Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202550.roa
File: AS202550.roa (raw, json)
Hash identifier: K3ocmGX7XUwOKIjiIU1oUR/ZoTFubZkZKyMRdIAPy0o=
Subject key identifier: E6:AE:C2:83:6F:F2:4A:D4:65:96:1E:CA:49:7A:D4:34:68:7B:01:65
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 553F19FB9895450CA13854679A3BB03138D1A21C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202550.roa
Signing time: Fri 20 Jan 2023 23:41:05 +0000
ROA not before: Fri 20 Jan 2023 23:36:05 +0000
ROA not after: Fri 19 Jan 2024 23:41:05 +0000
asID: 202550
IP address blocks: 2a06:a005:d2b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:3f:19:fb:98:95:45:0c:a1:38:54:67:9a:3b:b0:31:38:d1:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 20 23:36:05 2023 GMT
Not After : Jan 19 23:41:05 2024 GMT
Subject: CN=E6AEC2836FF24AD465961ECA497AD434687B0165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:67:91:8f:61:69:ab:5b:ef:00:d7:43:a0:
aa:07:fe:d3:19:83:ad:ff:de:c0:ba:f4:03:38:e7:
6f:2b:d7:90:85:94:a4:62:f6:16:0d:65:66:a4:72:
42:44:58:ed:d1:bc:c3:c0:1e:a3:3f:b9:da:60:01:
5e:3c:2e:40:c1:3f:03:bc:d5:b0:02:b4:1d:15:79:
48:52:fa:e7:98:2b:4b:8d:1e:02:22:a0:6e:7e:c6:
42:e9:e8:d2:c2:78:81:66:4f:3e:15:cf:db:fc:71:
6a:11:b1:aa:87:03:3a:2c:bf:c6:f5:f3:8e:ea:04:
d3:eb:75:bc:4f:25:43:fb:8a:c0:0e:d9:e7:5d:00:
0a:79:a1:b4:6b:3f:9e:50:18:6a:63:a3:22:aa:7e:
68:02:8b:39:fa:75:ec:f4:a9:d8:2a:37:11:69:68:
5b:2b:75:70:6c:55:4a:5b:99:3e:12:bd:8d:97:74:
4c:51:3f:c1:e3:13:74:99:24:61:b9:ae:3b:15:54:
d2:7d:fa:17:01:a7:38:9b:fd:74:8e:47:c2:5b:fc:
ed:30:1a:0c:7c:60:1c:8c:d3:fa:6e:a4:d2:5b:af:
36:6f:56:ac:ea:7d:98:e9:5b:c5:75:a0:c7:b8:4a:
ce:32:eb:fa:ae:62:05:d0:f6:04:97:c8:b2:89:9f:
47:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:C2:83:6F:F2:4A:D4:65:96:1E:CA:49:7A:D4:34:68:7B:01:65
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202550.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7b:4b:f0:a5:af:f9:4a:4b:a5:ff:6e:67:5c:d9:0f:30:c0:
a3:fd:d9:5f:f6:65:b6:27:1a:1c:01:f1:e2:5b:8f:23:c3:8c:
6e:fa:40:cb:22:4a:35:82:94:fa:9d:1a:8d:26:e8:46:67:9b:
9d:34:17:48:9a:95:fc:dd:60:07:5a:a0:9e:3b:9b:2a:2e:8a:
19:46:c9:0a:52:87:be:12:44:43:e4:77:62:42:d6:09:13:a2:
06:be:0a:58:a2:8c:15:b0:84:de:b4:4f:b1:bb:69:54:03:aa:
1c:e1:bb:12:d6:23:4e:da:05:07:2e:e3:1c:c0:f3:e2:30:5e:
e5:4a:1a:8e:f5:01:29:b0:56:60:0c:5d:1b:10:71:13:d1:4e:
4e:b9:43:13:d0:41:d2:78:e2:0d:85:7e:07:45:c8:05:77:7c:
71:58:81:59:aa:26:ff:38:af:fe:68:d7:0e:68:27:4b:8f:41:
0a:76:36:43:47:1b:ab:c6:24:df:06:d1:b3:b2:a0:33:40:d0:
89:19:61:0b:ac:d8:a1:59:20:ed:3e:23:e6:f2:35:03:ef:32:
f5:48:a8:da:70:bf:61:6c:d3:5f:54:ea:4f:d0:2e:3e:47:53:
cf:da:65:47:e2:7b:88:75:1f:d7:61:fc:f7:f4:60:69:83:cd:
a8:33:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org