Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ce0c63b5-2de4-395f-af5b-e968fd901e90.roa
File: ce0c63b5-2de4-395f-af5b-e968fd901e90.roa (raw, json)
Hash identifier: tTweUm8R8TjCSjciHKreIvT8rR9sqHgI1Etw2jX/90k=
Subject key identifier: C7:58:72:07:9D:B7:18:7F:22:CB:67:1C:8B:63:C6:CE:22:31:3B:6B
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F432858385BBEF4B7BA8B2576B0D893C0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ce0c63b5-2de4-395f-af5b-e968fd901e90.roa
Signing time: Mon 21 Dec 2020 05:00:00 +0000
ROA not before: Mon 21 Dec 2020 05:00:00 +0000
ROA not after: Mon 27 Mar 2023 04:00:00 +0000
asID: 61317
IP address blocks: 172.96.0.0/24 maxlen: 24
172.96.2.0/23 maxlen: 24
172.96.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:5b:be:f4:b7:ba:8b:25:76:b0:d8:93:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Dec 21 05:00:00 2020 GMT
Not After : Mar 27 04:00:00 2023 GMT
Subject: CN=af98c981-3365-451f-9968-0fec190f7343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c4:91:7b:5c:05:54:38:34:98:19:98:4f:71:
1f:77:9c:f0:da:36:17:d4:36:5d:23:72:cd:ad:c2:
7c:d8:02:bd:07:95:f0:6f:22:3a:e4:c8:e1:38:54:
49:d5:8c:9f:69:6e:0d:53:56:b0:cf:08:87:a3:2f:
d6:ed:ae:d8:a6:35:55:64:aa:5f:0f:e3:9b:3f:d5:
41:66:49:93:69:3c:27:74:71:ea:e2:80:69:12:47:
6a:89:70:7e:af:8f:1f:88:87:0c:0e:7d:1c:4f:34:
87:60:6a:f8:90:d6:68:0e:f2:89:b9:0d:95:1a:c6:
4a:1c:b4:62:f8:d1:c0:c9:1e:b5:d7:45:21:14:56:
65:50:c1:51:03:98:fd:26:d2:e8:2e:3a:dd:ab:36:
ee:2a:04:ee:09:3d:94:0d:aa:c5:58:4b:a5:a3:52:
6d:5c:02:30:1b:01:38:48:17:a3:dc:03:7d:11:70:
35:97:e1:4d:a2:2b:75:e8:b0:79:de:5b:3a:73:c2:
2f:b3:f1:7c:95:f4:3f:8b:a2:7d:3c:e9:bc:7f:67:
85:62:8e:5c:68:aa:66:a4:34:9a:b1:c2:af:ca:4f:
2d:89:fe:cd:d4:38:cb:6c:3c:21:a3:7a:0b:1c:65:
9f:6c:81:fd:1e:11:51:39:4b:47:e6:69:2d:1d:b0:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:72:07:9D:B7:18:7F:22:CB:67:1C:8B:63:C6:CE:22:31:3B:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/ce0c63b5-2de4-395f-af5b-e968fd901e90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.0.0/24
172.96.2.0-172.96.7.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:15:0c:02:39:bb:f8:e8:8e:ff:9e:ab:84:09:19:d7:88:ad:
09:de:ec:6a:1a:db:27:7d:36:31:d0:64:34:3c:f7:99:c7:35:
e6:c3:26:65:e3:2a:c3:1a:76:d6:40:81:87:d5:6b:60:3c:84:
23:7d:d6:f4:ff:25:98:1a:0d:1f:33:a2:77:8c:bf:40:11:fc:
b1:13:a9:07:55:dc:11:f3:5c:0f:9d:39:00:e7:c9:9c:c6:d0:
29:0e:a7:a4:6e:86:d6:56:96:25:ef:ef:8f:ac:3d:d2:28:d7:
c6:db:f6:44:a5:fd:57:40:f2:c5:f9:4e:fe:12:04:86:6e:11:
06:81:41:ca:30:4c:59:20:1c:80:78:31:c6:a4:52:ad:82:5f:
56:77:80:d5:e3:f6:a8:77:ca:80:dd:9b:5e:e9:2e:1e:7d:9b:
13:07:4d:d4:f4:e5:45:dc:6a:63:64:5a:f2:9a:23:7b:60:31:
10:ed:e2:4b:16:ff:56:06:33:b5:b6:ec:49:6f:0c:31:ee:2a:
09:9a:93:db:14:e9:0a:00:fa:c0:26:20:3c:24:f5:a1:49:a9:
4c:9c:f3:17:ca:5c:2b:e7:cd:01:3f:17:fd:1b:3d:23:af:20:
e3:b1:fa:05:34:44:00:01:7f:3a:26:28:6c:ad:57:aa:58:57:
21:33:4b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org