Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200566.roa
File: AS200566.roa (raw, json)
Hash identifier: JixZ0mb9CBlRzDcFOXQ78TWKjTmbSs8420nYmVNf9R8=
Subject key identifier: 37:5F:79:09:3A:25:B9:3E:8F:B5:E9:00:3A:7A:7E:EF:84:FA:5A:13
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2F8E4EACC890503F53E6E5CAE985DBC57B6B9A32
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200566.roa
Signing time: Sun 08 Jan 2023 02:14:01 +0000
ROA not before: Sun 08 Jan 2023 02:09:01 +0000
ROA not after: Sun 07 Jan 2024 02:14:01 +0000
asID: 200566
IP address blocks: 2a06:a005:2690::/44 maxlen: 48
2a06:a005:28a0::/44 maxlen: 48
2a06:a005:28b0::/44 maxlen: 48
2a06:a005:28c0::/44 maxlen: 48
2a06:a005:28d0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8e:4e:ac:c8:90:50:3f:53:e6:e5:ca:e9:85:db:c5:7b:6b:9a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 8 02:09:01 2023 GMT
Not After : Jan 7 02:14:01 2024 GMT
Subject: CN=375F79093A25B93E8FB5E9003A7A7EEF84FA5A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:a8:8e:93:7d:9b:4c:78:a3:65:a2:2f:f4:
a7:22:8d:70:5a:b9:3f:29:80:6e:67:47:6e:fb:d1:
d0:87:9a:16:cc:66:74:29:82:c6:da:84:48:ec:0d:
3f:f8:fb:1d:e9:1a:c6:a7:32:d2:d1:6f:3a:d2:37:
7e:cd:93:b5:34:2e:46:8f:74:13:8e:ee:39:3f:4b:
a2:c2:67:e4:8d:0c:64:54:73:06:b6:6a:e1:e7:67:
5e:b4:72:36:41:1a:a9:79:41:a8:c9:8f:18:dc:1f:
e6:0d:d2:22:f0:74:b1:03:1d:e8:9a:26:d3:b5:df:
f3:bb:06:17:01:5c:bc:f3:e2:fa:d3:c4:d2:7e:34:
8a:d8:72:cf:65:9d:df:62:d9:ed:97:5c:0e:5e:85:
83:ae:3e:6a:5d:77:57:42:12:c0:ba:db:53:90:dc:
e7:5b:a9:da:f7:93:00:c6:21:5b:17:84:28:a3:94:
f7:e5:f1:f0:66:46:90:35:e8:47:88:a7:da:57:e0:
ed:5e:94:c7:5c:02:1e:90:d7:77:c9:bb:dc:bb:04:
e7:53:5d:eb:21:f5:95:2a:47:44:8c:00:52:4c:99:
10:f8:e1:37:02:5e:4a:5b:71:d5:4f:80:22:8f:d3:
1a:07:56:da:56:b7:88:fe:26:5b:7a:33:ea:1e:56:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:79:09:3A:25:B9:3E:8F:B5:E9:00:3A:7A:7E:EF:84:FA:5A:13
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200566.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2690::/44
2a06:a005:28a0::-2a06:a005:28df:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
91:87:dc:95:69:42:80:4f:db:36:ec:ef:1a:29:03:51:63:9b:
4b:ea:69:5e:23:16:70:3f:cb:3c:3a:25:2f:49:58:b5:e4:1b:
7f:9b:ee:4e:73:c2:13:94:65:b0:67:e1:95:8d:a9:cb:38:15:
37:b8:40:21:02:66:94:57:ed:92:a3:4f:42:35:16:d5:ce:ec:
3d:25:fa:97:74:d7:f3:0e:cc:d8:ca:89:da:0a:97:41:42:0e:
0d:c6:08:5a:71:68:4a:c6:25:11:29:f0:a3:a2:0f:aa:38:45:
16:75:93:fa:39:fd:5a:ba:ae:be:e1:08:0e:67:04:a4:33:cb:
58:d2:09:2e:04:1b:0d:a6:5d:67:20:0c:a1:c4:c8:00:d6:1a:
6b:1e:8a:c2:7d:b7:4b:f8:af:47:cd:57:3a:02:21:33:37:e3:
a2:ec:ed:48:5e:84:12:45:ff:ad:66:24:0f:43:b1:dc:8a:01:
dd:c9:98:fb:4f:77:f3:37:f1:6f:3a:cb:3d:46:aa:cc:af:09:
af:c7:5a:24:dd:78:d2:5e:0e:24:8f:46:cd:41:8a:cd:fe:17:
34:11:53:c4:42:8d:75:ee:98:45:a0:1b:a0:d7:bf:b0:88:d0:
e4:64:1b:7c:9f:21:7d:1a:69:6a:b8:10:6c:36:a0:e0:df:b5:
d0:03:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org