Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202996.roa
File: AS202996.roa (raw, json)
Hash identifier: mnL5ZDZfSVWaf/vpH8oPFPhi+RKTRbP89Ajg216p8YQ=
Subject key identifier: E3:1F:27:38:5A:F6:E8:05:6E:AF:7B:8E:15:C0:F0:4C:49:00:45:7B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 25AF596402BA321B8ED399F5B54731C9B1978CB2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202996.roa
Signing time: Thu 26 Jan 2023 09:42:53 +0000
ROA not before: Thu 26 Jan 2023 09:37:53 +0000
ROA not after: Thu 25 Jan 2024 09:42:53 +0000
asID: 202996
IP address blocks: 2a06:a005:1d57::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:af:59:64:02:ba:32:1b:8e:d3:99:f5:b5:47:31:c9:b1:97:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 26 09:37:53 2023 GMT
Not After : Jan 25 09:42:53 2024 GMT
Subject: CN=E31F27385AF6E8056EAF7B8E15C0F04C4900457B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f8:be:a6:8d:59:5a:a0:7a:48:c4:eb:e0:b0:
b1:c9:39:67:cd:6f:f3:cb:f4:13:5c:2f:3c:6f:3a:
e5:f6:1e:c8:70:72:a3:99:12:15:90:cc:49:25:6c:
ff:11:7f:43:9f:1c:d3:d4:1e:c2:11:6d:56:21:10:
4b:54:5d:41:ff:d8:59:3f:d8:59:8b:0e:df:85:4b:
cc:2f:0b:6f:c0:c0:5f:59:eb:58:4e:84:68:33:ad:
d2:0e:78:9d:fa:33:2e:88:87:39:ee:43:c2:07:63:
a1:a1:bf:02:a3:b3:97:4a:82:55:3f:4b:eb:d1:7b:
5e:1a:23:1b:96:3c:89:81:18:6f:82:b7:a1:75:d0:
c1:21:f2:06:97:91:89:39:c7:32:04:06:95:82:73:
61:cb:f5:37:05:93:34:7c:f5:23:d0:f8:14:3b:a1:
7f:7c:46:e4:57:4c:50:ec:97:77:a8:17:c3:b7:5d:
3c:fd:39:64:17:e2:db:99:4c:f7:d1:ac:ab:5c:c7:
ed:07:0d:dc:e0:84:51:20:85:c8:8e:42:8d:a5:9b:
34:53:27:1e:73:cb:18:e4:de:dc:f5:29:6a:4c:cb:
a6:43:00:02:dc:71:86:8a:87:61:7f:87:d6:7c:2f:
e5:e0:3e:d2:d9:2b:61:fe:28:26:d8:ad:6c:63:67:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:27:38:5A:F6:E8:05:6E:AF:7B:8E:15:C0:F0:4C:49:00:45:7B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202996.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d57::/48
Signature Algorithm: sha256WithRSAEncryption
6f:76:a6:c5:9a:dc:91:83:7b:f3:88:0b:9f:5b:67:9e:c6:16:
1d:ed:78:96:26:aa:80:33:51:f5:e4:94:99:37:a6:99:b8:90:
49:8b:c5:42:db:08:4a:25:bf:23:f5:f4:96:bb:53:c8:f4:5b:
d1:3f:05:ce:17:cd:a0:27:a3:a9:86:73:76:5f:b6:51:5e:a7:
05:78:a0:62:1a:e3:9b:18:1a:24:dd:57:7c:10:68:93:6a:cb:
63:da:73:34:79:97:7b:0b:1d:7f:30:5a:85:3b:4c:5b:99:df:
eb:ab:37:58:aa:95:e2:3a:07:67:fc:32:1e:c2:87:45:5a:3c:
17:a6:5a:6c:f0:3e:d6:10:c8:d3:3a:50:84:5d:fe:c3:3e:5d:
50:f2:b7:52:68:81:7f:4e:01:c1:80:98:63:43:6d:45:a4:c3:
cd:d8:21:bd:cc:60:27:8d:99:1b:26:64:71:3f:ef:61:12:6b:
97:d1:34:1a:22:b6:77:41:64:4d:a4:18:65:86:81:8e:e9:c0:
ee:c4:16:69:93:23:61:b5:2d:6a:7c:e7:69:b6:e3:1a:28:9f:
2e:60:8f:89:01:e0:bf:99:d5:60:fb:a7:5a:dd:7c:a0:f6:73:
fa:64:4b:e1:3b:48:27:54:b0:a7:35:2d:9c:7e:46:0b:45:26:
24:b5:95:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org