Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca086ce7-d7ce-3287-bb6b-5065087ad414.roa
File: ca086ce7-d7ce-3287-bb6b-5065087ad414.roa (raw, json)
Hash identifier: 0EX5JOGQ1zOvPvPyNgjwsyn4HViu39NSITFTJrZ05tc=
Subject key identifier: 7E:3A:B1:3D:B3:90:67:40:A0:C0:F7:D4:FC:3D:53:81:75:99:02:6C
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F43285845089C9982384D528064A007E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca086ce7-d7ce-3287-bb6b-5065087ad414.roa
Signing time: Tue 27 Feb 2024 19:48:04 +0000
ROA not before: Tue 27 Feb 2024 19:48:04 +0000
ROA not after: Mon 27 May 2024 18:48:04 +0000
asID: 327909
IP address blocks: 140.174.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:08:9c:99:82:38:4d:52:80:64:a0:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Feb 27 19:48:04 2024 GMT
Not After : May 27 18:48:04 2024 GMT
Subject: CN=97f204ca-d84c-49d5-ade5-23f138994fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:f1:9e:59:68:d5:38:59:86:15:96:68:1b:
a4:d8:b1:de:97:ca:89:3d:1e:4a:67:5e:cc:73:e6:
c6:73:ae:d6:92:e8:08:3c:09:b3:93:00:4c:3b:8f:
85:ff:08:6a:b7:dc:67:b2:32:e4:30:2b:f6:cf:55:
81:0a:21:dd:d0:52:71:69:44:13:9a:38:7a:df:7f:
94:30:c9:ef:3f:65:66:10:df:a8:c1:2d:84:6e:90:
e8:88:9c:ba:4a:a9:a2:28:81:c1:6a:88:82:cb:bb:
df:63:fd:c9:8a:1a:17:37:f4:a0:b7:a7:17:01:7e:
bb:6b:45:3e:b6:ac:ef:3b:c4:32:9e:fa:ae:eb:e3:
9f:ca:6a:94:81:59:15:76:6d:86:7b:fa:1e:2b:ed:
c6:cb:d8:39:01:7c:ef:ba:d4:f3:aa:6a:1b:0f:0b:
0c:ab:62:0e:0c:d7:a7:25:84:8b:14:f9:d7:42:37:
cd:a9:30:10:ce:d0:cb:87:8e:d6:4b:9a:75:85:4d:
5b:39:4c:df:cb:43:8b:78:95:93:16:cc:2f:d5:d2:
aa:c3:5c:a2:d6:7c:d9:da:3c:07:ff:c9:d1:1e:23:
1a:01:f5:3b:85:d9:b8:e6:dd:40:dd:54:0a:fb:52:
21:8b:6d:90:19:f0:d9:0d:2d:98:55:03:49:af:b5:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:B1:3D:B3:90:67:40:A0:C0:F7:D4:FC:3D:53:81:75:99:02:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca086ce7-d7ce-3287-bb6b-5065087ad414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a0:a1:a4:ec:40:ed:b9:ea:2b:db:fa:1b:69:37:0c:a2:01:
c9:70:47:59:0e:35:6e:10:7d:a1:71:0a:55:2a:07:b2:0c:6a:
57:31:d4:06:00:46:6b:b4:95:92:4e:e6:ad:4e:f3:97:04:1d:
0f:67:df:f7:99:de:ac:98:c3:9e:db:ea:f5:02:30:5e:c7:3b:
4a:1d:e3:b4:0e:b0:85:ba:75:c4:08:3d:ec:b3:71:46:bf:ae:
b5:f6:cc:fa:f8:ef:91:69:ec:4a:dc:b6:95:66:00:37:50:2a:
33:7d:ad:02:89:ff:af:60:3e:83:cd:f0:96:1b:fe:a2:e2:ef:
06:ef:f3:cd:49:47:6b:dc:14:be:0e:b5:3c:03:fe:d9:13:2c:
85:b0:73:b0:5a:9c:a5:5a:09:07:08:39:1f:21:09:6c:1b:50:
c2:de:92:30:b7:e7:1c:f6:95:ee:56:22:12:0c:5c:ff:a3:56:
4d:14:12:fa:75:94:f5:f3:ca:44:f3:0d:e1:5e:75:06:ba:a2:
bc:36:11:05:3b:8f:21:18:db:87:c9:af:ad:e0:9c:3e:8e:43:
6b:de:96:34:40:18:26:6c:b5:47:2e:2a:33:5a:9d:c4:5c:8e:
d9:31:8c:5d:f9:6d:ab:41:13:46:57:50:8d:3a:2e:62:75:1e:
1f:c5:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:17 2024 by rpki-client on console-fra.rpki-client.org