Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b6acee5c-2383-3224-ab10-5fb0ceac7d6e.roa
File: b6acee5c-2383-3224-ab10-5fb0ceac7d6e.roa (raw, json)
Hash identifier: FcyRoQD9TEzgJbJirbRunKBJZmTffeeaVlq99divpJk=
Subject key identifier: 00:2A:73:87:4A:82:77:61:24:FA:00:69:46:AA:57:DF:0E:14:A4:0C
Certificate issuer: /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial: 010D0C9F4328583C852448599BFAAA8847F147C0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b6acee5c-2383-3224-ab10-5fb0ceac7d6e.roa
Signing time: Fri 11 Jun 2021 04:00:00 +0000
ROA not before: Fri 11 Jun 2021 04:00:00 +0000
ROA not after: Thu 11 Apr 2024 04:00:00 +0000
asID: 55154
IP address blocks: 209.54.108.0/24 maxlen: 24
209.54.109.0/24 maxlen: 24
167.160.164.0/24 maxlen: 24
155.94.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:85:24:48:59:9b:fa:aa:88:47:f1:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Validity
Not Before: Jun 11 04:00:00 2021 GMT
Not After : Apr 11 04:00:00 2024 GMT
Subject: CN=17f4f285-80eb-4206-ad3e-adb952ef10f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:ec:65:4c:5b:dd:b2:14:b4:52:87:a7:34:
a2:cd:88:39:38:6b:c1:44:11:7b:0b:e0:ff:c3:ea:
4e:5e:d6:18:35:20:e8:fa:e7:d6:29:c7:f4:e6:93:
79:69:c5:3c:85:f4:f0:a4:a5:f5:1d:f1:a5:3d:34:
ed:07:af:8f:e9:61:7b:2d:83:f2:ed:0d:ad:37:8e:
1c:7c:05:0b:78:81:ba:06:f1:79:0d:82:e7:0a:9e:
9b:c6:e6:7b:59:c4:3a:33:d2:0f:d4:f3:5f:ad:8f:
8b:86:fc:42:91:06:85:9a:66:82:76:f0:01:c6:d4:
b8:0b:b4:23:15:bc:d7:3f:f9:a2:ae:1c:a3:c6:7d:
30:84:8a:c8:d7:db:7d:bc:54:98:b1:9b:e8:9f:bd:
f5:82:7f:a7:cc:d0:8a:f1:db:2a:dc:9d:8c:ae:ae:
7f:88:b7:02:4a:e6:31:d6:c3:f8:a5:b9:ad:f3:27:
af:47:65:60:3e:14:00:96:f6:23:8b:01:32:72:1e:
99:5f:c4:dd:b7:e0:89:0f:1e:e7:fc:c3:70:43:a5:
69:e5:18:98:ba:6c:3a:6f:ed:f6:18:cb:c6:5c:84:
f2:16:c3:92:86:9e:51:ca:06:6d:fa:03:e8:4e:51:
06:b1:0b:5b:1d:a2:c6:de:07:e3:c1:af:7f:ec:79:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:73:87:4A:82:77:61:24:FA:00:69:46:AA:57:DF:0E:14:A4:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/b6acee5c-2383-3224-ab10-5fb0ceac7d6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl
X509v3 Authority Key Identifier:
keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
sbgp-ipAddrBlock: critical
IPv4:
155.94.246.0/24
167.160.164.0/24
209.54.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:cf:b0:67:c9:ac:a0:1e:1c:93:a9:5f:dc:70:d8:04:78:ff:
00:89:85:50:5a:df:ae:4b:c5:67:f2:4f:9b:d8:bd:58:0e:b2:
21:06:28:b6:95:09:ec:52:64:0c:8f:08:48:d2:07:d9:e7:3f:
00:cd:b8:75:c9:04:2c:a9:53:07:bf:04:05:43:bf:df:f5:66:
41:10:40:f4:e1:e9:52:18:54:f1:a4:bc:53:65:01:96:e4:9c:
e2:d3:03:11:53:3f:5b:16:a7:35:79:c2:c6:5f:62:78:9c:b1:
63:0e:eb:1b:1d:cf:1f:22:e8:f8:a8:29:3f:05:ca:08:28:9d:
79:4a:67:9e:64:a9:25:57:d0:27:2c:6e:07:fd:17:d6:97:ae:
f6:c7:be:7a:aa:22:7f:40:71:d6:bf:75:d5:45:f8:ba:3c:fa:
88:b8:a9:70:09:ed:82:3e:dc:76:6c:3b:30:ce:a8:19:d8:5e:
f5:d6:86:b9:52:08:81:8c:05:69:ac:90:90:c3:7f:bd:cb:84:
45:ad:fc:69:f6:c2:d4:77:ea:ba:3d:b1:2d:05:85:a0:9e:62:
c9:ef:99:bb:3d:e4:c9:c7:7b:2b:34:db:95:1b:fb:23:eb:d6:
41:e0:97:b0:25:1d:5c:08:58:5b:f8:92:90:15:a6:77:3b:eb:
bf:f9:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org