Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa
File: AS212154.roa (raw, json)
Hash identifier: 6+Sr8gns+Ve4vg1Y/zg0DuAP1aEgwHBMqIDa2RBpSVU=
Subject key identifier: 0D:60:62:55:7D:B1:3C:24:7C:C8:6B:E5:6C:63:BB:66:8C:6A:9B:50
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 387109E887CF733114DC6F61DE65C0F8D04192AC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa
Signing time: Tue 03 Jan 2023 02:07:21 +0000
ROA not before: Tue 03 Jan 2023 02:02:21 +0000
ROA not after: Tue 02 Jan 2024 02:07:21 +0000
asID: 212154
IP address blocks: 2a06:a005:5a5::/48 maxlen: 48
2a06:a005:a03::/48 maxlen: 48
2a06:a005:16f0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:71:09:e8:87:cf:73:31:14:dc:6f:61:de:65:c0:f8:d0:41:92:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:21 2023 GMT
Not After : Jan 2 02:07:21 2024 GMT
Subject: CN=0D6062557DB13C247CC86BE56C63BB668C6A9B50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:5b:0a:90:6d:5f:07:15:4d:a6:b8:84:93:
a0:45:f7:f9:5c:45:d5:8b:0e:04:9e:1f:6c:e0:a2:
2a:e8:86:64:a5:aa:90:94:0d:5b:1f:1c:79:56:2a:
69:98:eb:eb:1d:35:f0:2b:bf:09:24:2f:bf:c8:ec:
c9:dc:e7:b8:ca:63:4b:03:e5:5e:5a:13:94:8f:67:
60:a7:7e:59:4d:72:20:2e:5d:3e:6a:0f:ec:a1:5e:
91:2a:41:6a:b8:c6:a5:d3:e4:94:a9:5f:9f:fc:1c:
aa:2f:7b:2e:35:a7:df:68:06:0f:86:28:e3:36:ea:
a3:24:23:24:ad:8c:cf:d2:a8:46:cc:31:cf:32:a3:
b9:fa:c8:74:7e:7e:1e:26:28:73:87:fe:4b:05:f6:
5b:12:9a:f7:16:05:d1:61:cf:be:34:12:5d:0b:c0:
75:d3:a6:99:0a:dc:31:65:99:a0:77:c2:82:b1:c0:
15:64:89:71:05:ef:3d:53:0a:36:14:ce:30:35:6e:
01:6e:0e:8f:6b:8d:27:fc:67:fc:51:43:e5:95:1d:
08:8f:97:10:1a:db:d2:6b:f0:c2:e3:39:21:c7:4e:
32:fe:62:66:f0:2c:0b:6e:c9:66:5d:3a:37:f5:d6:
79:65:6c:3e:64:08:5d:38:70:8c:c1:4e:d3:76:dd:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:62:55:7D:B1:3C:24:7C:C8:6B:E5:6C:63:BB:66:8C:6A:9B:50
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212154.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a5::/48
2a06:a005:a03::/48
2a06:a005:16f0::/44
Signature Algorithm: sha256WithRSAEncryption
38:3f:4b:58:c3:fe:55:e0:9e:75:88:fd:32:70:09:90:7e:68:
6a:e5:66:da:c3:7f:84:ea:56:1e:83:5e:34:f1:67:76:d8:26:
bb:03:2f:ff:7a:25:96:22:95:96:e9:d4:ac:43:08:07:52:ab:
f5:60:35:f9:64:a6:be:ce:78:72:18:61:ed:68:7f:49:98:2d:
82:07:7c:ae:55:af:32:77:08:4b:66:dc:b5:3f:b7:cf:73:14:
76:3e:4e:d4:22:34:1e:03:cd:70:68:15:e4:22:38:de:13:d1:
d3:1a:1b:59:40:5f:5f:f4:db:e9:47:00:b3:ce:e1:78:6f:db:
52:7a:8b:e9:a7:91:fe:e5:1e:ca:32:a3:f0:50:2d:42:28:5a:
12:ba:b0:65:f6:8f:26:c8:3c:74:82:d8:57:d9:74:72:2c:08:
a6:99:76:9d:1b:04:06:32:de:50:c5:cf:0c:1c:56:4c:b1:bb:
58:01:fc:57:b4:af:4f:90:7c:44:13:c1:3f:10:60:b0:0e:b0:
ac:10:d3:db:6f:49:6b:7b:09:b3:da:ab:3e:e9:95:9c:8d:f4:
e4:ef:a6:cb:f8:de:ce:9b:ca:db:b7:83:02:9d:f1:2d:5a:59:
f5:fa:21:e6:de:80:25:4a:39:81:f6:d5:dd:eb:2b:c3:d3:d4:
48:7d:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:40 2025 by rpki-client