Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d32a0cbc-5beb-3a86-8025-70b3040fa507.roa
File: d32a0cbc-5beb-3a86-8025-70b3040fa507.roa (raw, json)
Hash identifier: g8jodzHMgn50dmoMg5XkRFCH2lN682gHNXkNRfaL/2s=
Subject key identifier: BE:3A:3D:0D:7D:6B:80:F6:37:D8:A4:C6:6A:C6:7F:A5:E7:D5:CF:95
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F43285841E4717B91490204B77C4EC340
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d32a0cbc-5beb-3a86-8025-70b3040fa507.roa
Signing time: Mon 15 May 2023 18:31:13 +0000
ROA not before: Mon 15 May 2023 18:31:13 +0000
ROA not after: Sat 08 Jul 2023 01:29:34 +0000
asID: 62579
IP address blocks: 139.177.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:71:7b:91:49:02:04:b7:7c:4e:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: May 15 18:31:13 2023 GMT
Not After : Jul 8 01:29:34 2023 GMT
Subject: CN=3d5ba6c3-0fcd-4fb3-ac05-14890a9fe3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:c7:a1:5d:c6:1f:dc:fb:ff:0d:67:e2:ff:
35:eb:90:c7:f8:d8:e3:af:33:ce:4a:b4:ef:60:a5:
50:bf:62:16:1d:ea:fa:9d:2d:40:88:86:75:a3:9e:
e1:c4:32:08:68:94:4a:9f:8d:70:df:67:54:b6:d6:
33:fe:93:64:25:fc:62:64:75:a2:14:32:d5:43:b5:
4a:38:fe:3e:14:dd:39:41:60:23:ab:02:76:e6:db:
7c:db:9a:33:e4:c2:78:d5:3b:10:6b:ba:98:99:c7:
84:20:75:e0:49:a7:fa:32:19:25:ad:5c:75:0c:54:
1d:e1:2f:42:75:b8:44:b9:e9:d6:a0:04:77:5a:e3:
e3:5a:b4:60:80:1a:ee:39:02:fe:e7:c0:09:27:6c:
4f:f4:61:13:75:ea:c6:97:fd:30:03:bb:48:fe:31:
91:2d:dc:91:11:92:a7:14:00:d9:23:52:fb:73:e1:
0f:fe:c2:9e:9d:17:f4:ae:b1:43:84:b2:74:8f:0f:
a0:a5:02:a0:4e:be:81:45:12:6a:5b:71:1c:65:ee:
40:f6:89:c1:f4:b0:b9:ca:0e:55:10:e5:7e:ab:5e:
b5:ea:cd:e7:e6:ad:3d:3c:33:24:93:26:50:0a:e2:
0c:9a:fb:06:ce:46:4d:28:38:4b:fe:d6:cb:24:03:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:3D:0D:7D:6B:80:F6:37:D8:A4:C6:6A:C6:7F:A5:E7:D5:CF:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d32a0cbc-5beb-3a86-8025-70b3040fa507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
139.177.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:6a:1f:85:93:30:28:ca:02:b8:6a:a5:8e:40:86:d1:0d:69:
26:13:51:5d:70:65:31:9c:3f:4c:ad:c5:57:d2:30:11:07:42:
2e:ea:4b:7b:4a:e2:3d:1d:20:07:dc:60:2f:da:0f:a6:70:e5:
46:6a:48:a1:71:ed:76:0a:65:e2:51:6d:bb:4b:c0:9f:a7:28:
b5:db:b7:3a:25:2a:55:f1:2b:b9:ee:40:c3:51:d8:61:05:57:
a4:82:f1:3d:ba:ed:24:b4:bb:c0:cb:38:41:30:a6:d0:27:bb:
bc:bc:42:8a:21:91:9d:45:36:18:12:a6:5d:74:e6:02:f5:85:
0e:0d:2b:78:7f:0a:f8:82:b2:d9:d8:27:68:24:58:10:9c:2d:
f7:84:ff:25:28:a5:97:59:e0:fb:7f:0e:85:b7:a1:df:6e:59:
cb:86:7e:7e:db:1d:0f:b5:27:6e:e1:61:b8:4e:7d:31:13:d3:
a9:93:67:85:27:d7:60:c0:be:ca:f2:ff:f2:99:05:06:14:f8:
41:7e:22:17:7a:0c:bf:a3:e1:e8:9b:31:1d:7c:e8:b2:0d:bd:
9c:29:25:e0:17:4e:ff:b8:18:ce:31:b3:6b:15:4f:66:d7:2d:
ef:b9:46:e6:33:f8:41:f1:2a:fb:2e:77:5f:79:00:fc:c3:0c:
16:24:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:19 2023 by rpki-client on console-fra.rpki-client.org