Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: Ikm6d0rfe82wKzGxXvqOVakYz+f4MC/oD0dMM8r4oWQ=
Subject key identifier: 8E:4D:99:21:78:1D:39:D9:08:9A:F5:30:8B:15:FC:BC:E0:3C:0C:A7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 663B765B074E97344D034C8E5CFAA5F55E4441
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
Signing time: Thu 13 Apr 2023 12:41:56 +0000
ROA not before: Thu 13 Apr 2023 12:36:56 +0000
ROA not after: Thu 11 Apr 2024 12:41:56 +0000
asID: 208690
IP address blocks: 2a06:a005:2080::/44 maxlen: 48
2a06:a005:24e0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3b:76:5b:07:4e:97:34:4d:03:4c:8e:5c:fa:a5:f5:5e:44:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 13 12:36:56 2023 GMT
Not After : Apr 11 12:41:56 2024 GMT
Subject: CN=8E4D9921781D39D9089AF5308B15FCBCE03C0CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:c2:3b:fb:38:09:43:0d:c6:f5:ca:b1:67:
1e:4c:f7:5e:4a:22:7e:5b:93:55:4b:b4:07:d3:bc:
67:2d:0d:ed:12:c0:ac:95:5d:8c:b1:30:20:1e:b7:
cd:c9:01:23:cc:c3:f0:ae:04:ad:4c:0b:a3:e8:71:
a0:65:fa:ed:97:ca:96:65:bf:0f:c7:02:e5:0e:62:
a0:7b:3d:c8:fd:b9:09:7b:ab:3e:6f:a6:c2:f6:bf:
a1:df:02:06:65:68:08:26:f7:41:41:6c:5c:e5:db:
bc:b4:6b:3b:2a:b2:cd:92:2e:50:ff:29:00:8f:3d:
30:2c:b3:66:15:d7:1a:79:d8:d8:85:8a:ff:d0:b7:
20:5b:e3:6a:90:e8:6f:15:4d:7d:f7:30:56:f5:9b:
b7:be:d2:2c:0b:15:bf:6d:f1:3d:8c:08:c9:6d:37:
2a:d8:4a:f5:e3:f2:41:e8:f2:5c:d2:a3:75:77:90:
d4:1d:9a:3d:d1:86:2d:0d:d1:43:b4:57:27:25:71:
51:50:76:18:10:8e:d0:da:af:8b:49:e7:34:a9:27:
35:c1:b4:5e:2c:c3:2a:eb:fd:e6:1e:d1:cf:72:3d:
66:c2:1d:0c:f4:2f:78:2a:32:54:86:49:f0:37:c4:
d5:90:4d:be:28:f1:92:2b:fd:fb:d5:16:18:0f:03:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4D:99:21:78:1D:39:D9:08:9A:F5:30:8B:15:FC:BC:E0:3C:0C:A7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2080::/44
2a06:a005:24e0::/44
Signature Algorithm: sha256WithRSAEncryption
47:c4:b8:e7:c3:9c:a2:1e:50:b8:19:d8:a0:50:64:fd:c5:8d:
7d:d1:49:c2:21:cb:31:37:99:f7:fd:7a:bf:63:57:22:68:c0:
6b:a7:67:7c:51:97:70:4f:9c:20:e0:c5:d3:99:20:99:5c:bd:
7d:65:8d:87:3e:96:dd:7f:02:e3:3c:ab:16:4b:2b:ce:a9:ae:
9b:49:16:ae:76:b3:59:bd:a3:fb:43:8b:f1:12:69:fb:04:8b:
13:5a:f1:04:a9:c6:95:b5:ad:71:c8:f1:01:58:e4:4b:d1:19:
81:ff:7a:2c:85:fd:56:68:f5:18:ec:38:35:c6:91:eb:a1:72:
7f:12:11:c9:28:db:3a:01:e9:d9:35:9e:65:b7:9a:2a:2d:c0:
75:67:61:d3:4c:38:f3:95:3e:fe:4f:e9:d5:58:43:8d:cc:24:
3a:5f:28:b8:90:d4:f6:50:a8:76:4f:79:43:62:8d:f7:1b:76:
ce:fd:80:33:2e:24:bc:ba:f5:d4:2f:d1:37:6b:70:b6:f4:87:
e2:0a:5d:86:58:d2:9d:39:b3:76:27:61:62:5d:40:bb:f4:df:
90:c0:35:42:95:69:87:45:7b:8a:ea:c6:a7:28:ab:0f:4a:ee:
77:4e:58:ba:b7:05:4d:28:ae:01:90:23:2c:21:3e:a1:3e:01:
ff:9c:ea:1c
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgITZjt2WwdOlzRNA0yOXPql9V5EQTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3OTk0MzhmMWIxNzYyYWVlZjhhMzVjZjRlNmNiYWU5NzY5
OWJkMDIwMB4XDTIzMDQxMzEyMzY1NloXDTI0MDQxMTEyNDE1NlowMzExMC8GA1UE
AxMoOEU0RDk5MjE3ODFEMzlEOTA4OUFGNTMwOEIxNUZDQkNFMDNDMENBNzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMQkwjv7OAlDDcb1yrFnHkz3Xkoi
fluTVUu0B9O8Zy0N7RLArJVdjLEwIB63zckBI8zD8K4ErUwLo+hxoGX67ZfKlmW/
D8cC5Q5ioHs9yP25CXurPm+mwva/od8CBmVoCCb3QUFsXOXbvLRrOyqyzZIuUP8p
AI89MCyzZhXXGnnY2IWK/9C3IFvjapDobxVNffcwVvWbt77SLAsVv23xPYwIyW03
KthK9ePyQejyXNKjdXeQ1B2aPdGGLQ3RQ7RXJyVxUVB2GBCO0Nqvi0nnNKknNcG0
XizDKuv95h7Rz3I9ZsIdDPQveCoyVIZJ8DfE1ZBNvijxkiv9+9UWGA8DDgcCAwEA
AaOCAfswggH3MB0GA1UdDgQWBBSOTZkheB052Qia9TCLFfy84DwMpzAfBgNVHSME
GDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9y
eS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yLzc5OTQzOEYxQjE3
NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwybWIwQ0EuY2VyMHAGCCsGAQUF
BwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9y
ZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzIvQVMy
MDg2OTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcB
Af8EHDAaMBgEAgACMBIDBwQqBqAFIIADBwQqBqAFJOAwDQYJKoZIhvcNAQELBQAD
ggEBAEfEuOfDnKIeULgZ2KBQZP3FjX3RScIhyzE3mff9er9jVyJowGunZ3xRl3BP
nCDgxdOZIJlcvX1ljYc+lt1/AuM8qxZLK86prptJFq52s1m9o/tDi/ESafsEixNa
8QSpxpW1rXHI8QFY5EvRGYH/eiyF/VZo9RjsODXGkeuhcn8SEcko2zoB6dk1nmW3
miotwHVnYdNMOPOVPv5P6dVYQ43MJDpfKLiQ1PZQqHZPeUNijfcbds79gDMuJLy6
9dQv0TdrcLb0h+IKXYZY0p05s3YnYWJdQLv035DANUKVaYdFe4rqxqcoqw9K7ndO
WLq3BU0orgGQIywhPqE+Af+c6hw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 03:40:00 2025 by rpki-client