Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/475cfef1-375f-395e-b380-7ce1f956471f.roa
File: 475cfef1-375f-395e-b380-7ce1f956471f.roa (raw, json)
Hash identifier: 5nBfn/tdyvDt/8kase9cLI0gUZiQcGZlVrafOZMZ5VA=
Subject key identifier: D2:7C:E4:21:78:D4:CA:8C:FB:84:2D:C4:05:DE:8A:C8:A9:85:51:BE
Certificate issuer: /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial: 010D0C9F432858450D47A810F0C5973707F05500
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/475cfef1-375f-395e-b380-7ce1f956471f.roa
Signing time: Thu 29 Feb 2024 11:55:58 +0000
ROA not before: Thu 29 Feb 2024 11:55:58 +0000
ROA not after: Wed 29 May 2024 10:55:58 +0000
asID: 56555
IP address blocks: 174.136.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:45:0d:47:a8:10:f0:c5:97:37:07:f0:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Validity
Not Before: Feb 29 11:55:58 2024 GMT
Not After : May 29 10:55:58 2024 GMT
Subject: CN=aacc2743-dd70-48b2-a5ad-0293e87e7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:4c:9a:d0:6a:bd:55:f4:13:13:37:a2:05:
d7:85:db:37:18:fc:fc:e5:95:b3:0f:b0:2a:1d:d5:
17:fd:f7:b5:01:b4:4f:4e:04:6a:a8:0c:90:f0:76:
48:8e:1a:c8:39:4f:e9:cb:16:91:6f:96:03:c7:fd:
36:cc:58:be:c1:ef:b0:59:1f:26:f9:64:d9:5d:22:
3b:cb:4a:75:ac:97:00:09:d5:20:24:da:ae:85:01:
2a:fb:f2:b4:28:f9:e1:ca:ef:ec:50:2e:dd:9c:07:
b6:60:34:c8:72:6a:81:0e:a8:b6:c4:c8:6d:8f:3c:
98:24:e4:5a:1a:bb:2d:ed:e5:de:50:f5:38:23:60:
f6:7c:3a:b9:c7:a3:27:db:f7:c1:87:0e:59:79:11:
04:d6:cb:9a:65:7b:57:e5:61:dd:d7:45:2f:f0:de:
49:c9:58:07:63:04:f6:2a:b7:79:7a:3b:af:3f:e7:
0d:ec:4e:b4:db:cb:94:fe:d9:7f:42:0c:ad:a0:88:
20:e4:d5:06:b1:2d:af:55:55:3d:e6:0a:68:5d:68:
a6:20:40:f9:0e:e8:57:f7:1d:d2:e2:a6:ef:92:21:
ba:9d:09:69:32:b4:dc:bf:80:2a:ab:bb:42:98:8d:
f2:06:61:84:a2:94:24:e8:41:61:b2:83:49:59:93:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:E4:21:78:D4:CA:8C:FB:84:2D:C4:05:DE:8A:C8:A9:85:51:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/475cfef1-375f-395e-b380-7ce1f956471f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
X509v3 Authority Key Identifier:
keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:97:c2:0b:fd:70:30:fb:03:f5:48:98:f4:58:b1:ab:81:a0:
b3:d7:5b:0a:48:88:81:87:db:73:66:aa:9a:54:80:da:a8:33:
25:fa:c5:a6:d7:e0:71:77:57:13:40:e5:c6:80:76:06:db:f3:
23:f2:ce:87:7a:61:f1:64:fc:d2:f1:a2:4e:e9:28:4d:49:47:
d2:57:34:9b:af:30:00:a6:51:6a:80:42:44:ca:7e:5f:51:5b:
b8:5f:93:73:42:c2:77:b0:42:6c:b5:83:45:95:67:1e:d5:3d:
d4:b5:50:60:e0:65:b0:90:a8:f5:1f:0e:14:69:85:6a:b0:d3:
20:f1:c7:f4:fa:b2:38:dd:13:85:86:a5:9d:06:69:99:e7:83:
1c:15:38:5f:40:07:1d:ef:44:8b:d7:7f:30:7c:c4:b9:e7:2d:
92:01:68:2a:42:a8:25:51:30:65:50:2d:16:6d:e4:cd:89:80:
05:b0:86:d5:ba:1d:83:51:84:c9:60:a9:9d:fe:ed:8e:bc:ad:
7e:56:cd:d3:17:9d:18:27:68:ed:33:51:38:c2:0c:5e:38:aa:
02:82:33:53:6b:c0:4e:50:42:35:1b:89:3e:14:7a:24:5d:36:
8e:d9:8f:f5:9f:75:22:f4:57:4d:b4:3a:68:69:ab:aa:8e:20:
b6:cc:6b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org