Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa
File: AS211877.roa (raw, json)
Hash identifier: p9AaYqIqMBXTXmCDPCtAKlUE7ro4NieykY0JAXJXxno=
Subject key identifier: D1:5D:BC:49:99:82:98:E4:62:F5:8D:A9:B2:1C:B9:FE:7D:A6:F9:68
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 061F6825F595D86F1CFD100A94E3E8C43758AEE3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa
Signing time: Fri 03 Feb 2023 15:27:06 +0000
ROA not before: Fri 03 Feb 2023 15:22:06 +0000
ROA not after: Fri 02 Feb 2024 15:27:06 +0000
asID: 211877
IP address blocks: 2a06:a005:15d8::/46 maxlen: 48
2a06:a005:15dc::/46 maxlen: 48
2a06:a005:1874::/46 maxlen: 48
2a06:a005:1878::/46 maxlen: 48
2a06:a005:187c::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:1f:68:25:f5:95:d8:6f:1c:fd:10:0a:94:e3:e8:c4:37:58:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 3 15:22:06 2023 GMT
Not After : Feb 2 15:27:06 2024 GMT
Subject: CN=D15DBC49998298E462F58DA9B21CB9FE7DA6F968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:07:71:23:25:58:3e:b2:6a:15:75:22:c8:
a3:3f:6c:c1:ce:a1:19:e1:1b:f1:bf:15:40:8c:90:
4b:2d:16:3f:cc:f9:62:fb:bc:a8:7b:5e:9d:3a:73:
01:45:21:61:cd:3d:27:24:1e:ff:c4:16:e4:a2:79:
82:3e:15:5d:1a:02:bc:4f:14:bd:af:c4:fb:f4:3e:
dc:b2:27:92:d9:0b:13:2d:c0:dd:04:3f:c0:84:e9:
3e:87:4f:4b:3f:e1:58:73:ca:ac:c8:82:fa:e4:0c:
4e:53:08:74:40:8e:85:ff:a2:b8:95:50:42:dc:1a:
2f:43:dc:c2:7e:05:a1:12:0d:f3:4f:44:f3:11:7f:
2c:12:4d:a8:e0:dc:45:b5:34:34:b3:8a:7b:c3:a0:
7d:05:1a:83:22:6f:8e:84:b9:05:13:3c:0e:d7:62:
c8:36:f7:ee:9c:ee:2a:20:06:9d:fb:e8:b9:83:68:
ae:82:c4:78:cd:3a:f3:70:17:01:34:05:12:2b:f8:
44:07:d8:f3:02:7d:bd:bc:16:ef:b3:33:ad:ac:e6:
bc:c9:24:41:9f:20:04:9a:4d:4b:69:4e:9f:a8:5e:
6f:76:53:40:2d:72:d9:2c:33:c5:c8:7f:b0:c9:df:
69:e4:62:6e:5c:c6:5f:f6:f5:2e:c2:d0:ce:f0:a8:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5D:BC:49:99:82:98:E4:62:F5:8D:A9:B2:1C:B9:FE:7D:A6:F9:68
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211877.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15d8::/45
2a06:a005:1874::-2a06:a005:187f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:bf:ee:fc:0d:e2:8e:01:b4:1f:b9:60:d2:bc:e2:cb:34:13:
9b:9b:47:14:a3:41:f7:a9:a7:55:5d:a3:69:e7:f3:d1:55:35:
07:85:1e:8f:97:ba:16:20:b1:dd:c5:c0:47:ab:d9:64:7c:f0:
03:e1:5b:5d:2e:22:ef:8b:5b:d4:99:12:4b:fb:9b:ac:6a:e5:
cc:38:cb:2e:76:01:38:a6:e1:a3:85:97:6f:a8:c0:bb:c6:bd:
01:8c:b7:33:34:e5:da:2e:91:c3:b4:e8:62:75:3d:00:80:68:
62:3c:8d:14:11:09:5a:db:fc:47:24:85:c7:63:c0:45:40:28:
db:05:7c:7f:9c:62:f6:bc:20:c3:7e:7e:9f:e6:d8:16:d2:b9:
0c:21:0e:af:82:2d:21:e8:6a:99:5d:a2:c0:65:ee:8a:f2:78:
80:d1:ef:8d:c8:0f:de:a3:77:4e:05:8d:a5:b9:4d:a8:07:6c:
41:86:a1:68:0c:4b:6d:a6:19:bb:24:f6:ff:b0:4a:12:6c:42:
b2:d2:b1:08:45:59:5d:d9:fe:f3:40:be:c6:c6:f3:b2:65:07:
3a:9e:fa:51:13:ce:f7:47:92:63:90:dd:65:6c:7e:2d:97:c7:
d6:ae:db:63:af:2b:34:a4:e8:8c:af:5c:94:ea:6b:97:33:95:
bd:3f:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org