Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
File: b0cfe959-a4d1-3bea-802f-61976aba045a.roa (raw, json)
Hash identifier: qZYSncl5HUhbgmEd8UZ03ikwhXZINZFqoDKUzjOblLU=
Subject key identifier: 01:24:82:11:9B:51:8C:B3:BC:5E:DF:22:29:BE:15:4D:E6:CB:03:9F
Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial: 010D0C9F43285843F7BE4D67D205695D246410C8
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
Signing time: Wed 22 Nov 2023 02:00:17 +0000
ROA not before: Wed 22 Nov 2023 02:00:17 +0000
ROA not after: Tue 20 Feb 2024 02:00:17 +0000
asID: 1239
IP address blocks: 207.170.168.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f7:be:4d:67:d2:05:69:5d:24:64:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Validity
Not Before: Nov 22 02:00:17 2023 GMT
Not After : Feb 20 02:00:17 2024 GMT
Subject: CN=3675ab56-9ee4-4a2c-8052-553bc017c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d9:18:d1:a2:43:6c:77:c2:38:56:cb:4e:e8:
0e:8a:38:6d:99:c8:f8:b9:67:96:cf:f0:7f:e4:60:
15:74:68:3d:bf:6f:2a:c9:27:79:fe:f0:92:d4:b5:
35:33:cc:e8:ae:d6:e4:ef:6c:f9:2c:9c:ae:19:c6:
3d:e7:c9:e8:2b:dd:4e:90:d8:74:ff:28:ce:68:d1:
9f:a5:24:9c:78:fa:50:68:ed:5f:8f:0b:07:a8:48:
ad:31:bd:d3:29:a0:2b:62:94:9d:c1:bf:51:38:ef:
fb:b3:93:b6:81:43:f7:32:b0:fa:4c:06:7f:00:c2:
e8:29:32:ee:24:ed:18:3d:91:38:be:2b:82:26:3a:
d5:6e:50:e9:30:6b:92:f4:20:cb:4a:a8:9e:5d:62:
ae:ea:27:1f:72:e1:1d:9b:bb:7d:0f:ef:22:02:d5:
ac:6f:63:ec:80:02:b6:cb:af:d2:c1:c0:ee:b1:6c:
cd:7d:1e:77:bb:f3:21:5b:c5:c3:1a:2e:2f:38:27:
ec:56:4a:db:d8:2e:f9:ae:84:12:ff:f0:28:90:5d:
8c:37:a8:7e:73:22:80:1e:ee:ce:df:8b:33:fc:4d:
7e:13:c0:53:cb:45:7d:26:e1:01:ee:13:44:1e:ba:
80:69:54:63:73:00:d9:44:a6:c5:49:04:40:06:a8:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:82:11:9B:51:8C:B3:BC:5E:DF:22:29:BE:15:4D:E6:CB:03:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
X509v3 Authority Key Identifier:
keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
sbgp-ipAddrBlock: critical
IPv4:
207.170.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:e6:2f:89:3f:f5:bf:b3:95:d2:db:b0:68:3a:86:5f:1b:32:
a2:c9:9e:a5:cf:59:a0:a2:c5:1e:39:3f:4e:09:da:84:41:fc:
71:a0:83:1c:70:e1:b1:12:c1:07:b4:d7:fd:88:30:95:87:f3:
9e:c0:c7:d5:e5:9d:a3:4f:8e:f4:eb:d1:47:5e:c7:2e:e4:c0:
51:ab:30:00:66:16:60:96:85:07:e2:88:f5:d6:8f:c7:67:18:
44:8a:5d:e1:d3:88:b4:90:dc:cd:bf:3b:0c:d0:ac:bd:77:8d:
88:e6:f8:7c:c9:f4:6e:55:5f:48:65:75:0b:6a:2c:29:3d:aa:
43:44:5b:40:63:f7:ba:7d:ba:cd:b0:03:44:5b:43:18:0c:64:
87:b0:5f:73:b8:cd:e6:91:c2:9d:c5:56:38:a0:af:d7:bb:c5:
0b:73:4e:37:8e:b6:d0:57:cf:00:4b:34:d9:d0:a7:a3:fe:40:
b7:08:bd:c9:2e:5d:61:2c:c8:cf:15:a3:20:7e:38:ac:98:7e:
eb:41:b7:53:5c:66:f3:d7:18:b7:cf:96:a2:38:a2:6c:56:04:
ce:09:5b:89:07:ef:11:50:9d:32:d6:bd:b0:0d:a8:65:c9:5b:
45:b9:05:e3:62:4b:8e:ee:90:88:58:50:7b:72:07:8b:ea:10:
06:2b:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:06 2024 by rpki-client on console-fra.rpki-client.org