Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa
File: AS212294.roa (raw, json)
Hash identifier: DCbDytFl3pRtL4WrmDYTqNKNVYgTUjZV+pexMDPx9nw=
Subject key identifier: 3D:1F:99:EF:45:9F:27:98:F7:BF:89:93:24:F8:62:D0:A3:73:91:40
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 24CEE15F9007370637BC90D1D450689A170E8535
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa
Signing time: Wed 25 Jan 2023 02:04:04 +0000
ROA not before: Wed 25 Jan 2023 01:59:04 +0000
ROA not after: Wed 24 Jan 2024 02:04:04 +0000
asID: 212294
IP address blocks: 2a06:a005:e40::/44 maxlen: 48
2a06:a005:1610::/44 maxlen: 48
2a06:a005:1620::/44 maxlen: 48
2a06:a005:1630::/44 maxlen: 48
2a06:a005:1800::/44 maxlen: 48
2a06:a005:18d0::/44 maxlen: 48
2a06:a005:1f40::/44 maxlen: 48
2a06:a005:1f50::/44 maxlen: 48
2a06:a005:1f60::/44 maxlen: 48
2a06:a005:1f70::/44 maxlen: 48
2a06:a005:1f80::/44 maxlen: 48
2a06:a005:2200::/44 maxlen: 48
2a06:a005:2210::/44 maxlen: 48
2a06:a005:2220::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ce:e1:5f:90:07:37:06:37:bc:90:d1:d4:50:68:9a:17:0e:85:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 25 01:59:04 2023 GMT
Not After : Jan 24 02:04:04 2024 GMT
Subject: CN=3D1F99EF459F2798F7BF899324F862D0A3739140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:e6:df:b7:89:6b:1e:36:b8:e6:3f:3c:7e:
94:35:50:f2:42:51:bf:66:99:9f:d9:a5:ad:38:e2:
00:e6:bd:8f:44:93:65:47:53:07:e1:14:ac:fc:75:
88:a6:eb:cd:8c:de:34:ce:eb:05:8c:7e:54:6b:a8:
80:f0:8c:1c:02:4b:df:64:15:1f:f9:de:9d:9f:da:
72:9f:50:89:57:69:39:2a:17:01:47:56:b2:c2:dd:
bc:1d:18:b9:f9:2a:ce:cb:de:01:bb:6b:c7:a1:57:
a1:6d:3f:c1:0a:3e:89:44:0c:52:e6:10:f2:ee:5d:
ae:16:8b:be:69:b1:6d:10:06:5b:31:c6:ea:4d:e6:
ad:e2:af:f9:9c:52:19:11:8a:9b:1b:45:70:73:67:
3a:b4:e0:bc:51:ac:16:e6:9f:d3:5b:99:94:25:22:
3a:41:26:34:f9:d8:6b:53:51:7f:30:89:0d:1d:4e:
5d:26:af:8e:b9:b0:b0:02:76:23:74:35:01:d4:1a:
58:8d:ca:84:ad:69:c4:f6:1d:4e:79:35:2f:63:45:
e2:37:b5:d6:7c:8c:d9:5a:96:7b:98:12:3d:d4:64:
00:ba:d5:0d:ae:80:4f:ae:97:3d:24:ed:37:6e:6c:
b4:44:19:1b:e9:59:76:fa:71:3e:70:fd:19:e6:2b:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:99:EF:45:9F:27:98:F7:BF:89:93:24:F8:62:D0:A3:73:91:40
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS212294.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:e40::/44
2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1800::/44
2a06:a005:18d0::/44
2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
2a06:a005:2200::-2a06:a005:222f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:93:be:db:7e:ff:46:e8:02:29:2b:97:62:92:75:c2:e1:50:
82:52:15:f9:84:1c:af:d4:17:d0:2a:86:98:57:92:3e:a7:5b:
36:eb:35:f3:00:f7:dc:b0:db:64:c3:25:9b:57:52:b8:48:68:
d3:6d:7b:39:89:04:ad:22:79:75:2b:9e:59:4b:c5:77:d8:e6:
fa:5f:4a:00:ad:ec:60:fe:80:6f:18:b4:73:3a:f3:bd:09:71:
d0:d9:7c:ba:95:2d:d5:fd:cd:2f:f8:e7:f5:5f:15:5b:86:30:
ae:e2:b5:b9:2e:21:d5:0f:83:18:ad:59:0b:3d:73:4d:00:d1:
02:82:72:fb:25:3d:9a:4f:80:96:a8:fc:6c:c7:d8:0d:24:9e:
ea:3c:bd:9c:f4:25:54:bc:d9:1e:96:fd:95:85:25:f4:69:de:
f9:0f:6d:4b:b7:7d:3e:a6:5f:96:f1:cd:19:3b:e5:6a:58:14:
a5:9f:70:69:9f:90:4a:48:c5:15:e8:84:fb:bb:37:3c:50:d2:
1b:fd:af:b1:25:04:72:c6:93:8c:6f:07:a6:39:78:03:14:45:
6f:14:d7:56:b3:86:bf:38:ff:4f:14:de:5f:ff:79:b4:ae:26:
3f:84:48:2c:c8:34:8e:67:69:f4:8b:cd:e7:6b:d3:04:04:3f:
70:86:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:39 2025 by rpki-client