Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
File: AS208690.roa (raw, json)
Hash identifier: exCItqAAXDTmvwFkXNgrfXGEIXdauAamnRAU67rb+nE=
Subject key identifier: 2D:F9:84:26:E6:0A:BD:83:8A:81:1F:F9:84:D9:E2:EA:60:90:C9:94
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6D82DE83FD9934A7987B543463BA4B19B928B7A0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
Signing time: Tue 03 Jan 2023 02:07:06 +0000
ROA not before: Tue 03 Jan 2023 02:02:06 +0000
ROA not after: Tue 02 Jan 2024 02:07:06 +0000
asID: 208690
IP address blocks: 2a06:a005:2050::/44 maxlen: 48
2a06:a005:2060::/44 maxlen: 48
2a06:a005:2070::/44 maxlen: 48
2a06:a005:2080::/44 maxlen: 48
2a06:a005:24e0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:82:de:83:fd:99:34:a7:98:7b:54:34:63:ba:4b:19:b9:28:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:06 2023 GMT
Not After : Jan 2 02:07:06 2024 GMT
Subject: CN=2DF98426E60ABD838A811FF984D9E2EA6090C994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ae:4b:4b:da:0e:61:05:b5:56:1b:15:1d:2c:
90:ed:16:74:20:66:3e:ba:79:ee:ec:9b:d9:50:d1:
22:74:c5:8c:55:61:a0:ee:18:15:e1:2c:38:b0:f1:
89:3b:f1:9d:7c:f6:ca:09:cf:38:6a:7b:27:77:b9:
77:39:76:d5:d5:52:3e:3c:a8:3b:da:a4:6b:3b:e7:
9b:ed:ce:94:2b:39:cb:1f:17:05:9d:30:0e:6a:00:
b9:8d:9b:7e:fd:a3:78:31:a7:bf:fb:ce:07:9e:f7:
3c:76:ff:05:b1:67:32:35:ba:a3:0a:aa:a4:9d:11:
9a:33:a8:68:6b:84:c6:00:e6:06:68:59:97:42:15:
53:3c:0d:38:43:2c:c0:21:8f:a4:71:2c:82:47:d0:
b6:ce:bb:89:50:6d:df:47:f6:15:a8:dc:38:e0:a8:
de:79:9e:6f:cd:88:84:da:ac:b6:d2:06:37:1c:6f:
90:50:8d:96:89:9f:84:6b:23:f0:8c:f0:13:71:19:
60:0f:94:cc:7f:2e:3c:95:a3:8f:60:ae:5f:87:08:
be:59:c6:c8:54:6d:aa:b2:d0:cf:09:ee:b3:d1:3c:
49:7c:25:cb:05:64:91:a1:45:28:4d:ff:5a:06:5d:
25:40:e3:e5:83:b4:8c:97:d6:fe:f9:0b:72:0d:01:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F9:84:26:E6:0A:BD:83:8A:81:1F:F9:84:D9:E2:EA:60:90:C9:94
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2050::-2a06:a005:208f:ffff:ffff:ffff:ffff:ffff
2a06:a005:24e0::/44
Signature Algorithm: sha256WithRSAEncryption
4a:10:ed:b8:7f:d1:86:5f:e6:28:a2:c0:0d:16:57:58:70:34:
ab:ee:5b:a4:ab:62:1b:ce:47:1d:ef:93:a0:46:97:6c:40:19:
93:5f:4a:ad:67:78:be:fa:40:d7:5a:9c:e8:2c:4e:07:a9:57:
5c:a2:7e:b3:b7:58:91:1d:c9:c8:9c:ee:00:61:1b:f2:49:33:
ef:48:84:96:8a:56:4f:54:f4:17:73:b5:53:a1:50:6f:7f:dc:
6e:ff:79:f4:41:44:c1:7e:55:0e:b4:14:0c:a7:d6:1d:3b:d4:
5a:7f:66:b9:95:4b:5c:c6:3a:74:7a:d6:09:39:85:fb:a4:00:
f9:87:07:01:bb:1f:b4:7d:12:b3:01:ae:ac:95:e3:7f:62:aa:
77:e1:28:78:2e:70:d2:0a:f2:f7:e4:a7:e8:b0:80:c4:de:9d:
bf:b6:e7:5e:d6:93:da:f0:90:4f:4c:5f:dc:db:ec:f6:0b:f1:
f3:f6:2c:96:b5:d7:35:d2:4b:6d:3e:7f:74:03:f1:5a:82:74:
ee:d9:dd:f7:3e:63:25:3a:33:e5:60:8a:f6:49:06:34:84:c6:
03:b2:ed:d6:39:ac:53:81:e4:22:25:50:7c:4c:94:16:6c:08:
5f:f8:8d:90:a2:6c:45:1d:cd:9d:79:39:37:8a:98:c5:c6:71:
8f:af:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org