Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa
File: AS200160.roa (raw, json)
Hash identifier: TL0tnFwYQzjHmja2ZZdJIR9u5BTxENjs3gPi1Ctq6Dg=
Subject key identifier: 89:86:EF:44:F5:CC:83:94:E8:15:B2:1E:43:F5:B9:EE:C4:E2:45:E5
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 64C424F2146EB764DC76DFBEC46EA1E9ED6041EA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa
Signing time: Sat 04 Feb 2023 16:46:47 +0000
ROA not before: Sat 04 Feb 2023 16:41:47 +0000
ROA not after: Sat 03 Feb 2024 16:46:47 +0000
asID: 200160
IP address blocks: 2a06:a005:18d0::/44 maxlen: 48
2a06:a005:18f0::/44 maxlen: 48
2a06:a005:2380::/44 maxlen: 48
2a06:a005:2c00::/44 maxlen: 48
2a06:a005:2c80::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:c4:24:f2:14:6e:b7:64:dc:76:df:be:c4:6e:a1:e9:ed:60:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 4 16:41:47 2023 GMT
Not After : Feb 3 16:46:47 2024 GMT
Subject: CN=8986EF44F5CC8394E815B21E43F5B9EEC4E245E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:43:ad:53:9b:c1:a9:04:4e:81:9d:24:b6:
bf:8b:8a:1c:46:b1:1c:47:f8:ea:19:d7:61:4a:eb:
0b:00:07:5d:da:2f:69:60:19:ca:b2:91:e2:0b:11:
6c:18:bb:89:0d:13:13:13:a6:18:dc:66:0f:d5:4d:
9f:44:3d:ec:8b:9a:ab:ec:36:8b:9f:9a:d6:47:fb:
2e:ab:60:8c:c1:58:35:3a:9c:f6:4f:ab:e2:07:77:
2b:95:3b:03:07:df:7a:da:3e:6f:a8:91:68:73:98:
98:e3:00:92:13:ca:63:60:1b:80:8d:41:5f:5e:12:
76:7e:e8:29:93:ff:bf:7c:8e:40:40:39:e2:db:cd:
77:55:92:e7:32:76:8e:dc:ed:cc:2f:e7:b2:8c:3a:
86:3a:be:57:df:40:e5:e8:4b:81:e6:e2:af:c0:da:
aa:7f:92:13:1f:31:dd:2c:6d:1e:49:fa:df:01:c7:
07:3d:da:c8:61:6f:1f:a4:5b:22:f1:40:8b:24:6b:
76:a4:1b:22:3c:85:5c:f8:c4:df:09:f5:cd:a9:61:
8f:8a:dd:01:52:3a:74:97:c9:e8:19:a8:9a:be:23:
01:85:26:e7:84:fd:e8:36:a1:80:f8:b7:fd:01:ce:
ff:f2:24:df:4f:11:e0:99:fe:be:53:6f:20:9d:60:
88:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:86:EF:44:F5:CC:83:94:E8:15:B2:1E:43:F5:B9:EE:C4:E2:45:E5
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200160.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18d0::/44
2a06:a005:18f0::/44
2a06:a005:2380::/44
2a06:a005:2c00::/44
2a06:a005:2c80::/44
Signature Algorithm: sha256WithRSAEncryption
34:d2:30:a8:4c:7b:a9:00:9f:e3:92:35:e6:ae:31:50:e6:11:
3a:fb:31:26:a1:cc:68:58:9e:cc:7e:69:83:e2:3f:9a:9b:37:
25:45:69:a3:0e:c0:65:a2:74:0d:7e:d5:0f:21:ed:ed:1a:64:
7f:5f:18:c5:3f:a4:24:ba:cb:9f:44:c5:1f:2f:99:36:c6:bd:
1a:a0:f3:13:de:bc:4f:55:7b:43:56:ce:4e:b5:f5:18:03:84:
fa:19:95:12:85:17:cc:5b:e3:b1:25:8d:78:27:41:04:06:44:
94:60:69:6b:c3:d0:27:ac:b7:b7:b6:ce:9c:c4:89:2a:c3:1b:
5d:18:43:ee:43:e4:95:72:c6:44:9f:83:a9:80:04:fe:33:35:
97:0b:be:5d:e3:7a:41:e4:53:50:1b:1a:31:09:d3:19:41:63:
eb:e0:b4:da:e0:27:ef:ea:9a:06:77:b0:5b:7f:6e:76:5b:18:
93:25:d1:43:fc:ea:a3:b8:4a:4d:3b:4e:a5:16:4a:94:e7:ad:
80:68:7a:08:30:ee:87:3c:0f:5e:63:39:ba:49:cd:04:28:db:
3c:3a:7b:09:ca:44:a3:40:c7:3e:fe:25:66:80:fe:83:21:78:
2b:f1:24:ff:03:4c:c6:96:4b:fa:96:06:a2:50:79:0b:80:02:
24:e2:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org