Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa
File: d1b531ba-945b-3cfb-9bbd-2053904770aa.roa (raw, json)
Hash identifier: AJzdCiNdgVpkTfmGzx/wFyJCFZyiqcSQwI/gGobSHio=
Subject key identifier: CA:A0:FB:8F:21:9B:69:76:06:D5:7E:DA:A4:2C:D4:40:8F:21:7E:9F
Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial: 010D0C9F4328584301F465208803E879A35532E8
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa
Signing time: Sat 26 Aug 2023 01:00:21 +0000
ROA not before: Sat 26 Aug 2023 01:00:21 +0000
ROA not after: Fri 24 Nov 2023 02:00:21 +0000
asID: 22191
IP address blocks: 130.45.224.0/23 maxlen: 23
130.45.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:01:f4:65:20:88:03:e8:79:a3:55:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
Validity
Not Before: Aug 26 01:00:21 2023 GMT
Not After : Nov 24 02:00:21 2023 GMT
Subject: CN=5aed07ee-1cc4-4d99-b983-8d3d3133c8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ef:28:ca:36:c7:62:6b:ed:df:0c:76:59:12:
8a:c5:0b:97:06:22:8c:d7:59:a9:db:08:fd:f5:d6:
00:74:3d:f4:cf:ef:a6:bc:2e:e4:cc:95:c7:c1:50:
51:f8:2f:d7:ae:98:da:ad:53:87:62:1e:1d:41:58:
37:2b:f3:19:38:63:8e:8d:cd:b5:13:a1:37:c1:a0:
e5:1e:8b:bb:d4:f9:3c:15:a7:9e:ca:db:3d:de:29:
14:9a:ac:90:fe:9c:2c:e1:ff:0c:90:38:77:4d:0a:
d2:00:72:2f:fe:4c:d2:bc:4d:69:88:0e:1a:15:8f:
6e:9e:53:40:0b:0a:01:ed:3e:c4:b8:12:7d:f4:bd:
5c:78:9c:67:dc:b2:30:15:93:bb:5d:2e:97:84:7c:
5a:09:73:27:24:9d:06:d9:6c:7f:39:0a:59:1a:95:
ab:aa:28:23:c3:ae:a3:56:b2:30:a5:ac:a0:a1:8a:
0e:a3:80:50:f2:7f:7b:4d:21:c3:ca:ba:cb:fb:26:
75:e7:2f:2a:42:47:f4:a3:45:e0:92:ac:cd:fa:8c:
84:56:4b:4a:53:cd:7d:e1:78:a2:00:63:80:60:20:
c9:06:67:e9:d4:52:7e:8c:9b:b8:a6:52:09:d8:c3:
41:cf:ff:a5:86:14:a1:c0:78:14:57:8b:f2:9d:99:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A0:FB:8F:21:9B:69:76:06:D5:7E:DA:A4:2C:D4:40:8F:21:7E:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/d1b531ba-945b-3cfb-9bbd-2053904770aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
X509v3 Authority Key Identifier:
keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
sbgp-ipAddrBlock: critical
IPv4:
130.45.224.0/23
130.45.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f2:94:d1:41:a2:40:ce:a3:ef:a4:83:12:bd:fc:8a:0b:ec:
ea:6f:3b:8c:c9:98:8c:cb:82:b5:41:8e:5f:1b:a8:eb:b6:6c:
ba:f4:40:4f:8b:06:e7:06:86:97:f9:6d:34:6d:f7:9f:c4:20:
15:ad:2a:1c:e5:85:74:55:45:96:48:75:a8:64:f8:f8:a7:1e:
66:8e:44:56:bc:86:41:28:c4:8e:6c:11:3e:fb:0e:4a:8c:d1:
57:7f:f4:a5:0c:af:31:97:de:99:a8:6e:51:c1:04:70:73:af:
67:ea:68:de:b1:d1:60:71:c7:4a:e2:3d:0b:f3:5a:3d:51:ba:
60:ba:57:f1:eb:26:77:6d:38:60:25:4a:18:58:24:5e:d8:ad:
33:bb:28:a7:5f:2c:ed:09:70:38:7e:dc:46:ff:7a:b3:74:8e:
37:20:d1:6b:8e:91:75:ed:8f:29:f0:b2:c1:62:f1:4f:3d:ed:
99:fe:ca:5a:c0:5d:f3:4f:45:15:8d:56:09:9b:ee:3c:62:a8:
e8:7d:c5:aa:9a:5f:80:a6:63:14:65:f3:97:db:2f:eb:63:20:
3c:d6:b6:1f:94:e4:e5:e8:43:80:cc:b8:fd:6b:92:f1:d1:b8:
fc:10:fe:22:94:39:fd:0f:9c:1c:11:13:fe:f2:1b:ab:97:bf:
ce:69:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:32 2024 by rpki-client on console-ams.rpki-client.org