Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b01dce6-362e-3680-a3fb-53df2b5f9eef.roa
File: 2b01dce6-362e-3680-a3fb-53df2b5f9eef.roa (raw, json)
Hash identifier: 6OBp17pQTOzFBwOxGBf9B+fp7goHVG3sdktWXHEgluY=
Subject key identifier: 6F:A7:BE:4B:5A:A7:DD:22:CF:F6:D8:A7:77:58:A1:CA:99:97:26:19
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285842C0594C6D8A54B41F2082CF00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b01dce6-362e-3680-a3fb-53df2b5f9eef.roa
Signing time: Wed 02 Aug 2023 13:00:18 +0000
ROA not before: Wed 02 Aug 2023 13:00:18 +0000
ROA not after: Tue 31 Oct 2023 13:00:18 +0000
asID: 35913
IP address blocks: 172.111.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:c0:59:4c:6d:8a:54:b4:1f:20:82:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Aug 2 13:00:18 2023 GMT
Not After : Oct 31 13:00:18 2023 GMT
Subject: CN=fc56bda4-3be0-4f4a-902c-922d1e862b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:f5:b6:a3:df:dc:55:62:46:b3:92:1c:9e:
05:21:9d:64:5c:c5:6e:fe:1b:b9:ac:ab:19:76:32:
8d:ef:44:3b:f5:ca:a2:9a:69:07:40:56:e8:20:d5:
25:fe:52:96:e0:13:36:d1:a5:76:5f:4d:fd:d1:ef:
43:3a:40:a6:0a:1b:a6:c5:17:34:a6:e9:31:d0:45:
ad:c5:44:78:d3:e1:ee:01:88:6a:a8:70:d4:3b:1b:
00:31:4e:71:f2:4e:c1:96:11:c4:39:55:67:fb:ec:
08:97:98:4c:70:bc:6c:65:d2:69:b8:de:83:05:3b:
f4:92:9a:05:ef:02:2c:d8:37:1f:df:a8:cf:b4:26:
d1:0b:03:22:39:14:2e:03:0f:0b:ba:83:6c:c6:41:
7d:02:81:2f:97:86:ea:97:5c:b0:6f:9d:58:a0:10:
f2:c1:8e:f1:ee:15:87:34:39:01:e9:11:af:e4:d2:
1b:89:e6:8b:30:46:63:e3:93:56:f3:1b:41:2e:16:
f1:0d:bb:b9:57:e7:65:26:6c:4f:b8:a3:32:72:0d:
34:95:1a:9a:3b:68:dc:c4:4b:78:79:c3:4a:c4:d8:
8d:a1:4c:c4:d5:e0:c8:8f:09:e6:51:a0:1d:d7:cb:
d8:63:08:ba:8a:bf:55:f7:87:56:5d:be:1f:f4:c5:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:BE:4B:5A:A7:DD:22:CF:F6:D8:A7:77:58:A1:CA:99:97:26:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2b01dce6-362e-3680-a3fb-53df2b5f9eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:3f:8e:11:99:50:43:26:0d:c5:3f:f8:4e:0a:c7:4c:3d:f1:
6f:84:9c:d7:fe:c7:24:fe:e2:c8:b3:af:48:e7:da:ef:78:c4:
9b:3e:28:a9:bf:fb:29:59:63:29:75:43:a5:ee:a8:d1:37:42:
cc:45:fe:37:59:48:e8:a7:c4:36:16:b7:c8:a6:46:e7:e9:51:
b9:f1:61:0c:a6:2d:6f:50:77:50:4d:62:66:70:39:ba:2a:64:
13:64:70:15:e3:ff:07:cb:e2:32:7b:5c:61:a1:ee:84:fe:ce:
82:5c:c2:f3:89:e1:64:a2:79:70:a2:79:10:b2:87:54:c1:c9:
61:68:5f:92:d2:b0:a1:db:b8:2d:c1:dc:dd:3e:44:38:12:30:
ee:63:97:a1:99:f8:c4:64:d4:4a:e2:8b:18:a1:3e:b1:d6:56:
1e:2b:e4:91:f2:91:16:6e:de:21:22:89:50:af:73:5b:c9:5f:
a1:41:06:f4:bb:d5:81:09:18:cf:38:e5:ba:3c:85:1a:0f:4e:
bb:d8:52:10:62:1c:37:57:7e:a3:8a:7f:29:54:2a:44:5a:c1:
ed:26:e1:8b:10:af:3a:c0:07:0d:34:97:f5:2d:95:20:21:2f:
6c:85:37:7b:16:76:0b:6d:99:d1:e2:73:bf:52:b6:5e:bc:1c:
71:cd:3a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:58 2024 by rpki-client on console-fra.rpki-client.org