Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/6e7a3299-bcdf-3dfa-bca9-6fc185448e2c.roa
File: 6e7a3299-bcdf-3dfa-bca9-6fc185448e2c.roa (raw, json)
Hash identifier: Emq//rMrwy16qi6jm1GJn+gO4qWQln3t1vhLkdXqFrY=
Subject key identifier: 05:50:82:35:5B:B4:70:DE:62:46:DA:55:27:52:12:27:08:70:D4:46
Certificate issuer: /CN=d8f8ecee-c105-436e-b6fb-b790b1ee2a7a
Certificate serial: 010D0C9F4328584246735E8A76C2500664F67B20
Authority key identifier: 15:8B:15:EE:23:42:F2:1E:AE:D1:41:CA:18:5A:FC:7D:C2:27:9E:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/6e7a3299-bcdf-3dfa-bca9-6fc185448e2c.roa
Signing time: Mon 19 Jun 2023 21:04:18 +0000
ROA not before: Mon 19 Jun 2023 21:04:18 +0000
ROA not after: Sun 17 Sep 2023 21:04:18 +0000
asID: 5056
IP address blocks: 167.142.0.0/16 maxlen: 24
216.51.128.0/17 maxlen: 24
216.248.64.0/18 maxlen: 24
216.49.168.0/21 maxlen: 24
207.199.192.0/18 maxlen: 24
67.55.128.0/17 maxlen: 24
66.43.192.0/18 maxlen: 24
67.224.64.0/20 maxlen: 24
69.63.0.0/19 maxlen: 24
208.126.0.0/16 maxlen: 24
209.152.64.0/18 maxlen: 24
208.69.144.0/22 maxlen: 24
208.76.188.0/22 maxlen: 24
209.234.64.0/19 maxlen: 24
70.39.0.0/19 maxlen: 24
70.35.0.0/20 maxlen: 24
69.170.144.0/20 maxlen: 24
198.211.128.0/20 maxlen: 24
199.120.64.0/18 maxlen: 24
205.210.32.0/22 maxlen: 24
206.72.0.0/18 maxlen: 24
207.32.0.0/18 maxlen: 24
207.177.0.0/17 maxlen: 24
198.153.96.0/19 maxlen: 24
192.171.208.0/20 maxlen: 24
173.215.0.0/17 maxlen: 24
192.230.128.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:46:73:5e:8a:76:c2:50:06:64:f6:7b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f8ecee-c105-436e-b6fb-b790b1ee2a7a
Validity
Not Before: Jun 19 21:04:18 2023 GMT
Not After : Sep 17 21:04:18 2023 GMT
Subject: CN=59277cbd-2b49-426b-b4af-e91731e95bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:7e:95:74:e8:04:f5:c2:56:22:d0:59:e1:
ba:57:ff:5f:94:5b:79:e9:86:5a:5c:d3:95:2c:08:
ad:6e:e6:bc:8b:66:c3:15:81:7b:e8:30:37:f1:52:
7f:be:fb:d7:76:75:18:14:4a:d0:43:6b:6e:a0:cd:
43:ff:e5:e3:d1:a2:43:ff:4d:81:90:a2:03:76:4f:
37:8f:f9:d8:49:77:19:95:b6:ac:d1:ce:5b:7d:e1:
8f:2c:49:f6:94:91:f8:01:28:0a:b5:a6:a4:a0:47:
58:ef:d2:b9:e4:2e:b3:1f:44:8d:59:ca:eb:a5:55:
cd:09:50:04:58:1e:27:e2:5f:86:ea:bb:24:14:45:
e2:64:18:be:24:c2:72:d6:11:bd:a4:d5:85:ad:15:
50:49:3e:16:46:03:3d:6a:99:57:d6:f3:8c:c1:8f:
d8:5b:ea:ff:bd:01:f7:48:15:4b:c0:d5:8a:96:dd:
7f:1b:31:97:3b:aa:5a:ea:bd:6a:8c:80:60:a4:7e:
aa:41:e7:94:3f:58:19:8e:b0:72:49:5a:e6:12:fb:
cd:af:86:bf:96:4f:f6:ee:74:3c:25:4f:51:84:9f:
78:60:18:bc:b7:d9:b0:35:65:7b:c6:4d:a6:fb:86:
a8:c1:ab:8d:64:2b:3a:3b:94:e7:eb:5e:4d:18:5d:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:82:35:5B:B4:70:DE:62:46:DA:55:27:52:12:27:08:70:D4:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/6e7a3299-bcdf-3dfa-bca9-6fc185448e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.crl
X509v3 Authority Key Identifier:
keyid:15:8B:15:EE:23:42:F2:1E:AE:D1:41:CA:18:5A:FC:7D:C2:27:9E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.43.192.0/18
67.55.128.0/17
67.224.64.0/20
69.63.0.0/19
69.170.144.0/20
70.35.0.0/20
70.39.0.0/19
167.142.0.0/16
173.215.0.0/17
192.171.208.0/20
192.230.128.0/20
198.153.96.0/19
198.211.128.0/20
199.120.64.0/18
205.210.32.0/22
206.72.0.0/18
207.32.0.0/18
207.177.0.0/17
207.199.192.0/18
208.69.144.0/22
208.76.188.0/22
208.126.0.0/16
209.152.64.0/18
209.234.64.0/19
216.49.168.0/21
216.51.128.0/17
216.248.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e7:c7:0c:19:b8:3c:85:22:6f:86:ce:f4:64:25:aa:7d:d1:
bd:bf:05:76:0b:51:13:7b:1f:cd:95:e6:40:4e:96:46:7f:25:
4a:ce:0c:65:b0:ca:a8:94:72:e4:89:38:c3:84:64:61:ad:99:
ac:5f:0b:0d:93:92:e4:be:41:89:6d:d9:08:98:a3:00:3c:c4:
b9:fa:ac:ff:be:99:70:eb:49:d6:ad:fa:77:bc:39:a4:7d:ad:
06:38:4a:ad:a1:24:0f:7a:17:30:5b:5a:9f:74:1a:71:2a:41:
74:3b:d0:2d:53:03:98:e7:31:e7:5a:36:ff:96:ba:cb:cb:f9:
c6:73:8f:7d:81:ff:6e:e3:ca:31:3b:f0:59:16:22:50:8f:da:
f4:79:60:1f:a4:f8:87:03:1c:26:ba:74:3d:a1:c9:d1:8e:8b:
65:4d:a2:80:13:14:d2:77:d9:93:33:70:ca:81:aa:22:cf:78:
da:d1:5e:44:8e:37:a7:cd:eb:e4:62:5b:ab:d7:50:a8:cc:e6:
8e:72:90:47:9b:49:15:6d:03:b1:4c:4d:cb:93:37:eb:28:d4:
cb:de:83:df:ae:d2:13:85:03:5d:f1:a1:9a:5d:c1:93:5c:69:
7f:fc:61:f0:66:81:e3:e1:80:a4:33:f6:80:9f:f8:85:8c:11:
61:3c:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org