPhpiUn3sHAvl8Nbzu339HXKF2NVU/etN/8k+YvdV5jQEa27vZdkpBpW
WceaDV4sQYAEYKhNcL0saUi8Xdg3gIh6UsPuE7As1m2gtUj+ivsKXrpjE7Kroh3h
SVbpDx+lqVblVaIiMQVjQB6rX7FrzTunnqSG3SVrRFXER1ax0a1hw3gjHDDVaVGp
HdDXCAtQiD1hv1OQbd8lh5Jbsp1MJvwnT+1A84om
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org