Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/bd2be92b-2923-391a-ba85-65f392b5d4af.roa
File: bd2be92b-2923-391a-ba85-65f392b5d4af.roa (raw, json)
Hash identifier: 6t7BZtX4nGe/F83sVbV5tWWDpUWkR26f0fE5qx6w9SI=
Subject key identifier: 37:D1:44:02:E2:3F:6D:30:25:36:8B:47:0A:80:A7:73:E0:A1:A2:E8
Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial: 010D0C9F43285841E53291A0301AF6C567220880
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/bd2be92b-2923-391a-ba85-65f392b5d4af.roa
Signing time: Tue 16 May 2023 01:00:16 +0000
ROA not before: Tue 16 May 2023 01:00:16 +0000
ROA not after: Mon 14 Aug 2023 01:00:16 +0000
asID: 16509
IP address blocks: 131.226.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e5:32:91:a0:30:1a:f6:c5:67:22:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Validity
Not Before: May 16 01:00:16 2023 GMT
Not After : Aug 14 01:00:16 2023 GMT
Subject: CN=74b99317-9c94-48ad-8fe3-39ec824548ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:9c:11:f4:27:7b:f7:cd:ed:1f:06:d3:da:
bf:06:c8:04:38:30:83:78:d4:e5:ac:80:63:a4:3b:
63:82:db:6a:a9:1d:60:7e:48:fb:0b:71:f0:69:4d:
72:37:7a:d5:c0:ed:59:7b:43:45:72:62:b0:56:9d:
2f:bb:9d:4b:23:7e:5f:56:9e:bc:99:e5:d0:1a:7d:
7f:a2:f3:37:a8:0b:76:6e:96:2a:01:71:6a:12:57:
48:f6:ff:e7:9f:1e:d3:34:a8:c3:8a:92:e9:58:f4:
b6:bb:f8:13:c5:ea:58:b8:a4:a9:62:d0:eb:dd:43:
ef:1b:61:03:14:a6:cb:bc:49:2e:7e:17:d0:a4:4b:
d4:95:27:17:a0:de:6b:58:93:a9:14:08:e0:d3:b4:
a5:75:c7:e9:38:19:1e:66:32:6b:f9:43:93:54:ff:
3a:7e:63:23:69:84:03:90:98:f9:96:24:58:2f:fa:
8b:7f:fc:18:b2:cf:8a:2c:7e:b0:24:40:aa:5f:d2:
43:2d:48:8c:91:8d:ba:a4:00:45:1f:b3:0d:1e:40:
77:47:28:ce:5a:d8:8e:26:ec:b4:f8:fa:a9:4f:2f:
51:2d:69:5b:e5:b9:70:ed:47:5d:5a:0c:b4:a5:0a:
f3:fa:48:95:14:85:cf:cb:90:16:9e:44:1e:b9:54:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:44:02:E2:3F:6D:30:25:36:8B:47:0A:80:A7:73:E0:A1:A2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/bd2be92b-2923-391a-ba85-65f392b5d4af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
X509v3 Authority Key Identifier:
keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
sbgp-ipAddrBlock: critical
IPv4:
131.226.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d6:c9:10:0a:92:30:b8:98:be:cd:88:cd:9e:2a:78:c8:91:71:
10:a5:9c:58:eb:be:b6:ed:ed:09:ea:d0:af:72:c7:32:ed:02:
d5:36:07:99:e2:79:38:80:4a:93:dc:5a:38:ee:3b:80:be:bd:
23:27:f3:a0:2c:94:fa:af:44:b0:7e:11:be:ec:11:b7:06:cc:
83:3f:0f:50:a6:1c:6f:ce:a9:57:75:ed:c8:40:98:1a:37:e9:
a2:a3:af:ed:7b:b3:e9:35:55:a5:9f:8a:5a:fd:0e:ff:b0:07:
c5:73:d9:75:97:b3:af:80:22:a1:df:83:49:0b:d3:4f:29:57:
e2:b0:da:65:2e:b3:4e:a5:5d:39:d6:5b:43:f3:dd:8a:17:ba:
0c:76:39:c1:83:5a:f6:78:d5:05:f4:e4:0d:a4:25:5e:9b:65:
4a:06:f7:6c:e4:8c:8f:cc:15:c5:db:7f:c3:d1:8d:2a:29:e2:
d7:be:d7:3a:03:04:c9:57:64:40:d4:73:dd:2b:59:61:e2:b7:
e8:0a:e6:c0:34:c9:ae:59:1f:92:bd:ec:3a:fd:dd:27:c0:ef:
fd:db:13:42:88:5e:d6:9f:bb:42:17:a7:d1:0f:19:0d:2d:ad:
d3:11:7f:07:00:9e:5a:1e:01:f6:42:89:34:2c:07:d4:8d:c4:
e9:be:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:15 2024 by rpki-client on console-fra.rpki-client.org