Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa
File: bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa (raw, json)
Hash identifier: zCxWkSGCBhC5wElth+dmqah6yLET+0Tntf6VabfAz1U=
Subject key identifier: 26:81:87:2F:CB:CA:C5:0B:78:58:C8:DD:1B:80:CB:F9:28:DD:51:AC
Certificate issuer: /CN=eec25392-c529-41f4-b3b9-7577f6660804
Certificate serial: 010D0C9F43285844DEB98993AC412FB911521D80
Authority key identifier: 22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa
Signing time: Mon 12 Feb 2024 19:42:26 +0000
ROA not before: Mon 12 Feb 2024 19:42:26 +0000
ROA not after: Sun 12 May 2024 18:42:26 +0000
asID: 20326
IP address blocks: 207.90.226.0/24 maxlen: 32
207.90.225.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:de:b9:89:93:ac:41:2f:b9:11:52:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec25392-c529-41f4-b3b9-7577f6660804
Validity
Not Before: Feb 12 19:42:26 2024 GMT
Not After : May 12 18:42:26 2024 GMT
Subject: CN=5879d47a-de77-4b55-982c-e31be70594bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:8e:77:47:f4:e3:bb:10:8a:76:2b:eb:20:
74:19:2a:36:32:e4:58:e7:d5:24:dc:e1:5b:3b:72:
72:de:58:35:7f:5d:ee:12:b6:a4:34:1a:ff:6b:70:
d2:89:3e:2b:9a:0d:51:79:e9:5e:79:71:fc:85:b1:
a5:a2:82:88:3d:c3:65:85:39:21:12:aa:56:6b:e0:
bb:2c:6e:40:02:8f:9c:8d:41:8f:ee:41:f9:95:a9:
ef:1a:6a:f8:f8:2f:0f:98:31:e3:12:1a:57:8e:50:
6b:d7:7d:31:12:f2:a0:c0:46:11:ad:8e:52:f8:8f:
1c:a2:bc:f3:05:8b:c6:38:61:22:f8:be:8d:fc:ad:
cc:59:c3:af:6f:0e:79:b5:c8:9a:f0:e6:7d:47:5e:
62:8e:c1:99:3b:a2:38:35:1d:3e:29:fa:d6:17:5d:
d1:1b:74:03:b4:aa:ac:f2:74:47:f2:0d:53:5f:93:
24:8f:14:71:2c:c0:b9:1a:f6:18:0c:24:67:6b:3c:
76:46:96:a5:89:2f:5f:45:7e:a7:8c:fe:0b:17:cc:
1e:1f:5b:db:d0:c9:2a:bf:c9:c4:17:2c:da:58:a3:
e8:2f:40:e0:e5:f2:fc:01:21:72:06:81:d1:ab:62:
a6:15:66:07:1a:23:88:3c:bf:4a:67:89:cc:f2:ff:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:87:2F:CB:CA:C5:0B:78:58:C8:DD:1B:80:CB:F9:28:DD:51:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/bc99dff4-777e-3824-a7b0-a1be0a7102fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/eec25392-c529-41f4-b3b9-7577f6660804.crl
X509v3 Authority Key Identifier:
keyid:22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804.cer
sbgp-ipAddrBlock: critical
IPv4:
207.90.225.0-207.90.226.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:5b:cc:9b:09:70:4d:43:42:24:fb:77:fe:9d:f5:4a:c5:39:
7c:ca:c2:cf:83:5d:a5:4a:4b:c4:1d:e8:cb:49:d3:2b:c5:56:
1f:60:eb:c9:4b:50:64:f8:19:e0:a1:d8:33:d9:4b:0d:0d:54:
b6:f9:70:82:77:ab:3f:99:e0:d8:0c:fe:1c:5e:42:43:7f:35:
d4:d5:35:ab:d0:42:48:d9:80:57:f8:42:c3:92:fc:89:e5:fd:
41:80:8d:e3:9a:66:07:5b:77:16:d1:8d:78:21:ec:e2:94:f2:
16:a0:96:ea:5a:7e:cb:d8:df:0a:d8:f0:db:54:cc:46:34:35:
ff:16:09:5c:d2:e4:77:8f:56:77:05:95:21:90:d5:01:48:26:
a0:d7:d1:c1:0c:2b:77:95:bf:73:73:f9:3a:a0:19:4a:ae:e1:
89:b4:f1:a3:95:58:ec:b5:62:18:6a:f2:6f:b7:73:6e:8a:0d:
24:97:7b:47:70:6a:3a:df:bd:2c:b6:46:a9:f6:c3:25:d0:70:
84:5e:5c:5a:19:85:f6:34:b4:77:e3:e8:03:cd:df:4c:27:4b:
ee:da:bb:23:1d:9c:f4:e3:f0:0c:47:0f:aa:95:f1:06:c5:1e:
a7:d2:96:93:a5:df:6a:8a:92:0d:d6:4b:1d:5d:2c:b4:1c:4f:
2c:10:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:06 2024 by rpki-client on console-fra.rpki-client.org