Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa
File: 80adbc50-6275-3acb-90a4-5f1619309984.roa (raw, json)
Hash identifier: DE/nKYTDROGZr6RN/GVYo+cDrlhsnsRzT4u7fpOU5fk=
Subject key identifier: 73:7A:C7:9A:77:71:6E:0C:BD:A5:45:0F:12:A1:B7:13:39:B1:0E:D6
Certificate issuer: /CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
Certificate serial: 010D0C9F4328576D51CC73C042CFC17349E4B603
Authority key identifier: 00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa
Signing time: Mon 13 Jul 2020 20:36:32 +0000
ROA not before: Wed 08 Jul 2020 04:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 26271
IP address blocks: 207.241.128.0/20 maxlen: 24
64.25.192.0/20 maxlen: 24
107.161.128.0/20 maxlen: 24
107.181.192.0/19 maxlen: 24
162.250.24.0/21 maxlen: 24
162.249.112.0/22 maxlen: 24
138.229.32.0/19 maxlen: 24
2606:e400::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:e4:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf7322e-8e41-4cbb-805d-ab6f67226ded
Validity
Not Before: Jul 8 04:00:00 2020 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=a2839516-994b-4bb7-95f1-af5765044c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:99:33:5f:81:c2:32:34:f3:96:39:38:fa:
6e:2d:56:0a:4f:50:c6:8d:68:dd:df:dd:47:84:17:
fe:c8:22:f1:7b:ac:7e:15:bc:28:41:8a:87:66:bb:
b1:99:9a:89:5f:4b:84:da:79:90:62:15:77:e1:0a:
b7:53:6a:77:c2:33:be:63:54:1b:97:48:30:c3:be:
24:c3:64:17:57:0c:58:ad:c9:52:f5:8b:51:bd:50:
ca:e5:9e:2b:88:d7:4a:46:cd:91:5d:7e:77:c1:2d:
e2:7b:65:b3:3c:0b:32:95:67:b4:a9:a4:97:51:59:
5e:c9:8e:71:ba:0a:03:a8:b4:e8:6e:bc:ba:77:03:
07:02:e2:65:52:45:de:f8:00:36:13:03:7e:95:e1:
03:a3:fa:61:21:67:22:65:9b:8a:b0:87:6d:63:dc:
ae:44:15:6f:b7:ba:3c:5d:c9:35:60:5c:0d:4d:cf:
98:ce:53:6e:b9:dc:b9:e8:81:ed:fc:e6:d6:e9:9e:
9e:9f:ae:9c:5b:78:11:56:ff:de:88:b2:fa:e5:67:
14:b0:5c:ae:aa:a6:a7:d9:82:2b:17:df:d2:97:d5:
6e:45:04:25:27:18:d6:47:66:a4:50:9e:2c:14:c9:
a8:7c:f5:15:1f:a8:5a:44:ea:45:9a:ef:0d:9b:7a:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7A:C7:9A:77:71:6E:0C:BD:A5:45:0F:12:A1:B7:13:39:B1:0E:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/80adbc50-6275-3acb-90a4-5f1619309984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded/ddf7322e-8e41-4cbb-805d-ab6f67226ded.crl
X509v3 Authority Key Identifier:
keyid:00:27:2B:06:1C:35:C3:36:3B:69:94:8D:C4:2B:CC:F0:4E:84:97:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ddf7322e-8e41-4cbb-805d-ab6f67226ded.cer
sbgp-ipAddrBlock: critical
IPv4:
64.25.192.0/20
107.161.128.0/20
107.181.192.0/19
138.229.32.0/19
162.249.112.0/22
162.250.24.0/21
207.241.128.0/20
IPv6:
2606:e400::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:dc:a5:a1:3c:e0:04:23:2a:68:27:22:1c:b2:1a:8b:62:08:
32:21:fa:5f:a5:18:0b:32:82:e3:2e:f9:fb:5d:a9:5b:22:58:
ec:70:d5:27:27:47:55:f3:bf:da:57:04:93:7e:d8:3c:33:d9:
db:03:6f:c7:3e:63:75:62:6c:1d:27:e2:a0:91:06:91:bf:ce:
6d:ad:91:46:47:ea:cb:c2:ae:4f:db:2a:16:72:d1:4c:3a:82:
95:36:c0:a8:e4:f4:72:5f:d4:ee:28:29:43:3e:01:49:fd:48:
de:7b:75:4d:a1:01:2e:46:7b:00:00:07:e2:72:33:65:9b:84:
80:6c:69:eb:1a:44:0f:51:8f:5b:91:ab:6d:19:9a:11:4c:f9:
35:7c:7b:d0:c8:36:a9:99:da:09:05:1b:a8:92:1e:0d:77:59:
84:84:a3:b7:97:91:10:95:ac:90:5a:fd:81:fa:1a:3e:63:50:
a4:e0:8a:71:f8:0e:28:bc:2f:66:2c:f9:22:b7:df:c9:6e:6e:
58:af:b7:cb:d0:e5:89:f6:3c:c2:4e:28:8a:35:1b:3c:47:3a:
59:30:9f:2f:18:8c:19:46:39:fc:0b:e7:07:b7:2e:05:b4:e8:
22:16:34:5a:2a:b1:f5:a7:d8:0b:19:d8:78:0b:0e:6b:61:4d:
b7:f4:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:17 2023 by rpki-client on console-ams.rpki-client.org