Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa
File: AS208076.roa (raw, json)
Hash identifier: kbmX9tyoQjPwNS6fyD5H0OkBYWdZgxfA9kI+Q7rLjoI=
Subject key identifier: 20:0B:6D:41:4B:CA:A9:CB:0B:4F:C4:01:BD:95:55:29:3D:97:7E:AE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 212467866F3EFD6D9559E58DAD0B4EE14988C0AF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa
Signing time: Tue 03 Jan 2023 02:07:19 +0000
ROA not before: Tue 03 Jan 2023 02:02:19 +0000
ROA not after: Tue 02 Jan 2024 02:07:19 +0000
asID: 208076
IP address blocks: 2a06:a005:5ae::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:24:67:86:6f:3e:fd:6d:95:59:e5:8d:ad:0b:4e:e1:49:88:c0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:19 2023 GMT
Not After : Jan 2 02:07:19 2024 GMT
Subject: CN=200B6D414BCAA9CB0B4FC401BD9555293D977EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:91:6b:7f:7b:90:18:d0:97:0b:2a:e9:f4:
a3:06:dc:84:bd:e4:c2:02:80:ba:14:db:a8:d2:dd:
dd:0e:18:34:24:1e:64:2c:89:c7:55:e8:08:72:07:
c2:92:7b:dd:50:31:31:1e:c3:2a:ce:98:4c:5e:2f:
4a:08:a1:07:92:8c:4f:3d:ac:73:0f:a4:9c:bb:ea:
47:b4:d3:a7:44:16:7f:ee:1e:7c:40:3c:e4:85:86:
0d:93:f8:d8:4b:e6:85:8f:45:4b:66:e1:79:49:a1:
8d:9a:41:e3:6e:5b:fb:32:34:c2:34:c9:88:19:4c:
2c:39:db:99:fc:da:9f:83:a6:51:8a:df:3d:45:1a:
bc:14:3f:19:f8:a3:fa:42:83:4e:c0:66:2e:26:3b:
9d:7e:52:64:e4:17:4d:0a:17:9a:c0:fe:d7:0a:f9:
13:3c:7d:dc:d3:09:8d:a9:7f:76:76:05:15:26:fc:
ef:d4:ac:47:a0:d9:ef:62:4d:fe:7a:20:64:9d:9b:
d2:03:08:76:4c:1a:47:97:70:39:d0:3b:6e:3c:82:
44:40:73:ae:34:6d:99:e9:38:0c:70:60:f8:c1:ec:
45:d5:7b:5f:af:ba:6d:84:c0:84:3f:35:30:b7:d3:
a1:ec:9c:1a:b7:96:74:11:ea:3a:ed:67:cf:ce:73:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:6D:41:4B:CA:A9:CB:0B:4F:C4:01:BD:95:55:29:3D:97:7E:AE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ae::/48
Signature Algorithm: sha256WithRSAEncryption
aa:9b:af:63:dc:26:a7:7f:67:4e:ae:15:41:b1:b0:91:11:9f:
88:33:24:73:a0:bf:ca:a7:8e:72:d9:83:bf:d9:2e:92:ee:97:
df:1d:27:67:22:02:65:bf:55:7e:10:91:d7:e6:a4:d3:31:6f:
ba:fd:de:5c:bd:1a:73:6d:24:4c:f5:de:ed:43:8b:a3:a3:74:
8f:52:33:a6:b8:ee:d7:bf:7e:aa:cf:15:40:76:a8:44:9f:92:
10:de:6a:f4:4f:d8:43:4c:61:41:f3:84:ee:ee:33:5c:69:8a:
8f:c8:51:ae:9f:cc:9f:62:a4:5d:b4:34:f3:e5:a7:5d:b3:94:
e1:fd:62:b6:f5:81:b7:47:07:91:17:c9:25:61:68:01:cf:2b:
5e:0a:2e:79:cd:0b:c5:58:0f:74:07:03:ba:db:23:00:1a:e1:
c3:bb:33:c6:52:7b:1f:d9:79:5c:84:aa:fc:a0:e7:d3:19:b9:
a7:7b:80:ce:f5:f3:6a:cb:cc:61:b5:31:b2:b4:ce:00:ff:73:
3b:a8:26:ca:f4:ba:0b:9c:f4:47:9a:b5:d8:1a:f6:f6:d2:29:
f6:14:ec:b0:96:4f:2e:71:d3:0c:6d:5d:a3:bc:ed:a6:55:13:
a7:07:c4:73:e5:5f:85:7c:46:91:f5:70:3f:0d:f1:68:8b:ba:
34:34:8f:9a
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUISRnhm8+/W2VWeWNrQtO4UmIwK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMDMwMjAyMTlaFw0yNDAxMDIwMjA3MTlaMDMxMTAvBgNV
BAMTKDIwMEI2RDQxNEJDQUE5Q0IwQjRGQzQwMUJEOTU1NTI5M0Q5NzdFQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmLZFrf3uQGNCXCyrp9KMG3IS9
5MICgLoU26jS3d0OGDQkHmQsicdV6AhyB8KSe91QMTEewyrOmExeL0oIoQeSjE89
rHMPpJy76ke006dEFn/uHnxAPOSFhg2T+NhL5oWPRUtm4XlJoY2aQeNuW/syNMI0
yYgZTCw525n82p+DplGK3z1FGrwUPxn4o/pCg07AZi4mO51+UmTkF00KF5rA/tcK
+RM8fdzTCY2pf3Z2BRUm/O/UrEeg2e9iTf56IGSdm9IDCHZMGkeXcDnQO248gkRA
c640bZnpOAxwYPjB7EXVe1+vum2EwIQ/NTC306HsnBq3lnQR6jrtZ8/Oc1vrAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUIAttQUvKqcsLT8QBvZVVKT2Xfq4wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA4MDc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQWuMA0GCSqGSIb3DQEBCwUAA4IBAQCqm69j
3Canf2dOrhVBsbCREZ+IMyRzoL/Kp45y2YO/2S6S7pffHSdnIgJlv1V+EJHX5qTT
MW+6/d5cvRpzbSRM9d7tQ4ujo3SPUjOmuO7Xv36qzxVAdqhEn5IQ3mr0T9hDTGFB
84Tu7jNcaYqPyFGun8yfYqRdtDTz5adds5Th/WK29YG3RweRF8klYWgBzyteCi55
zQvFWA90BwO62yMAGuHDuzPGUnsf2XlchKr8oOfTGbmne4DO9fNqy8xhtTGytM4A
/3M7qCbK9LoLnPRHmrXYGvb20in2FOywlk8ucdMMbV2jvO2mVROnB8Rz5V+FfEaR
9XA/DfFoi7o0NI+a
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:30 2025 by rpki-client