Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209862.roa
File: AS209862.roa (raw, json)
Hash identifier: HI2/fq6gU8deYyogcjp+BiUyRI+iA3BDzGFIdCQ95Zg=
Subject key identifier: 89:48:D0:E6:7D:40:73:FB:F0:B5:57:6C:C2:E0:BE:AA:29:DA:C1:6C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5B2929EBC4E44FDCC6256A348556391663D52D94
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209862.roa
Signing time: Tue 03 Jan 2023 02:07:06 +0000
ROA not before: Tue 03 Jan 2023 02:02:06 +0000
ROA not after: Tue 02 Jan 2024 02:07:06 +0000
asID: 209862
IP address blocks: 2a06:a005:45b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:29:29:eb:c4:e4:4f:dc:c6:25:6a:34:85:56:39:16:63:d5:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:06 2023 GMT
Not After : Jan 2 02:07:06 2024 GMT
Subject: CN=8948D0E67D4073FBF0B5576CC2E0BEAA29DAC16C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:d6:9c:aa:a9:79:e0:05:3b:2c:26:14:16:
53:9a:1b:d2:3f:cf:0b:8c:fc:3c:3f:59:07:25:90:
4e:8e:35:9b:82:21:c6:0b:b9:d1:f6:de:a3:f9:2c:
c7:8a:65:19:7a:e6:3d:f8:b8:99:40:93:01:f9:93:
35:f4:26:6b:18:6f:18:77:23:99:b3:9f:60:9c:ef:
60:81:23:1d:7a:b0:44:3a:14:d9:a3:c1:0b:f4:9b:
73:7c:43:5d:59:b0:82:7b:4f:91:96:1e:51:b4:a3:
ed:d1:ce:1d:1c:28:8e:45:0f:e6:7c:9b:95:58:cc:
19:84:9d:1f:c4:6f:ba:20:ac:f3:00:21:a9:dc:64:
2a:29:2c:7d:65:a0:06:50:26:eb:70:7b:63:9f:a5:
ad:10:09:42:fa:73:4d:8d:a2:bb:27:b3:71:94:5c:
28:22:2f:12:ae:54:1d:bf:1c:1e:c0:b7:fb:2e:72:
de:25:6f:56:c8:17:d2:75:1e:ee:9f:cf:1c:2b:5f:
d6:40:aa:ab:ed:6b:09:79:65:e4:f1:a4:2f:05:b2:
bb:7d:85:ff:95:2e:f8:ba:32:2e:26:a5:c2:73:32:
87:a8:b7:4a:90:32:a4:43:6a:da:51:71:d0:83:20:
e2:d4:74:37:09:57:dd:5c:72:66:f4:e7:1b:0c:39:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:D0:E6:7D:40:73:FB:F0:B5:57:6C:C2:E0:BE:AA:29:DA:C1:6C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209862.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45b::/48
Signature Algorithm: sha256WithRSAEncryption
37:a6:de:8d:14:a0:64:74:39:40:73:d3:a7:33:b2:55:bc:d4:
6a:0a:fd:1e:8b:01:d3:59:f4:45:28:a8:a8:80:d1:f2:ce:7b:
8a:e4:05:9f:65:87:d5:95:69:03:af:a2:b8:d1:d6:ff:54:71:
e4:ac:0a:96:31:f6:0c:71:41:dd:ae:e1:e3:81:0a:a7:23:4d:
c6:d3:16:fa:12:f7:46:d1:4d:f2:27:67:c5:bc:c2:a0:d2:b9:
43:49:c1:00:0d:06:5c:c8:ff:17:9e:7c:17:96:97:f3:3b:a7:
27:28:14:cd:a5:26:1f:15:1c:29:b5:d8:1e:16:d0:84:6e:12:
61:87:25:2a:7a:c4:a2:b7:1c:dc:1f:cc:5b:60:41:65:c8:e9:
57:92:53:f1:ff:84:b2:53:0e:39:e3:7c:e8:60:20:19:1c:c0:
2c:4f:e3:e8:cb:e5:ca:f6:9f:90:06:a0:9e:98:e8:80:96:2f:
57:80:5d:42:b5:83:36:f2:d4:db:5d:94:b6:93:09:3b:fd:f3:
08:e6:fc:f0:3a:d4:36:64:56:9b:95:4c:6f:89:5a:94:d4:34:
02:e9:12:f9:22:4e:e5:39:c5:8c:f5:87:b4:dd:6c:04:96:0d:
23:f0:66:0d:76:c0:aa:65:54:7e:b3:4c:a3:56:f3:b6:46:38:
95:e3:42:0b
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUWykp68TkT9zGJWo0hVY5FmPVLZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzAxMDMwMjAyMDZaFw0yNDAxMDIwMjA3MDZaMDMxMTAvBgNV
BAMTKDg5NDhEMEU2N0Q0MDczRkJGMEI1NTc2Q0MyRTBCRUFBMjlEQUMxNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmANacqql54AU7LCYUFlOaG9I/
zwuM/Dw/WQclkE6ONZuCIcYLudH23qP5LMeKZRl65j34uJlAkwH5kzX0JmsYbxh3
I5mzn2Cc72CBIx16sEQ6FNmjwQv0m3N8Q11ZsIJ7T5GWHlG0o+3Rzh0cKI5FD+Z8
m5VYzBmEnR/Eb7ogrPMAIancZCopLH1loAZQJutwe2Ofpa0QCUL6c02Norsns3GU
XCgiLxKuVB2/HB7At/suct4lb1bIF9J1Hu6fzxwrX9ZAqqvtawl5ZeTxpC8Fsrt9
hf+VLvi6Mi4mpcJzMoeot0qQMqRDatpRcdCDIOLUdDcJV91ccmb05xsMOSP5AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUiUjQ5n1Ac/vwtVdswuC+qinawWwwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA5ODYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQRbMA0GCSqGSIb3DQEBCwUAA4IBAQA3pt6N
FKBkdDlAc9OnM7JVvNRqCv0eiwHTWfRFKKiogNHyznuK5AWfZYfVlWkDr6K40db/
VHHkrAqWMfYMcUHdruHjgQqnI03G0xb6EvdG0U3yJ2fFvMKg0rlDScEADQZcyP8X
nnwXlpfzO6cnKBTNpSYfFRwptdgeFtCEbhJhhyUqesSitxzcH8xbYEFlyOlXklPx
/4SyUw4543zoYCAZHMAsT+Poy+XK9p+QBqCemOiAli9XgF1CtYM28tTbXZS2kwk7
/fMI5vzwOtQ2ZFablUxviVqU1DQC6RL5Ik7lOcWM9Ye03WwElg0j8GYNdsCqZVR+
s0yjVvO2RjiV40IL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org