Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1501ec7b-b850-3116-923b-31aec5ffe477.roa
File: 1501ec7b-b850-3116-923b-31aec5ffe477.roa (raw, json)
Hash identifier: iTEdrXDCZk+KEnk/tOgOxeFJ2YuTLvzcLuXdMeWXTGg=
Subject key identifier: C0:D3:37:42:A9:92:8E:33:6A:10:FD:FB:CB:DE:BC:B5:42:E2:2E:0B
Certificate issuer: /CN=ac448c7f-05bb-4802-8533-0aad8a69acb1
Certificate serial: 010D0C9F43285844D4561D5CE7762F586A3B0BC0
Authority key identifier: 68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1501ec7b-b850-3116-923b-31aec5ffe477.roa
Signing time: Fri 09 Feb 2024 02:24:01 +0000
ROA not before: Fri 09 Feb 2024 02:24:01 +0000
ROA not after: Thu 09 May 2024 01:24:01 +0000
asID: 400189
IP address blocks: 161.199.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:d4:56:1d:5c:e7:76:2f:58:6a:3b:0b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac448c7f-05bb-4802-8533-0aad8a69acb1
Validity
Not Before: Feb 9 02:24:01 2024 GMT
Not After : May 9 01:24:01 2024 GMT
Subject: CN=19522215-6c48-443f-a5f1-a00584481012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:94:f7:ca:e8:8d:18:f7:b5:ad:21:60:3d:
9f:01:30:b8:01:bc:1b:c9:e5:68:3b:03:73:66:dd:
aa:2a:59:e8:20:33:7f:35:b7:93:e7:9c:05:99:54:
01:0f:63:6d:6c:cf:1b:2d:0e:01:47:c1:be:85:4e:
1e:9d:1d:0c:9a:97:e9:9b:4f:4c:55:51:17:9e:68:
bf:d8:b9:36:ea:c0:5e:d5:3f:a4:7d:e2:95:23:39:
e1:aa:6f:df:92:eb:cc:97:a4:c6:1d:33:1f:23:9a:
59:c1:63:d7:12:d4:3c:3a:26:57:a3:46:84:f1:96:
3f:0c:99:bf:6b:5a:4b:82:db:3e:a4:c0:49:13:2d:
a4:7e:8d:10:cd:cc:0a:1c:52:a3:2f:64:ce:b7:c6:
c0:c9:ff:37:13:6f:58:aa:57:a6:ae:be:f1:23:83:
dd:e1:08:09:fa:69:f6:eb:58:53:1b:6c:2a:a7:a1:
72:2f:8c:4c:bd:84:87:3d:98:6d:2f:85:23:0d:dc:
3c:d6:6a:3a:36:08:e6:33:a4:2a:00:48:06:37:87:
cd:0a:29:50:5d:ed:21:f5:f5:6b:bc:b7:1a:c2:17:
0a:1a:63:91:27:f1:30:53:a4:5e:9b:54:0d:81:14:
2e:c1:f5:62:a8:bb:b7:7e:16:0f:7e:59:56:25:73:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:37:42:A9:92:8E:33:6A:10:FD:FB:CB:DE:BC:B5:42:E2:2E:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/1501ec7b-b850-3116-923b-31aec5ffe477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1/ac448c7f-05bb-4802-8533-0aad8a69acb1.crl
X509v3 Authority Key Identifier:
keyid:68:1B:6C:BF:68:80:D6:70:FD:14:48:6E:E9:8B:38:01:3A:A8:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac448c7f-05bb-4802-8533-0aad8a69acb1.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fe:b9:2e:8d:6c:33:19:18:14:7c:01:36:0c:f3:35:5c:2c:
38:e5:c6:f8:6a:0b:88:0e:8c:35:e1:4e:8c:87:6e:5f:7e:03:
f7:cf:7c:c2:bf:0e:23:40:47:13:73:8e:de:81:e7:2a:1f:04:
7b:3f:6e:ce:d0:47:14:71:fc:8d:40:35:43:c5:ce:4e:9b:c6:
34:0f:22:20:4a:70:ec:5c:2a:85:3a:05:2c:94:9d:e3:b7:30:
f2:4f:31:f1:1e:50:6e:97:4d:cf:ee:8f:0f:72:dc:e4:6a:a4:
ac:49:44:b8:41:b3:c9:a8:e4:4a:e6:aa:d1:19:6b:3f:60:21:
46:d0:42:d3:eb:60:9d:43:ae:03:0b:43:46:8b:ea:a8:5e:98:
8c:7c:1b:56:d8:b6:82:93:df:c8:67:6a:03:23:c0:47:aa:cf:
0c:1e:7c:59:18:79:7b:c0:47:d9:77:9f:bb:77:6c:0f:01:ee:
16:5a:de:af:ff:c6:ad:87:c4:5e:e1:a1:bb:d6:59:c5:2a:cb:
b6:24:fe:24:37:9e:e4:e7:b3:88:64:ca:63:bd:ff:48:ba:3f:
23:8e:79:8b:de:df:d9:1c:88:32:f8:58:9a:f7:6c:d0:99:6a:
00:47:73:d7:2e:55:93:ab:84:b5:63:37:40:7b:83:51:ea:e1:
ce:8b:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:11 2024 by rpki-client on console-fra.rpki-client.org