Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa
File: AS202685.roa (raw, json)
Hash identifier: JDI0ncVOxy7WQAMwo1wvufw6RDVxYZkzm+IZmlIGhNk=
Subject key identifier: 20:96:EB:5A:93:3A:3D:26:37:5B:22:D5:22:70:86:4F:C7:47:86:B4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6B78DFCFC37928905231E592E495316DEB4BC857
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa
Signing time: Fri 13 Jan 2023 21:45:28 +0000
ROA not before: Fri 13 Jan 2023 21:40:28 +0000
ROA not after: Fri 12 Jan 2024 21:45:28 +0000
asID: 202685
IP address blocks: 2a06:a005:1e80::/44 maxlen: 48
2a06:a005:1e90::/44 maxlen: 48
2a06:a005:1ea0::/44 maxlen: 48
2a06:a005:1eb0::/44 maxlen: 48
2a06:a005:1ec0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:78:df:cf:c3:79:28:90:52:31:e5:92:e4:95:31:6d:eb:4b:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 13 21:40:28 2023 GMT
Not After : Jan 12 21:45:28 2024 GMT
Subject: CN=2096EB5A933A3D26375B22D52270864FC74786B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:46:7c:13:12:36:47:31:5e:80:19:dd:3c:
33:02:6b:5d:da:ae:46:5a:c5:77:e4:b1:31:49:9a:
a7:5a:16:52:56:c1:91:6c:d3:59:0f:73:d4:7b:03:
47:11:9c:2a:a1:80:d0:0d:c8:d5:14:34:f0:c7:56:
94:ef:41:27:b2:51:df:24:b0:62:d2:0c:a7:1c:1b:
74:b1:81:9f:b0:4d:28:50:6e:d2:29:5a:17:57:6d:
62:b2:5d:82:23:7d:8b:7e:e7:88:1b:8e:8c:85:36:
ad:65:63:ce:63:71:69:3c:7c:25:43:b5:ce:d2:7c:
1a:ac:9c:26:84:68:2d:19:16:ad:62:4b:20:c9:25:
e1:94:c2:5a:99:8e:37:04:39:d7:d9:f2:68:d5:a6:
f7:a6:fd:61:66:5c:fd:50:35:c9:67:70:77:88:50:
e5:a6:f0:49:21:fe:6c:bf:11:55:1d:73:43:ab:74:
af:77:ec:79:44:27:b7:20:0c:cd:70:35:a4:d3:e0:
47:95:d2:9e:c6:c6:6e:07:cc:46:db:ee:37:05:87:
72:cb:9d:09:79:18:07:de:82:ba:46:77:c7:7e:5d:
50:a3:ab:4d:d7:78:1a:b3:df:2f:ce:57:50:a6:3c:
04:0f:20:43:52:d7:50:83:b1:4b:f6:78:2a:6f:b0:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:EB:5A:93:3A:3D:26:37:5B:22:D5:22:70:86:4F:C7:47:86:B4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e80::-2a06:a005:1ecf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:fd:ac:14:46:6f:1f:3c:72:2b:17:01:e7:30:13:58:43:16:
2d:79:68:11:81:69:46:eb:e6:36:6b:ed:70:34:7c:2d:fa:c5:
54:ed:99:c3:cf:2e:4f:62:9a:90:de:50:08:a4:e8:79:46:84:
87:39:71:a2:e9:f2:3f:01:6d:13:db:ee:14:bf:98:ed:37:ab:
79:46:ff:68:34:f3:36:52:86:c1:0b:f1:44:41:76:17:36:fb:
01:b8:85:a8:1d:73:d6:92:0c:74:39:f6:38:ce:92:3f:80:47:
fe:36:3a:a5:8e:fc:ae:89:0b:2e:fd:56:b2:ca:82:09:e0:7f:
2c:e9:db:93:4c:7a:48:a2:9b:9e:26:df:e2:f4:96:d6:eb:69:
16:37:ad:4d:a4:83:99:4c:61:72:b9:2a:13:c0:58:5e:0c:14:
69:93:49:62:11:16:b2:9f:cc:7c:35:f9:71:9c:07:87:5b:98:
8e:4c:17:73:f3:a7:60:62:db:20:3f:aa:45:6c:6d:40:9d:56:
52:37:c9:4b:f5:1f:62:34:15:a9:f7:61:4e:05:6b:f9:e3:6c:
bf:d1:0b:3d:1f:d9:9c:13:3d:73:89:d8:a4:c4:c6:59:b9:5e:
ff:9d:cf:67:4e:5a:df:2a:41:e4:df:ec:c0:8f:31:7f:27:1a:
07:94:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org