Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa
File: 0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa (raw, json)
Hash identifier: 5UlV1bAGg7Edq9ZcBxUKR13ci5RceoXEagfcmn8Nd9w=
Subject key identifier: 7C:92:2C:29:81:6C:61:1E:A4:3E:79:51:C7:93:8D:85:B3:3B:37:EF
Certificate issuer: /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial: 010D0C9F4328583D9D71739B3622B8FEF327AD40
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa
Signing time: Mon 18 Apr 2022 04:00:00 +0000
ROA not before: Mon 18 Apr 2022 04:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 396073
IP address blocks: 147.124.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9d:71:73:9b:36:22:b8:fe:f3:27:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
Validity
Not Before: Apr 18 04:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=db35acb3-0f77-4d8b-aae0-97cd763983ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:40:3c:35:c2:2c:52:40:4a:d3:46:9a:2a:c0:
3b:cb:a6:5c:29:32:7d:f5:de:bd:c0:ed:ef:a2:25:
0f:b1:f2:b9:36:19:e8:85:09:1f:58:6f:99:82:ee:
b3:a4:74:40:a5:0f:34:82:e3:7d:a1:da:59:5f:c3:
59:04:56:f3:e3:de:ac:03:44:ac:b2:04:35:e6:0a:
9a:70:80:93:18:12:df:e7:97:24:01:fd:ab:84:83:
07:0d:ba:1d:8d:14:35:cc:8b:18:8d:a6:9c:96:77:
f8:1f:e9:7c:44:8f:eb:0a:f5:b8:2a:80:0e:6c:c5:
04:9c:60:79:62:de:20:9e:46:50:73:2a:94:f1:cf:
e5:a2:ab:3d:a9:07:f5:94:6e:b7:dc:2c:22:d4:1f:
9b:b2:c8:13:2a:b5:86:6e:7c:77:f8:2e:b6:ba:fa:
6b:30:16:2e:70:d0:9d:69:2a:96:d0:6d:4c:86:26:
3a:d8:bf:3f:21:38:ce:22:32:8c:3e:80:bb:50:bb:
e1:98:8f:85:8d:8d:f9:50:97:12:ab:84:4e:72:44:
51:71:d0:f6:47:70:67:2a:b8:8f:4d:26:8e:f0:c1:
7f:92:1a:40:15:10:58:cd:eb:37:a1:5b:7d:3a:1f:
29:85:74:9d:28:f2:5d:69:2e:83:4a:a3:a4:a8:28:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:2C:29:81:6C:61:1E:A4:3E:79:51:C7:93:8D:85:B3:3B:37:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl
X509v3 Authority Key Identifier:
keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:18:f1:c4:1a:f0:96:02:66:05:be:c7:27:01:a1:df:69:6f:
42:e6:47:da:bb:6b:a3:c3:24:68:e7:ed:31:c3:88:1e:95:c5:
e6:18:67:d0:95:43:72:d6:80:a2:7f:60:17:8b:a6:54:16:93:
d3:a2:88:a8:f7:37:02:a3:d7:ce:33:cb:28:c2:70:91:9e:c4:
14:ff:b6:9a:e7:7e:b1:1f:20:64:c7:d4:4a:66:67:54:62:ad:
1a:c3:e0:2f:8e:ee:8b:bb:88:d5:77:63:c6:4a:4b:06:9a:ef:
c3:ff:dc:51:8a:16:59:a0:3c:d1:28:63:59:e9:90:0a:8b:48:
94:bc:4b:36:18:7c:46:5b:3d:36:da:41:e8:c7:96:04:e1:db:
32:62:81:99:33:64:74:27:1e:5e:02:25:46:ed:c0:28:4c:f8:
34:d5:62:69:40:e4:36:35:cb:af:11:86:48:4c:c3:29:2b:fe:
10:a1:3b:8e:68:91:c8:62:39:82:bb:2e:db:62:4c:7a:a5:af:
8c:d1:75:04:54:9f:6e:d1:f1:b5:03:63:ff:38:d5:95:d3:3e:
27:96:af:6e:1a:d7:03:d1:7e:84:c8:d1:d9:b8:fc:f3:a8:56:
9f:91:2b:1a:af:8a:46:04:61:ab:6b:5c:17:53:48:be:c4:95:
a5:87:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:14 2024 by rpki-client on console-fra.rpki-client.org