Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/704f143b-557b-38a2-ba64-8920047f4e73.roa
File: 704f143b-557b-38a2-ba64-8920047f4e73.roa (raw, json)
Hash identifier: O4kPEDv43SfuhsdLOIhhgkntfW+soKBygd+NkCSQ5Hk=
Subject key identifier: B1:C4:A0:C1:35:13:A7:3C:A9:8B:67:A7:51:1C:E9:F3:1D:07:54:DC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B434687279400F683140A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/704f143b-557b-38a2-ba64-8920047f4e73.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 173.194.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b4:34:68:72:79:40:0f:68:31:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=66ff0872-96ca-4246-8173-c4148ef402bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:40:4a:bd:e8:aa:34:d2:6f:70:63:c1:ca:
48:dd:bc:51:4e:c9:3e:e4:ea:48:5f:06:e6:99:8f:
4c:cf:51:79:ad:4c:b5:92:a9:07:92:25:c2:9d:b3:
93:7b:0a:20:b1:aa:84:1c:8f:1c:53:6f:86:18:d2:
d5:d8:f7:1f:e8:c9:8c:f5:92:78:42:52:85:0b:10:
68:0d:db:f9:ff:c4:fd:bb:2b:1c:7a:6b:77:72:b4:
b6:66:2d:39:97:7a:ff:29:7c:44:fb:04:5e:f6:2c:
59:f7:93:de:28:ec:58:52:2f:8a:ff:77:b9:7f:f9:
f9:06:df:d2:1b:f4:36:e6:36:a3:65:f1:c1:cf:10:
95:96:aa:87:2b:4b:b8:55:07:8c:13:08:61:fa:16:
b6:d8:c0:6e:0b:a8:51:10:de:51:6a:82:76:1c:36:
f0:b9:ac:fc:fc:0d:f2:01:5c:2e:6b:9f:b6:e4:f8:
d7:0c:13:66:0a:fb:16:93:94:b1:13:89:6f:3a:03:
32:d6:ea:72:98:b9:eb:1f:f3:4d:9b:ca:a1:be:52:
20:6c:cc:e1:30:9a:69:29:10:ec:48:12:82:b9:d3:
84:67:d6:31:1e:8c:30:e4:33:65:91:47:3c:cf:90:
54:da:c6:4e:0b:36:16:32:3f:ef:b4:03:ec:fe:62:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:A0:C1:35:13:A7:3C:A9:8B:67:A7:51:1C:E9:F3:1D:07:54:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/704f143b-557b-38a2-ba64-8920047f4e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:94:95:49:25:90:85:00:16:9c:16:a5:3d:97:f1:57:a2:6b:
2d:f8:c1:e1:19:eb:00:6d:3a:10:fd:19:fd:a3:d5:ef:1c:a4:
a5:bb:8d:70:79:2c:b9:67:dd:38:f1:02:a4:a0:6a:33:a2:29:
11:e3:62:51:ee:a4:4d:1e:31:3c:3d:f9:d9:ac:31:18:bc:8f:
77:f2:c8:26:a2:e3:39:ef:8b:60:af:ac:4c:67:8e:59:9e:86:
46:5f:7b:9a:38:f9:24:a9:63:a3:e9:e1:8f:c8:bc:28:90:18:
8c:5e:74:5d:e6:01:a1:10:e0:a0:ab:6a:67:19:3f:46:b7:2b:
e7:dc:f0:7a:31:63:d3:10:ce:90:4b:c3:fb:b1:be:41:58:a3:
30:28:f3:15:40:a2:c7:5c:4c:7b:06:a6:fd:b8:4b:28:4d:eb:
a1:ed:72:65:ef:2f:1c:8d:3f:d7:3b:c5:a0:cf:29:56:3a:72:
53:c9:01:68:e3:1b:62:0c:e5:6b:4d:48:c7:aa:58:dc:cd:95:
a2:70:b8:58:0b:a8:e1:a5:01:68:3b:f8:a2:23:e9:56:2c:c3:
c9:32:15:ec:6a:a0:11:3b:5b:75:93:31:31:68:3d:57:13:a6:
78:f4:3c:3b:21:17:af:2a:2e:0b:c0:77:c2:4a:bc:bd:2a:7d:
2a:c1:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:48 2023 by rpki-client on console-fra.rpki-client.org