Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9ad7a04f-3d1d-30fa-b172-a239cc7a7e7f.roa
File: 9ad7a04f-3d1d-30fa-b172-a239cc7a7e7f.roa (raw, json)
Hash identifier: ThnxcxKNNtbCT5IjcFzWmTskyxJ/uLymipv1fL9VE0w=
Subject key identifier: BD:FB:1A:16:17:F3:42:CA:30:1A:4A:A0:D1:F5:3D:36:BF:AF:6D:43
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328583801D6F9C9385D670ECB115AC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9ad7a04f-3d1d-30fa-b172-a239cc7a7e7f.roa
Signing time: Wed 30 Sep 2020 04:00:00 +0000
ROA not before: Wed 30 Sep 2020 04:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 10747
IP address blocks: 170.133.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:01:d6:f9:c9:38:5d:67:0e:cb:11:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Sep 30 04:00:00 2020 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=c19245b0-dd37-4c81-9569-c953292e35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:33:c1:3a:64:9d:8f:06:44:f1:f7:1b:b2:
52:1a:ea:11:a2:df:5e:76:cb:d7:ba:5e:06:bb:db:
17:ef:20:d5:37:30:39:50:80:5c:58:5b:bb:ce:90:
0d:dd:cd:26:0d:d6:70:46:a9:2c:e7:c1:92:4b:fa:
4c:08:de:0b:5c:24:fe:86:c1:a8:8d:ea:a9:c2:c4:
75:02:24:45:10:50:6f:58:4e:97:cf:62:f9:77:c6:
68:23:b5:f4:5e:4d:9a:4c:57:1d:84:02:1c:a4:fa:
ba:29:5c:a1:66:40:ea:19:ad:54:5c:ea:81:a5:1c:
1d:a5:a4:0f:5c:86:8d:e2:89:c3:a6:a8:d2:be:44:
1d:c9:63:e8:4d:59:27:9c:ce:db:53:80:42:73:76:
b1:4f:4b:f4:dd:8e:75:2b:ec:69:2d:de:85:97:52:
e2:8c:ce:fa:80:94:19:b8:16:30:b6:91:a7:a7:ef:
3f:73:08:15:f6:20:b0:db:a9:f2:cb:3e:2f:06:b2:
2f:c0:d0:6d:84:eb:2f:43:67:58:6c:a2:01:ed:d9:
71:60:03:d0:8e:d9:a6:5b:82:b2:da:bf:2e:ad:95:
d3:0c:13:07:14:09:f5:0a:52:d0:d0:55:6b:57:ef:
5b:42:1d:55:b8:fd:72:f4:c1:f9:d2:9c:81:af:1b:
ad:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:1A:16:17:F3:42:CA:30:1A:4A:A0:D1:F5:3D:36:BF:AF:6D:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9ad7a04f-3d1d-30fa-b172-a239cc7a7e7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:20:50:d5:69:6b:7b:9d:d5:ba:72:d6:ca:7d:47:f0:e8:8b:
e2:de:c7:2e:d1:b9:77:bb:95:e1:c2:a0:c0:76:36:29:af:50:
bd:86:4f:0f:10:cd:bb:7b:e9:4b:ec:5f:e5:bf:71:f3:a3:d3:
e0:91:d3:88:f4:b5:35:38:31:f1:6f:18:8a:80:24:ae:a9:91:
41:69:34:87:33:94:cd:70:a1:56:23:46:84:3c:25:99:dd:07:
0f:d2:24:58:96:8c:98:16:b1:7d:1b:21:62:d1:97:d5:9f:9b:
de:a0:99:4b:21:88:d6:b8:bf:77:b7:c0:c4:2d:f0:6c:85:e4:
80:cb:b6:2d:03:ad:2b:63:25:56:88:21:f2:06:86:8a:10:f3:
80:d3:c1:27:2f:47:cc:94:f0:0d:8b:e9:18:e6:55:5c:ef:46:
34:0a:88:6f:c9:f5:3c:ed:3e:75:cb:b6:2d:d3:88:f2:3f:2f:
72:51:52:c3:51:1b:8f:37:99:0b:2f:0f:07:91:41:87:f4:bc:
0c:4e:d9:ed:f2:7b:4f:fd:d4:40:7b:5f:cf:b2:5f:76:4b:a6:
50:32:79:fd:65:c2:e3:7f:ee:4d:f8:e5:b2:9e:73:6c:5f:b3:
9d:f0:43:7d:1f:67:e1:e1:ea:dc:ad:e3:be:95:82:23:1e:08:
32:ad:19:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:58 2024 by rpki-client on console-fra.rpki-client.org