Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa
File: 14d37da2-852f-3765-ab9a-cb7854b7be23.roa (raw, json)
Hash identifier: Yp3C+9qunFx5/Dw+Zjc4QmzD1+6PghZ8qYlPu/Wz3yw=
Subject key identifier: 97:2A:64:52:FE:D6:EB:DE:9B:48:13:98:B0:CE:22:55:54:33:CA:F6
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584568499BF235C33FB3BF2DF500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa
Signing time: Tue 02 Apr 2024 02:18:27 +0000
ROA not before: Tue 02 Apr 2024 02:18:27 +0000
ROA not after: Mon 01 Jul 2024 02:18:27 +0000
asID: 834
IP address blocks: 45.40.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:68:49:9b:f2:35:c3:3f:b3:bf:2d:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Apr 2 02:18:27 2024 GMT
Not After : Jul 1 02:18:27 2024 GMT
Subject: CN=6d5031be-7785-4e4d-b9dd-9f4847267ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:8a:f2:3e:28:85:cd:12:89:13:1d:75:9f:
a1:c2:af:c5:ce:d9:a0:f2:41:fc:36:2f:e5:93:50:
a4:33:16:3d:be:be:f5:73:ea:5d:07:f8:55:12:54:
2e:65:96:44:31:56:be:2e:df:ad:d5:22:85:45:c8:
79:01:a7:89:94:76:81:68:7f:20:fd:74:2e:1f:e7:
c3:7b:a9:19:76:57:73:17:dd:87:fb:c2:46:22:e5:
2f:30:47:39:2e:b5:b1:09:2b:a9:fe:c0:19:d9:5c:
45:60:66:08:98:45:35:f4:60:b6:3a:4c:30:92:a2:
3f:95:69:f2:59:ae:5a:e2:d8:6e:fb:87:17:76:bc:
a9:eb:87:09:d4:1b:5d:b8:5a:38:1e:cc:66:2e:b8:
a7:68:ee:7d:77:1b:29:44:93:cf:dc:b8:c4:d1:ca:
46:7a:c0:38:df:e1:64:34:73:c3:85:2f:85:4d:1c:
69:c8:29:4b:ef:2d:98:76:30:dd:a6:61:27:18:91:
dc:b1:9e:17:11:1c:d2:9f:43:63:fa:2e:f2:9d:7f:
10:db:51:8b:d7:45:5c:5d:69:00:85:3f:9c:9f:8f:
9c:83:b2:d7:75:b8:4b:7b:cd:4f:45:b5:c8:31:a0:
e4:02:7d:a3:58:99:af:c1:57:d2:34:49:32:4c:bb:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:64:52:FE:D6:EB:DE:9B:48:13:98:B0:CE:22:55:54:33:CA:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14d37da2-852f-3765-ab9a-cb7854b7be23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
45.40.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ed:8d:84:6e:08:fa:bb:a9:89:c0:fa:a5:3d:39:d3:71:de:
bd:2b:24:67:fd:03:8c:68:9a:3b:e5:0c:13:02:41:61:ef:bc:
70:cf:55:5e:04:51:d7:d6:c1:e3:ba:aa:17:e3:fb:9d:bb:16:
93:d1:18:8b:49:7c:7a:0c:cb:f2:99:33:74:ef:9a:3b:a0:6f:
22:28:cf:8d:a5:03:58:15:2f:70:0d:53:63:ed:45:e9:87:05:
81:b6:6c:f9:fb:b7:ad:93:46:0b:af:de:01:d5:aa:cc:23:38:
25:00:c4:0b:6c:80:d4:1e:94:5e:e3:83:94:fd:62:87:06:07:
1e:33:3c:22:ab:fb:e3:b4:4b:4e:5f:ba:fb:13:09:5a:49:3c:
8e:99:48:91:36:ed:a2:6c:6c:ae:63:05:d6:8b:a8:b7:66:53:
8f:0d:4a:13:9a:37:27:70:21:66:75:59:e1:6d:e9:f4:fc:6b:
07:44:89:38:58:62:19:96:02:10:83:c8:fa:d2:c4:88:00:17:
12:b7:22:b1:99:c1:31:d5:98:f1:9d:3b:cd:25:13:16:d1:52:
a0:b5:82:3e:8f:81:2c:f1:c9:e7:f6:0c:28:5c:fa:f4:ea:cc:
2e:18:fe:80:3d:b3:1b:8a:77:22:4d:45:f0:ce:1d:7a:f2:15:
1c:25:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:21 2025 by rpki-client