Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202573.roa
File: AS202573.roa (raw, json)
Hash identifier: WWQBqhp8lk3DVwIbOhNgUZXVOLlTwznyKkkiFLhBgAM=
Subject key identifier: 1C:54:95:1A:96:00:04:17:B9:D3:AC:2E:0F:28:D8:53:56:D6:BA:AF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7E1C537100FD459828B0BC4ECECF9DD20ED54CE9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202573.roa
Signing time: Tue 03 Jan 2023 02:07:09 +0000
ROA not before: Tue 03 Jan 2023 02:02:09 +0000
ROA not after: Tue 02 Jan 2024 02:07:09 +0000
asID: 202573
IP address blocks: 2a06:a005:1ed0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:1c:53:71:00:fd:45:98:28:b0:bc:4e:ce:cf:9d:d2:0e:d5:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:09 2023 GMT
Not After : Jan 2 02:07:09 2024 GMT
Subject: CN=1C54951A96000417B9D3AC2E0F28D85356D6BAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:30:6f:76:0d:14:ec:a2:5b:c8:24:00:2f:
6d:e5:79:e5:68:a0:7f:73:95:b6:2d:4a:71:07:14:
a6:bb:8e:ba:2b:42:17:08:dc:ff:3c:ee:96:61:ef:
2d:ae:23:f2:13:37:70:b8:b6:57:93:fc:36:fd:f3:
e8:ec:81:0c:07:8a:5a:12:6d:f9:05:6e:65:f2:ab:
ab:99:6d:2a:d5:13:f3:da:58:15:6c:da:e3:61:24:
6f:9c:be:24:cb:10:e6:f8:52:35:5e:38:b4:9c:3f:
52:af:8c:d1:9a:a0:fd:41:85:11:a3:8c:db:f3:21:
b4:12:34:13:4e:e8:ad:77:b7:7e:1c:3a:4c:11:3b:
45:46:a4:6c:8e:42:54:cc:e5:38:56:c3:11:53:4a:
92:5d:4e:bd:13:5c:c9:51:a1:ff:b8:45:6d:8a:ff:
07:a1:86:22:26:5d:3b:be:1e:e8:e0:79:dd:19:fa:
37:43:3e:a0:dc:61:a3:b0:f9:41:91:51:20:29:e5:
03:9d:f0:d0:21:92:7a:73:bc:1e:b9:c5:db:35:aa:
8c:28:b1:e1:2a:45:83:65:9d:c5:ec:41:da:bd:e8:
6c:e6:14:b1:52:1e:8d:4f:4a:08:7b:4a:1c:69:75:
8c:c7:b7:3f:b5:20:11:3a:2d:66:0c:e8:56:b0:08:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:95:1A:96:00:04:17:B9:D3:AC:2E:0F:28:D8:53:56:D6:BA:AF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202573.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ed0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:4f:9f:1e:0c:d3:92:7a:3d:94:09:e0:d4:9a:44:d2:04:55:
7f:94:61:64:5b:9b:f3:93:54:68:fa:47:f6:1b:0d:3f:f6:74:
2f:d4:82:79:10:6b:a4:9a:39:00:41:a5:87:88:15:5d:28:e6:
55:72:94:fd:3d:66:33:1a:26:c3:c7:a6:40:2e:d7:75:52:17:
5e:6f:cb:57:0a:25:cc:43:00:bf:b4:d9:85:cf:dd:54:32:12:
59:1c:da:8e:fa:fd:0f:42:08:90:97:0a:12:e1:49:9b:cb:25:
ee:63:42:e2:77:2b:bd:28:98:e5:41:ea:55:d8:dc:6e:4e:7e:
d8:0e:b5:b1:1c:92:5e:a8:a6:db:28:da:bf:4c:92:95:0e:b0:
75:1c:08:0f:5f:3c:a5:e8:dd:1e:5f:8f:a9:66:35:31:9f:bc:
aa:f1:8c:c7:e2:40:9a:1e:00:93:69:4a:46:5b:4c:31:9e:2a:
b9:86:0b:e0:9d:22:6f:e2:27:28:ca:6f:2e:cf:a0:0f:97:8a:
6c:5a:ea:38:46:64:44:b3:a5:01:ac:c1:ef:20:7f:25:c8:a3:
ab:cc:71:13:17:a9:ed:37:40:fb:74:d4:98:aa:52:a3:fc:71:
e2:48:fc:50:82:4d:e5:d3:f8:ca:26:5b:99:01:b5:ee:2b:6d:
53:38:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org