Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb17054c-94a7-316d-b2f4-296c1eb2eb23.roa
File: cb17054c-94a7-316d-b2f4-296c1eb2eb23.roa (raw, json)
Hash identifier: Xm6K6FiIAzg14zxN4AEXxLozb7doq9a+tNmrUropR8w=
Subject key identifier: 00:B1:7D:C8:9F:60:D2:E2:24:76:2E:B0:F0:77:58:79:06:1F:9E:E7
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F432858441DB06267BDE4E841E4B81DB8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb17054c-94a7-316d-b2f4-296c1eb2eb23.roa
Signing time: Mon 04 Dec 2023 12:00:00 +0000
ROA not before: Mon 04 Dec 2023 12:00:00 +0000
ROA not after: Tue 16 Jan 2024 05:00:00 +0000
asID: 36522
IP address blocks: 206.172.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:1d:b0:62:67:bd:e4:e8:41:e4:b8:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 4 12:00:00 2023 GMT
Not After : Jan 16 05:00:00 2024 GMT
Subject: CN=0d71e093-e285-4ee4-8ffb-e0c72c77178d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:49:c2:df:ff:f1:03:8a:e8:aa:1c:a5:b7:
ed:8a:c9:d4:5e:fd:cd:5a:4f:94:82:10:3a:4e:92:
3d:c9:80:b1:db:16:ba:a7:69:4a:4a:44:f0:bd:64:
63:c3:05:76:26:41:b9:0d:3e:c0:27:e8:c5:b6:c8:
e8:19:b8:45:04:a6:ee:1f:3f:e4:5b:cb:5b:20:af:
e9:be:17:54:41:c7:65:a5:e4:b3:9d:a5:87:67:ea:
5f:80:cf:71:0a:a6:5a:4e:dc:64:ea:af:d9:4a:9a:
8e:04:bb:50:bc:08:e7:75:5f:6d:6b:90:a8:37:bf:
22:30:40:d2:b3:21:44:8d:0e:20:39:e0:24:2c:29:
56:07:fa:a8:b6:df:ea:a0:be:68:07:e3:a7:cf:c6:
2c:42:04:8f:9c:48:c3:2e:30:90:be:8b:e0:e7:1b:
2e:a7:62:2a:e7:61:3a:07:aa:7d:03:88:c8:39:e7:
33:68:7f:68:b0:d4:03:21:b3:0b:ae:7a:bf:7c:29:
64:af:f9:58:78:c0:7e:b7:5b:0f:84:2a:6b:39:bf:
7c:0a:24:70:f5:d8:5f:0f:e2:a6:d5:59:ec:0a:19:
a7:74:81:87:f3:7d:33:c1:c8:87:0a:b3:10:d5:a9:
b8:30:db:99:d3:2d:0a:3d:74:62:65:14:ae:fc:05:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B1:7D:C8:9F:60:D2:E2:24:76:2E:B0:F0:77:58:79:06:1F:9E:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cb17054c-94a7-316d-b2f4-296c1eb2eb23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
206.172.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:bb:3a:e5:7f:c9:1e:dc:df:bb:da:f1:c8:e7:6c:65:11:eb:
a0:0f:06:0a:2d:23:05:a7:03:63:dd:e5:ac:81:1d:15:94:4c:
73:40:8f:04:55:61:59:91:21:df:f8:d3:ec:3c:fb:b1:7a:b5:
2e:e3:ae:39:41:97:da:97:4c:3a:60:17:58:da:05:d8:f3:0c:
7a:4c:f9:9d:91:f3:8f:39:75:7c:5b:86:40:98:96:cf:a3:82:
f5:2e:95:76:9b:a6:c4:8b:c1:1b:a5:63:a1:98:b2:00:38:34:
70:aa:76:35:77:da:66:d2:bf:44:b9:5a:89:d1:4c:c9:17:d9:
ea:ad:14:36:b3:6d:18:39:50:97:96:c5:71:56:a9:d2:4d:2b:
63:68:7b:36:92:36:78:72:48:71:d6:d5:44:f8:ec:76:6b:f8:
e5:9c:ed:9f:b4:ce:e9:c8:f5:3a:a3:2e:4e:a4:e8:c4:77:f6:
6d:ca:c8:7c:bf:0d:f4:ef:db:22:89:d4:35:4a:74:df:7e:ad:
88:d4:28:11:1e:11:8f:9c:d4:fc:ec:b3:ec:4f:55:01:df:c3:
92:da:24:9d:76:79:b8:f7:fc:1a:05:58:81:ee:56:72:d5:7c:
9e:fe:88:ff:55:16:f1:29:f5:5d:de:24:41:64:2c:32:34:57:
a7:16:b5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org