Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/df5bb36e-39bb-3149-9cc3-bf904ec2a303.roa
File: df5bb36e-39bb-3149-9cc3-bf904ec2a303.roa (raw, json)
Hash identifier: XcTjDxFIFr/gbnkB60WPb4v+LO/7ZUyAjq1V8bne1V4=
Subject key identifier: E4:AE:3F:E8:F4:D1:EA:02:A3:13:96:4A:89:00:19:AD:FD:2B:2F:4E
Certificate issuer: /CN=69750c1e-d95a-4feb-83fe-2dde8c2f5c68
Certificate serial: 010D0C9F43285837C25E5F7BCBBCA213C668E980
Authority key identifier: 5B:B4:1D:53:E6:96:10:06:F2:9C:49:C9:17:1F:12:42:9E:7B:8E:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/df5bb36e-39bb-3149-9cc3-bf904ec2a303.roa
Signing time: Thu 07 Dec 2017 05:00:00 +0000
ROA not before: Thu 07 Dec 2017 05:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 40676
IP address blocks: 23.160.64.0/24 maxlen: 24
2602:fea6::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:c2:5e:5f:7b:cb:bc:a2:13:c6:68:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69750c1e-d95a-4feb-83fe-2dde8c2f5c68
Validity
Not Before: Dec 7 05:00:00 2017 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=395768c8-67a1-45d7-9904-d97384c4750b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:f1:f9:33:d3:a2:c0:a1:45:02:4c:7a:57:
bd:a0:ca:af:73:41:60:f5:40:db:75:8b:33:27:8e:
62:7a:b8:c8:59:0b:d5:bc:6b:0c:bd:88:3e:71:61:
76:f8:2d:4d:ba:6a:98:a3:98:53:17:8a:81:52:37:
84:37:5a:2f:55:a3:1b:4c:8b:64:46:82:98:b1:1d:
09:15:52:6a:5d:e3:31:0b:40:3c:0a:0f:42:28:af:
6c:a6:8c:9d:5f:24:35:43:07:b8:f2:f2:6c:7a:66:
6d:8e:c1:f4:74:4f:50:cf:83:c4:94:5e:ee:e5:e4:
57:70:4b:0f:d3:7b:ae:e5:03:ad:26:07:20:dd:93:
e3:b9:f0:7e:be:16:a6:bb:2a:4a:dd:b9:61:79:45:
31:46:8b:e9:9a:53:4b:5e:88:45:e4:e9:06:aa:59:
82:76:de:79:04:17:f9:88:4f:f3:36:ff:82:90:4f:
51:68:75:24:a5:53:00:8e:01:ed:f9:2e:28:82:5a:
1f:12:ce:7e:12:a4:f5:cb:25:d5:37:76:c2:f8:a7:
cb:6a:f3:7e:6a:40:21:6e:4e:ec:0c:8a:83:20:4b:
16:34:af:7a:8a:03:38:fd:06:0f:99:28:16:0f:15:
fd:e5:f4:ad:77:10:9f:30:3f:bc:0c:25:1e:25:4f:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AE:3F:E8:F4:D1:EA:02:A3:13:96:4A:89:00:19:AD:FD:2B:2F:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/df5bb36e-39bb-3149-9cc3-bf904ec2a303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.crl
X509v3 Authority Key Identifier:
keyid:5B:B4:1D:53:E6:96:10:06:F2:9C:49:C9:17:1F:12:42:9E:7B:8E:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69750c1e-d95a-4feb-83fe-2dde8c2f5c68.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.64.0/24
IPv6:
2602:fea6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a4:3a:06:17:22:79:8a:2a:86:03:85:ab:85:74:5a:83:c9:
d1:88:b3:28:d4:34:e7:d6:13:98:5a:e2:8a:7f:73:b5:68:b1:
bb:de:a9:0f:cf:43:0d:3a:99:e8:ca:09:9c:75:0e:24:22:cf:
bf:c9:c4:ac:cb:0f:4c:a3:dd:ff:ff:b7:c9:13:b6:01:6d:90:
9d:2b:26:b2:63:43:00:ad:3f:e5:12:b7:ce:06:33:f0:a1:4f:
c9:f7:d6:78:1f:f0:d6:e1:c6:72:e2:93:69:95:94:16:eb:17:
68:e1:9a:72:b1:74:68:ee:33:ef:23:38:43:14:ad:51:1f:79:
a8:df:f1:89:1f:c3:cc:bc:ac:50:0e:ab:ff:c0:0a:07:e5:ad:
dd:81:92:69:59:f7:7f:e5:00:f6:34:00:1e:6a:58:d8:42:71:
30:8e:8a:67:68:fc:f9:f5:e0:4c:f6:97:bb:3f:ce:90:80:0b:
de:86:ba:89:97:3b:05:01:66:71:1e:d0:91:d9:b9:e7:10:3c:
df:e2:92:ac:5f:c4:c1:9c:00:71:9d:44:ae:47:bf:92:d7:1b:
f3:81:05:04:2c:d3:80:a9:4f:0c:29:31:9f:9b:c2:9a:5d:8c:
d0:4a:53:b5:79:f2:a7:4f:a3:cd:37:02:a7:24:61:16:86:b6:
24:f7:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:20 2023 by rpki-client on console-ams.rpki-client.org