Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa
File: AS45772.roa (raw, json)
Hash identifier: 8V/g+DE4DxVTaMOgt+8xzEmnkXETvP6njLvVamkvp9M=
Subject key identifier: 97:14:26:D5:26:48:F8:9F:3F:97:8C:3D:47:F3:78:3B:68:E0:93:15
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 34CF979DFC8794F46ED891405BFA39CE8021F397
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa
Signing time: Tue 03 Jan 2023 02:07:19 +0000
ROA not before: Tue 03 Jan 2023 02:02:19 +0000
ROA not after: Tue 02 Jan 2024 02:07:19 +0000
asID: 45772
IP address blocks: 2a06:a005:1ee0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cf:97:9d:fc:87:94:f4:6e:d8:91:40:5b:fa:39:ce:80:21:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:19 2023 GMT
Not After : Jan 2 02:07:19 2024 GMT
Subject: CN=971426D52648F89F3F978C3D47F3783B68E09315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:10:8c:76:70:19:65:34:43:ba:d5:8c:05:
30:a3:62:c4:91:76:1d:e7:30:35:59:da:e7:1d:5d:
87:ea:f9:c0:0f:dc:b7:38:23:11:b0:8c:67:41:82:
80:8d:8d:aa:84:31:63:b0:41:bd:40:c2:c4:ae:88:
d9:a9:3c:d3:08:72:df:5d:c7:e4:3d:38:25:2e:dc:
a0:bd:44:cc:37:a3:e1:a4:25:30:6d:ca:71:9c:12:
56:49:d4:33:8e:1e:50:60:36:80:2b:aa:44:7d:26:
b3:04:4f:95:d0:98:59:19:1f:59:f1:ee:ef:c3:a9:
e2:64:05:df:cf:ab:51:3a:b8:e3:a9:97:0c:92:10:
e9:fa:c1:ff:53:22:95:57:84:e3:1c:42:b2:f6:b7:
81:35:95:1e:ea:07:d9:e4:38:b6:c0:20:c0:93:04:
ca:1a:cd:8d:a2:06:d0:3e:69:ae:3c:15:fe:d6:35:
ee:4c:c3:2f:a2:11:06:df:2e:46:21:6d:17:62:f3:
9b:8c:70:44:19:f8:d9:a0:4a:33:6d:b2:d1:03:9c:
e3:a4:de:ad:56:d8:f1:2b:20:b2:e1:e8:ae:bc:d0:
b3:92:d7:e0:6a:28:1e:3a:ec:26:17:d5:90:25:f1:
11:75:45:ff:79:8b:35:9e:99:e7:fb:41:6f:df:b2:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:26:D5:26:48:F8:9F:3F:97:8C:3D:47:F3:78:3B:68:E0:93:15
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS45772.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ee0::/44
Signature Algorithm: sha256WithRSAEncryption
b9:3f:80:39:97:50:b6:fe:31:95:00:d7:ec:aa:fe:46:c5:52:
73:26:c8:05:2d:58:98:3f:5c:89:3e:aa:1d:7b:82:5f:8e:2b:
cd:be:79:44:3e:20:c1:4e:a1:df:da:5d:40:9b:18:78:37:5b:
cc:e6:5b:97:55:55:14:aa:68:fa:e8:99:8d:fa:ca:67:43:83:
ce:de:53:e4:f7:13:4d:50:8b:fd:09:ab:60:98:fe:23:54:d1:
5d:61:90:74:e7:b5:87:57:86:d0:d3:b2:33:74:29:e1:bd:64:
91:1b:db:42:6b:4c:82:92:de:33:f3:59:21:c1:65:84:eb:6d:
3d:c1:91:a9:1b:25:04:a0:22:52:1d:48:b7:f3:7c:af:0a:50:
9e:bb:74:4f:56:d7:62:25:dc:08:ef:ff:a4:14:d5:36:91:b3:
f2:c0:17:4d:e6:36:ff:b1:21:7c:78:21:95:4f:55:0e:7c:7a:
c9:02:10:2c:19:68:01:ef:f6:57:9a:b1:47:f0:f3:0d:04:e8:
e0:a7:f8:f9:66:38:1c:66:75:4c:bd:78:b7:79:2f:7b:6c:67:
56:63:d4:c2:db:e9:82:e7:45:76:19:26:30:57:9a:93:fa:48:
54:af:45:76:15:a8:c3:2b:08:09:17:1b:ce:fb:e8:cc:f6:cc:
16:cd:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org