Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4e34a3c7-510d-3028-8d0d-e214757e007c.roa
File: 4e34a3c7-510d-3028-8d0d-e214757e007c.roa (raw, json)
Hash identifier: CEy3E5KbvJQHkzD89zAm49kLbzPMnsj3AbZuQVX2dGM=
Subject key identifier: BA:65:E0:C4:D4:3F:45:EA:05:6A:65:D7:58:3A:DF:BF:EA:9D:0D:FA
Certificate issuer: /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial: 010D0C9F43285843837C98A11771C9D213634600
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4e34a3c7-510d-3028-8d0d-e214757e007c.roa
Signing time: Wed 11 Oct 2023 10:34:08 +0000
ROA not before: Wed 11 Oct 2023 10:34:08 +0000
ROA not after: Tue 09 Jan 2024 11:34:08 +0000
asID: 400384
IP address blocks: 173.249.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:83:7c:98:a1:17:71:c9:d2:13:63:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Validity
Not Before: Oct 11 10:34:08 2023 GMT
Not After : Jan 9 11:34:08 2024 GMT
Subject: CN=100f2e45-a008-4fbd-aab5-09994aa783ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:d2:32:5c:cc:9d:35:84:62:1e:c9:06:03:
b0:d4:5b:45:00:a4:bc:09:00:ff:58:40:79:7d:06:
61:99:87:65:ae:f3:fe:2e:fd:ce:5f:81:18:df:9f:
73:b7:ea:e6:33:23:8e:9e:46:aa:aa:b0:bd:67:4e:
53:93:70:6f:01:b5:1a:b6:9d:ef:99:db:c9:69:c1:
49:20:d2:72:d1:58:ac:4a:c1:1d:b5:b9:2d:2b:2d:
eb:e6:b2:1f:9b:21:fd:a4:e9:d4:04:b6:92:75:7a:
1f:19:82:9c:be:22:48:54:fa:e0:97:08:cc:62:d7:
f6:3d:87:67:40:ce:b9:a3:97:15:34:f8:de:6a:c8:
cb:94:0d:a6:a9:15:c0:2f:10:70:58:33:53:9a:c4:
7b:95:6e:f4:84:a4:40:47:c5:3a:b4:b5:02:3b:d8:
eb:a2:99:21:66:36:df:19:de:e8:23:23:73:35:dc:
bf:f1:49:1e:47:15:f8:0a:89:ec:be:2b:12:5b:45:
0e:50:9a:89:8b:bc:39:0c:21:f0:d1:f1:59:ce:c0:
d3:b0:84:3f:1c:ec:52:18:89:37:f5:e6:8e:5e:f1:
b6:4d:eb:e3:a9:eb:e4:27:4c:c0:bf:0e:a6:c9:12:
a8:de:b5:41:21:cf:34:88:60:76:36:0f:90:b5:f2:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:E0:C4:D4:3F:45:EA:05:6A:65:D7:58:3A:DF:BF:EA:9D:0D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/4e34a3c7-510d-3028-8d0d-e214757e007c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
X509v3 Authority Key Identifier:
keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
sbgp-ipAddrBlock: critical
IPv4:
173.249.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e4:02:b0:e4:79:53:2a:45:c1:92:21:b2:ae:94:3b:86:b6:
ab:bb:b9:31:1e:af:92:3f:0d:a1:80:77:10:5e:ba:00:60:05:
d7:a8:61:1c:d8:58:89:42:27:e0:05:dc:9d:5c:a5:40:3e:08:
1c:32:b9:07:16:6b:40:89:8b:96:4b:1f:d7:dc:a3:66:00:04:
a7:cd:25:f5:b7:a4:bb:8d:c1:ba:21:7e:81:e2:42:90:ee:8b:
29:ac:d4:5d:04:f6:8e:4b:53:8b:71:57:0d:77:41:67:e6:a7:
4b:e5:d8:6b:02:1b:b0:09:05:2f:29:f3:8e:a3:ca:35:a9:b6:
07:9c:45:3a:79:57:0e:8a:e8:51:ae:a3:76:15:34:cc:b1:dd:
2c:46:07:72:80:d8:90:48:7a:fb:dd:93:5c:e1:8a:95:32:c3:
11:d3:bc:22:68:61:2e:8f:5a:76:e1:40:1f:ff:98:30:44:6b:
64:3f:97:8f:26:79:ee:15:4a:44:b2:8f:ed:97:26:dc:0b:88:
ce:e4:0d:f2:db:db:48:f3:dc:74:f5:b1:51:d0:f8:28:80:b0:
6c:43:ac:24:97:2a:c1:c6:b0:89:ff:4c:cd:41:91:cf:88:5c:
03:5b:c8:ad:4f:26:cd:be:32:6c:83:94:ca:1a:d0:78:b9:6a:
9d:5a:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:39 2024 by rpki-client on console-fra.rpki-client.org