Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136258.roa
File: AS136258.roa (raw, json)
Hash identifier: SLd+CloPBAcVCeMLbaAVSTp9acmvwM/21nlOucDgdsI=
Subject key identifier: 72:DD:19:2B:BE:03:CA:3D:7B:E1:03:86:9A:38:78:29:68:F8:64:30
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6A4444504B0F84436AB26FC2EE4411C46AC0FAF7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136258.roa
Signing time: Tue 03 Jan 2023 02:07:04 +0000
ROA not before: Tue 03 Jan 2023 02:02:04 +0000
ROA not after: Tue 02 Jan 2024 02:07:04 +0000
asID: 136258
IP address blocks: 185.90.61.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:44:44:50:4b:0f:84:43:6a:b2:6f:c2:ee:44:11:c4:6a:c0:fa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:04 2023 GMT
Not After : Jan 2 02:07:04 2024 GMT
Subject: CN=72DD192BBE03CA3D7BE103869A38782968F86430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:da:1b:08:15:69:79:7c:af:c0:7a:f7:1c:
c9:8e:fb:6f:3d:25:97:51:d4:e2:48:41:5f:1e:db:
0c:d5:6c:8d:b3:47:5f:5f:b0:dd:30:7a:42:67:07:
48:5b:c4:00:e0:0c:b1:11:c8:d5:b2:77:ea:8f:d4:
b4:29:b6:a2:77:70:4f:45:b6:bd:c6:30:4a:be:d2:
cd:53:83:0f:f3:07:af:81:83:d4:ce:8a:dc:d4:ce:
92:0d:f6:bf:8f:8b:4c:78:a4:c7:d9:a6:e7:0b:5f:
b6:17:25:f4:ff:c3:63:13:1a:cb:75:37:22:1a:16:
42:b5:39:50:58:b0:fe:53:a3:f7:c1:7f:24:b7:ae:
8d:0e:1d:05:c6:c9:8e:ca:33:0e:43:50:0f:fc:fc:
6e:5c:89:57:a4:f8:88:ec:e5:f4:54:77:cc:18:cc:
2f:aa:ca:57:49:d5:6c:2b:d2:43:04:ef:e8:c4:2e:
12:10:35:b5:58:a0:ec:ec:da:03:df:a8:52:15:10:
39:08:e5:50:a6:87:f3:f7:3b:30:64:de:63:f6:c5:
f6:70:02:98:ac:dc:ef:cb:a8:94:42:c9:c8:27:1c:
d9:f7:10:57:9d:fd:8a:d9:20:85:9d:f9:d9:33:63:
e1:8c:f4:40:e4:55:94:27:d4:66:93:a4:fa:70:0e:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:19:2B:BE:03:CA:3D:7B:E1:03:86:9A:38:78:29:68:F8:64:30
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS136258.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:06:18:67:85:05:e5:c6:8c:4f:9a:16:a6:5e:c3:49:13:87:
15:5a:b1:0e:ef:02:25:5b:24:ee:14:58:21:e7:2c:f8:a3:98:
d0:7c:06:a2:8d:74:73:cf:3a:a9:0a:b5:8c:4f:a4:58:b5:da:
57:fa:97:e6:00:c0:96:7c:47:e1:30:88:ae:cb:2b:bb:33:f9:
27:97:c8:d6:a0:51:9d:bd:43:a9:e4:db:12:d7:06:7c:5e:5e:
e6:2d:b7:95:a6:af:ee:fe:76:a9:fd:9a:10:8d:f9:86:2d:83:
35:f8:b7:f4:3f:1c:d1:05:b1:8f:79:27:51:eb:37:f3:8b:5a:
e5:0b:b4:18:b7:b1:77:08:02:96:54:e9:7e:95:25:0b:bb:14:
e6:5d:d2:91:6c:ad:cc:a3:11:9d:29:5a:09:23:d6:dd:f3:42:
75:ca:3a:17:d1:1d:df:48:00:99:3d:13:a8:13:25:1b:da:29:
3b:2e:da:34:ca:19:ba:97:79:da:fd:ae:8f:b7:70:24:95:c1:
f7:2d:41:f6:e9:c9:48:91:f4:a6:96:84:2a:8a:24:4d:42:b8:
53:ad:c3:8a:70:0f:89:06:ae:a4:37:50:d9:cb:38:6a:84:ee:
db:60:20:a6:26:04:90:62:80:db:df:8a:42:11:bd:24:90:23:
f6:38:98:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 19:24:47 2023 by rpki-client on console-ams.rpki-client.org