Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aede8ffd-4000-3ffe-b84a-8c7b7f755bb1.roa
File: aede8ffd-4000-3ffe-b84a-8c7b7f755bb1.roa (raw, json)
Hash identifier: ZPQzkNzaRtXItvabiDHIriCEyrvjvQT6j5ES6yVDNxM=
Subject key identifier: 35:04:CC:84:11:34:F1:61:95:64:D1:E4:84:2F:16:32:6E:76:7E:49
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285837C0B10DEAED2E7399E7B038B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aede8ffd-4000-3ffe-b84a-8c7b7f755bb1.roa
Signing time: Mon 21 Sep 2020 04:00:00 +0000
ROA not before: Mon 21 Sep 2020 04:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 8111
IP address blocks: 198.166.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:37:c0:b1:0d:ea:ed:2e:73:99:e7:b0:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Sep 21 04:00:00 2020 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=d918361d-1c46-4b5d-ac52-b5a1e63f2d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:be:21:d2:58:61:34:4e:0f:1b:48:6e:89:ba:
38:44:0b:b6:a0:6f:23:30:89:72:42:7e:af:6b:d5:
e2:6d:fd:44:e9:a7:6a:a4:2c:9e:ae:c0:d9:9a:7e:
91:67:03:f6:bf:0c:b3:a8:85:c7:8c:96:6f:15:44:
62:d5:53:7a:8b:c0:62:52:e9:f7:56:c4:ab:af:cd:
7f:b5:d1:04:b7:a0:d6:84:23:28:4e:a3:49:9f:ba:
72:15:4c:a6:13:0e:ad:e8:90:95:67:9b:57:fb:55:
f1:07:41:6d:bd:5f:c3:88:4f:d6:3a:88:73:09:41:
df:3b:18:25:44:29:ad:44:59:c0:1e:58:5c:95:03:
56:22:0e:af:e2:e2:61:1e:65:f1:68:7c:e7:41:12:
d1:63:52:25:df:49:54:82:a3:ed:38:d2:f6:1b:c1:
ba:c1:a8:61:b5:9c:9e:0a:85:81:d6:27:af:da:9e:
27:21:87:06:4d:b3:88:17:ec:a0:6b:09:70:13:06:
64:63:46:a1:38:90:2e:2b:e6:f0:c7:4f:bc:2e:4c:
e3:7f:1e:19:35:06:f5:8a:a4:6d:06:ad:6c:20:52:
3c:9f:cd:95:86:d2:51:b2:12:52:64:be:4c:6f:4d:
fe:d1:20:b0:8a:36:b4:73:6d:4d:03:be:c4:8f:ab:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:04:CC:84:11:34:F1:61:95:64:D1:E4:84:2F:16:32:6E:76:7E:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aede8ffd-4000-3ffe-b84a-8c7b7f755bb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
198.166.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:29:2c:58:85:ed:d9:80:b4:d8:0f:4c:41:d3:fc:04:75:9b:
66:47:2b:05:18:72:d7:e0:ca:6f:a1:8e:39:16:02:bd:ca:74:
99:e0:45:b1:98:d3:12:35:b5:8f:a6:83:ee:ec:5f:9c:06:0e:
15:00:09:11:e9:e6:3d:7c:75:d6:97:52:96:55:f8:eb:5b:4e:
e4:c9:8d:ae:51:f0:8c:1d:e8:83:69:b6:b9:21:d5:83:47:ba:
d7:04:09:c6:17:6a:ef:a8:f8:2c:41:cd:e8:ea:b6:7e:b2:30:
20:bd:a7:4f:0b:95:f6:b2:5a:39:bc:87:6c:e2:21:36:4e:eb:
63:87:e6:15:a6:fb:e1:ee:c7:fb:6a:18:ae:d2:9b:ad:99:79:
69:68:5a:2b:83:1e:71:6d:bf:e1:07:7b:bb:dc:1d:80:21:43:
92:17:99:b8:ad:f6:5f:e1:ec:d5:0c:42:cb:70:ea:3c:6f:54:
df:54:8c:cb:a7:fd:f5:61:29:50:88:0f:74:b8:5b:c0:d3:7e:
b2:12:da:7f:fc:90:7a:47:8f:0c:fc:86:ab:2c:f8:81:54:41:
9b:bd:35:5c:7c:ef:d2:89:8b:03:74:af:2c:11:5f:5f:fa:63:
93:fb:ea:03:96:9b:2a:b1:4b:41:3f:d9:8f:1d:40:59:c3:d9:
0e:31:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org