![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50580.roa
File: AS50580.roa (raw, json)
Hash identifier: V4NMbpcCLMu90TkhO5fvOa4i2n8DBdtEsC4dVbvAz9g=
Subject key identifier: E3:7E:8E:97:66:8B:F5:9E:A4:DD:EF:3F:C6:C5:DF:4C:34:1E:20:5A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3369B128BE984BB641602F36EBA2D82AE7BB22ED
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50580.roa
Signing time: Tue 03 Jan 2023 02:07:04 +0000
ROA not before: Tue 03 Jan 2023 02:02:04 +0000
ROA not after: Tue 02 Jan 2024 02:07:04 +0000
asID: 50580
IP address blocks: 2a06:a005:1d90::/44 maxlen: 48
2a06:a005:2230::/44 maxlen: 48
2a06:a005:2390::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:69:b1:28:be:98:4b:b6:41:60:2f:36:eb:a2:d8:2a:e7:bb:22:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 3 02:02:04 2023 GMT
Not After : Jan 2 02:07:04 2024 GMT
Subject: CN=E37E8E97668BF59EA4DDEF3FC6C5DF4C341E205A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:85:a2:8f:b2:96:3e:66:56:b0:f9:fe:33:
95:6e:02:f5:76:15:b9:2b:2b:a0:a5:34:2e:5d:71:
69:f8:1f:4a:9c:6c:42:36:0a:97:a6:13:f5:ba:52:
7c:88:32:60:8b:24:f3:82:01:d5:f9:b7:58:a7:17:
a4:03:53:55:34:8d:55:09:32:fb:15:d8:0d:c3:34:
14:44:1b:32:a7:7c:df:8f:f1:9d:6c:b9:53:98:2c:
d9:d1:4d:45:b2:88:a5:8a:3f:93:6f:f2:a6:ee:fd:
34:a5:23:a4:63:a4:ab:92:3b:14:7c:07:fd:02:06:
15:72:9a:0f:89:d0:eb:22:c6:74:06:94:c9:c8:67:
81:62:17:e5:14:31:26:2b:4d:89:3e:bc:5b:44:56:
21:68:37:12:f2:ba:68:02:76:7d:3a:af:16:9d:73:
76:2f:fb:83:00:9b:91:96:87:36:31:50:4d:13:5f:
7d:52:b5:6f:5f:35:4f:fc:fa:67:22:f3:1c:f1:c0:
6d:b4:3d:55:37:1a:6e:89:ac:9a:6a:c7:70:b9:c8:
eb:07:ae:07:07:60:e9:71:5b:f1:6a:05:9c:16:f7:
a0:c0:9d:a2:93:74:b3:9d:bf:6b:26:b3:14:0c:69:
8d:d3:95:4c:f5:cd:3c:57:f0:00:d4:9b:2e:9d:5b:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7E:8E:97:66:8B:F5:9E:A4:DD:EF:3F:C6:C5:DF:4C:34:1E:20:5A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50580.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d90::/44
2a06:a005:2230::/44
2a06:a005:2390::/44
Signature Algorithm: sha256WithRSAEncryption
1e:22:d0:30:97:05:4e:27:4d:e1:2d:99:ba:4c:6d:8e:8d:71:
66:15:b5:b6:15:28:fd:db:81:04:1c:3e:a6:16:52:b5:99:a1:
82:a2:02:b3:36:b4:d3:a8:6f:a4:05:e4:c6:e4:ad:b1:a8:66:
53:55:5f:71:17:1e:c0:58:d5:ba:ff:a9:40:06:3b:5a:5a:fc:
a5:7b:1c:18:b5:54:b8:76:c5:97:ae:0d:27:31:6f:f8:5c:d2:
e6:db:c3:d7:27:67:9a:75:e6:18:17:be:0c:2f:af:8f:12:07:
39:31:38:55:84:36:85:2f:73:3f:77:88:97:5e:b1:10:46:b5:
08:15:ff:51:13:b5:7e:c3:6b:97:ed:b5:47:76:d4:71:ce:b3:
1c:20:3b:d5:58:40:c9:dd:3c:8e:c8:09:1c:c1:d5:be:43:2e:
3a:2e:22:66:7d:0a:49:18:ef:f1:24:85:c8:b5:79:27:2c:7e:
13:79:b6:f2:1d:c7:e4:d2:0b:17:e1:fc:f9:3b:69:9b:f9:9e:
db:7e:2b:2a:45:17:73:5b:87:ea:9a:cc:fb:a5:a7:64:69:2d:
03:f7:6c:2a:4b:5a:b9:71:e4:fa:b0:94:76:96:66:d8:4b:0f:
6d:0d:79:5f:39:44:76:4c:3f:fa:80:a4:61:94:db:43:e5:d2:
a4:03:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:34 2025 by rpki-client