Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/b24c8871-30ef-3871-b80a-a0272d51c230.roa
File: b24c8871-30ef-3871-b80a-a0272d51c230.roa (raw, json)
Hash identifier: 4PKlUi6SVlBJ5eR0+RYMcMLbCxVJpp5XQe2q5rN12cw=
Subject key identifier: E0:52:A7:75:DB:5C:EB:04:E2:74:98:99:D1:5C:C4:8E:1C:0B:96:6A
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F43285844DE0FDFA6F4E257426466A280
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/b24c8871-30ef-3871-b80a-a0272d51c230.roa
Signing time: Mon 12 Feb 2024 14:00:30 +0000
ROA not before: Mon 12 Feb 2024 14:00:30 +0000
ROA not after: Sun 12 May 2024 13:00:30 +0000
asID: 398395
IP address blocks: 104.152.141.0/24 maxlen: 24
163.123.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:de:0f:df:a6:f4:e2:57:42:64:66:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Feb 12 14:00:30 2024 GMT
Not After : May 12 13:00:30 2024 GMT
Subject: CN=df3230a7-2dd1-4345-a34f-3ced22e39049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:3f:d6:92:02:46:fa:17:a2:59:99:d0:c6:
15:77:a7:75:15:27:a6:d5:87:20:dd:a8:b4:f1:cf:
5e:4e:92:b2:2c:97:1c:20:55:8e:6c:0a:31:1d:9e:
74:c0:14:a5:02:41:61:0d:57:56:30:25:9b:7f:61:
10:32:7e:60:c3:1e:b8:2b:5b:58:96:76:07:9b:c6:
6f:d2:f1:23:92:2a:52:69:bc:f0:84:14:55:d1:ae:
e2:b6:58:97:ce:61:b3:6e:0c:35:03:2d:91:a7:3a:
f6:7c:3d:3b:df:23:89:a5:79:5b:68:fc:34:2c:25:
f7:5a:a5:40:f3:36:a0:4e:11:bc:0d:86:ae:e5:9a:
40:10:28:08:10:0d:89:b0:08:4f:5f:48:14:12:df:
56:c7:c4:74:a8:cd:b7:da:ac:17:0f:b7:70:6b:6f:
a7:86:40:87:86:e4:5b:c5:8a:fc:8a:19:0c:32:02:
3b:93:30:3e:ea:50:4f:7c:0a:b3:dc:72:a7:c6:80:
1d:b5:e3:8f:31:6c:6b:29:c1:78:ef:4a:58:00:b9:
6c:1c:a6:ad:97:a0:0b:21:dc:38:6c:a6:ee:e4:fe:
b5:ff:52:25:e4:f7:15:d6:af:34:e3:d8:32:51:30:
b8:7a:6c:d1:59:60:87:27:54:14:18:35:64:a6:bd:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:A7:75:DB:5C:EB:04:E2:74:98:99:D1:5C:C4:8E:1C:0B:96:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/b24c8871-30ef-3871-b80a-a0272d51c230.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.152.141.0/24
163.123.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ec:e4:1f:9e:c8:b3:5a:12:0f:22:54:b3:6e:70:f0:39:cd:
e1:2d:88:38:45:e3:fa:37:58:3c:83:57:92:04:f0:ab:bb:92:
c6:c7:a3:bb:ae:d8:cd:27:d5:20:2b:3c:61:62:eb:83:6e:30:
4e:33:3e:c8:1d:ec:60:61:4f:01:8f:d9:fe:b2:50:8e:19:bd:
16:dc:b0:b3:57:23:11:0a:cb:ab:cc:b9:b4:31:68:5d:5c:f7:
e4:76:cd:0a:d9:4c:87:96:4e:f7:fe:da:a8:6d:f6:4b:77:fb:
2c:ab:8f:d3:33:c0:8b:fe:a7:18:90:f2:76:07:5f:29:af:c7:
a4:1c:e7:75:74:9d:20:42:7d:ab:a7:c5:e5:28:a0:98:8d:e9:
01:30:ff:cb:70:7c:ae:18:17:7f:21:9f:a2:ee:7b:b1:65:55:
de:3a:e9:ba:82:89:ee:11:78:ff:cd:8f:c4:74:fb:a1:d1:c1:
7e:b9:b9:c9:a4:92:75:f3:f0:62:12:97:c5:16:5b:90:23:30:
e8:6c:fc:e1:85:4a:72:7a:d9:40:4f:3f:cb:64:92:2d:44:3d:
04:93:31:b1:95:2b:16:54:d4:ca:09:ff:0f:b0:14:37:82:05:
95:e8:0c:86:73:6c:5d:be:90:db:85:fe:53:cb:af:7f:44:ee:
46:e8:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:02 2024 by rpki-client on console-ams.rpki-client.org