Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/7d0add24-f70b-3ada-b05e-e83dd2c9b59e.roa
File: 7d0add24-f70b-3ada-b05e-e83dd2c9b59e.roa (raw, json)
Hash identifier: WrFknrDodj2HLZwWfPpzjHGRZdkMnk81GP+hvkamdpA=
Subject key identifier: 35:CB:25:B3:07:16:E3:A0:53:E7:12:AB:C2:3D:23:56:8B:04:B6:07
Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial: 010D0C9F432858399234ED8FE9EE1A1E47F93D00
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/7d0add24-f70b-3ada-b05e-e83dd2c9b59e.roa
Signing time: Thu 08 Apr 2021 04:00:00 +0000
ROA not before: Thu 08 Apr 2021 04:00:00 +0000
ROA not after: Sun 16 Jul 2023 04:00:00 +0000
asID: 61317
IP address blocks: 104.249.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:92:34:ed:8f:e9:ee:1a:1e:47:f9:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
Validity
Not Before: Apr 8 04:00:00 2021 GMT
Not After : Jul 16 04:00:00 2023 GMT
Subject: CN=7f2e5fac-87cb-4872-bb61-ddfbb1189d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:c2:ac:11:a9:75:8c:32:31:7c:f9:dc:78:
7f:9c:0d:1d:b4:93:48:d4:cd:c6:5d:3c:e5:57:b9:
b9:01:06:ea:e2:df:00:57:73:3d:72:eb:93:da:18:
89:d8:be:21:fd:35:7c:71:27:18:e5:6d:37:79:4c:
9b:98:6b:fb:80:72:6b:07:6d:41:bd:6b:4e:6c:50:
e4:84:45:cc:1c:c4:be:bc:ab:90:fe:a6:02:19:53:
2d:cc:2d:9f:51:98:f7:40:8b:8c:f7:ca:89:3a:2e:
9d:3c:b2:94:b8:48:26:a1:56:5a:cf:89:2b:57:53:
d0:b5:85:2c:c8:5f:be:07:6a:e3:02:4d:ad:73:4b:
be:c5:1a:f3:5a:36:43:41:f7:0e:84:52:dc:b5:cd:
16:5d:c1:a7:e9:d3:92:4a:0e:a1:62:fd:29:bd:c3:
3b:2a:5e:f9:f4:a6:c9:1a:41:36:2b:4b:8d:b0:4d:
e5:fd:a7:aa:62:9d:fb:5f:51:88:c8:a1:a3:99:37:
ec:a8:41:63:c5:4a:18:f9:e2:94:33:7f:cd:70:cd:
a6:07:ab:64:a2:c2:4c:52:34:30:3e:b5:f9:91:8a:
21:da:36:6f:97:a5:2d:50:84:7a:2f:2f:4a:84:0e:
9e:e8:2d:e5:f4:06:ae:53:08:e6:b2:5f:d4:b9:8c:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CB:25:B3:07:16:E3:A0:53:E7:12:AB:C2:3D:23:56:8B:04:B6:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/7d0add24-f70b-3ada-b05e-e83dd2c9b59e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
X509v3 Authority Key Identifier:
keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.249.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:97:45:63:8b:61:27:30:27:6c:37:26:17:32:18:19:50:7c:
b3:45:d4:99:09:d6:43:22:01:bf:a3:51:e0:d8:b5:be:25:e2:
d7:68:f5:09:13:ca:b0:26:37:89:c5:23:70:d0:d6:69:df:eb:
64:d7:4b:9e:12:f3:78:16:bc:fd:5a:13:d5:ad:fa:53:e9:00:
cb:e3:e6:0e:94:f5:8c:c1:ad:4f:fb:63:60:a1:ff:85:0d:99:
e2:c5:28:a6:5b:43:26:20:d7:88:f2:38:27:9e:a4:c2:37:0e:
c0:45:e0:b5:49:ce:59:ef:03:d7:83:f1:0e:98:7a:9f:52:38:
e7:c0:ef:a5:3e:47:9d:9b:30:74:d9:79:91:09:5e:c6:4b:76:
e5:0e:07:ee:75:0b:58:ed:5d:ed:47:6e:fd:80:c3:61:6f:07:
ac:68:9b:8a:3b:53:e8:99:7b:3b:8d:2e:3f:4e:fb:be:7b:ef:
9d:ce:16:31:d3:b6:f6:dc:d4:ac:f3:07:a8:b1:01:9d:98:e0:
0b:6c:bf:5d:18:bb:72:c7:29:3f:f2:57:fd:a6:68:38:cb:ff:
2a:ae:7e:85:1d:4e:4f:89:a5:f6:96:11:59:92:8b:97:21:0d:
06:57:d8:88:0d:c1:ba:8a:5f:b3:ff:ed:97:58:d3:19:9a:ec:
5f:f9:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org