Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bfdaa801-3d8f-3b91-b749-c17188d05700.roa
File: bfdaa801-3d8f-3b91-b749-c17188d05700.roa (raw, json)
Hash identifier: UDNCKNagBiQ55orX+vQ55dG7A9zWKDLndWAzpr5gIH8=
Subject key identifier: 17:34:F6:A7:BA:AF:80:3C:F9:D7:BA:96:FB:0A:AB:BB:F1:33:56:1D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837D416D67E7FC879C081923C96
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bfdaa801-3d8f-3b91-b749-c17188d05700.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 852
IP address blocks: 2001:568:201::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:d4:16:d6:7e:7f:c8:79:c0:81:92:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=ee5226ff-5777-4c32-9057-1639cd2569ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:ff:8d:f2:c1:b8:ba:f3:52:aa:28:68:07:
6a:2a:1f:0e:82:06:b9:f3:db:92:68:a4:fe:ea:bf:
de:2a:16:fd:4d:1f:14:6a:ed:d1:d5:a1:a7:50:c3:
07:b2:c0:f8:38:e2:d0:0a:ef:9e:4e:5f:94:fa:2a:
98:1c:90:1d:a9:06:85:23:1a:16:21:27:a6:dc:8c:
ef:c9:33:2e:f6:a3:23:2c:1a:80:e9:3d:f9:ac:d1:
b3:78:4d:62:b4:a8:5b:ce:d4:62:c2:1b:4f:a2:8f:
ee:08:db:1a:4e:63:20:7c:1d:32:55:f5:19:cd:66:
6b:e5:e9:a6:0d:80:90:20:64:9d:34:91:9b:53:80:
00:c6:7b:fa:f7:5f:aa:ba:2d:3d:67:c9:9b:7c:c9:
f8:0b:22:1a:9b:70:2f:db:32:7b:77:a4:ef:d2:c1:
78:27:f9:8d:41:fe:7e:01:25:cd:2e:69:34:f5:53:
ae:e8:7a:79:15:f8:d4:fb:be:85:26:c7:3e:ce:0d:
69:f7:89:ab:bf:c8:30:90:70:6a:f7:e0:15:cb:6a:
bd:c8:10:4c:b1:08:32:c5:1d:4d:85:38:25:7b:88:
f6:9f:f9:85:7a:09:02:8b:9f:fc:7b:b0:07:74:81:
d8:a4:60:ee:3c:10:79:38:56:1c:d2:d6:c7:b6:56:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:F6:A7:BA:AF:80:3C:F9:D7:BA:96:FB:0A:AB:BB:F1:33:56:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bfdaa801-3d8f-3b91-b749-c17188d05700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:568:201::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:5f:78:9a:d7:13:0f:5d:a8:e9:90:e2:a4:f3:62:1e:d2:22:
86:84:76:e0:a2:e7:2c:9e:e8:9a:da:b7:7c:44:e1:2a:79:1a:
4c:93:b7:90:31:19:47:78:37:29:be:db:d9:d8:23:54:c2:9a:
d3:3c:98:c8:2b:9b:62:23:ce:cd:c4:a8:39:c3:a2:14:7e:b9:
fe:02:6f:ca:49:a2:06:41:71:d6:ba:04:e6:52:0a:5c:f3:40:
5a:85:06:57:0f:15:89:78:fe:33:a6:1b:1d:0e:f9:ce:a2:a5:
29:e4:e0:23:ba:42:2e:60:cc:29:82:59:85:3f:cb:d9:23:90:
5d:7c:0f:a1:23:02:9a:6d:43:76:bd:c1:b5:69:60:49:ef:fa:
74:62:d1:ee:c6:a5:2b:3d:dc:cd:f2:cd:2b:c2:a5:c4:8b:aa:
22:e9:0e:05:f6:19:85:f1:4c:b4:c2:05:a3:bb:bb:94:e6:62:
92:8e:55:a5:2e:a1:e9:66:d7:e7:ed:a4:87:0f:2b:54:d4:f0:
85:90:c1:a2:e4:74:b2:0e:77:53:b5:dd:31:ec:c4:56:08:37:
16:c0:ef:d1:e2:1a:fa:64:18:07:12:ed:99:69:28:fc:c7:91:
56:4f:a4:76:ab:a4:02:ee:dc:ae:c6:b8:1c:12:e5:d9:24:31:
32:ed:16:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org