Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199825.roa
File: AS199825.roa (raw, json)
Hash identifier: sb0J4sGtWt03Wrh1RZVyAH42FMAdmUcJkf8+ly3PhY0=
Subject key identifier: BA:DB:B9:C2:68:47:12:68:D8:64:EE:D3:01:E7:C1:1A:95:24:CD:DE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2711417A350C19CF0513E544766F47B3F9888871
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199825.roa
Signing time: Thu 16 Feb 2023 17:43:01 +0000
ROA not before: Thu 16 Feb 2023 17:38:01 +0000
ROA not after: Thu 15 Feb 2024 17:43:01 +0000
asID: 199825
IP address blocks: 2a06:a005:180a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:11:41:7a:35:0c:19:cf:05:13:e5:44:76:6f:47:b3:f9:88:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 16 17:38:01 2023 GMT
Not After : Feb 15 17:43:01 2024 GMT
Subject: CN=BADBB9C268471268D864EED301E7C11A9524CDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:a3:6a:47:6d:00:89:96:5f:25:2c:cf:8b:
bc:08:42:8c:ad:bf:61:49:0d:2a:75:aa:ca:34:58:
54:c2:b5:4e:29:61:14:2d:fb:03:06:e8:8d:6e:2b:
f6:c7:16:f2:3d:a8:88:37:94:d8:b8:7e:ff:a4:36:
87:3c:9e:9e:e3:7b:68:46:92:4a:f8:40:45:17:e4:
7e:b7:9c:79:06:18:ef:96:e5:9d:19:6b:a9:7e:d1:
72:8a:1c:9e:c3:63:6a:67:72:6c:46:a4:05:72:d0:
46:d3:91:da:f0:96:a7:08:9d:cd:c2:36:2c:58:b3:
45:00:27:29:c9:37:2a:5b:45:55:57:88:72:bf:19:
c3:16:9f:10:fb:5e:6b:d8:86:38:ce:f0:9f:e4:4e:
0b:64:09:5a:08:88:91:42:68:17:d9:48:96:52:f5:
bd:f8:a9:a2:61:41:a8:ec:e8:ad:50:c2:b3:c3:0f:
7e:44:3f:77:f8:56:7d:d7:33:49:59:96:74:3b:1c:
6c:3e:c3:4d:1d:fb:89:6d:ba:bf:25:15:a8:c9:3a:
1e:21:fd:4f:27:ee:69:80:81:65:5c:5c:13:42:38:
a2:ca:09:dc:e7:49:82:9f:e6:d9:f9:d6:86:37:f9:
62:55:06:d6:81:a1:0d:2d:4d:8e:4f:be:46:2b:9b:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DB:B9:C2:68:47:12:68:D8:64:EE:D3:01:E7:C1:1A:95:24:CD:DE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180a::/48
Signature Algorithm: sha256WithRSAEncryption
33:d7:60:10:cb:2c:15:89:97:e7:a4:69:2c:78:44:7b:3c:85:
47:32:26:66:6c:64:25:26:4a:75:67:35:a0:b7:1b:30:13:5d:
a8:17:f9:30:d1:84:dd:83:06:ca:17:25:89:2e:0d:4f:11:cd:
95:2d:57:77:a7:28:66:dd:79:47:80:b3:cd:82:6e:f6:e0:d7:
c7:95:c2:78:ad:0f:35:ce:3f:95:51:8d:cd:6c:3c:62:77:0c:
f2:75:9f:89:01:27:ff:15:4f:88:c1:2e:09:a0:8f:7f:fe:7c:
1a:64:ee:3a:1f:cc:c8:67:9d:8c:a9:af:d1:b9:91:70:cb:e1:
46:1d:89:a7:d5:11:ee:9b:e3:f2:a4:11:57:e1:29:02:f8:a9:
02:4f:2e:65:8e:fe:06:3f:21:09:af:07:95:2f:a1:b2:69:63:
63:75:63:9f:35:c5:77:74:29:78:8b:23:2f:5d:cb:3f:f0:53:
e2:73:1f:3d:d9:5c:b3:c8:ee:ce:a7:ed:99:c3:99:f4:02:85:
b7:ad:5d:ec:62:8f:7c:ff:83:ed:82:25:00:c3:8c:3d:4f:f6:
b8:30:16:ca:61:4f:92:ab:83:ea:59:fe:ff:59:03:dc:41:ef:
27:6d:d1:6c:3b:36:82:10:38:fd:f4:be:a6:12:c2:85:78:f1:
88:f2:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org