Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa
File: 2e52089a-df73-39d5-890f-0d664469f969.roa (raw, json)
Hash identifier: SGRymnBevrzfOPAchIoyQpKJJi5Al7CAB0q3gYiC7Xw=
Subject key identifier: 76:84:5A:00:E4:4D:4F:52:55:38:AD:17:62:44:44:7D:BC:39:C2:EA
Certificate issuer: /CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Certificate serial: 010D0C9F43285844CBEBADF31F848C4B59B38080
Authority key identifier: 3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa
Signing time: Tue 06 Feb 2024 02:00:26 +0000
ROA not before: Tue 06 Feb 2024 02:00:26 +0000
ROA not after: Mon 06 May 2024 01:00:26 +0000
asID: 400260
IP address blocks: 104.232.0.0/24 maxlen: 24
2602:fcac::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:cb:eb:ad:f3:1f:84:8c:4b:59:b3:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fde067-6a5b-4ae6-b9a1-e3ec208c5940
Validity
Not Before: Feb 6 02:00:26 2024 GMT
Not After : May 6 01:00:26 2024 GMT
Subject: CN=c44c0f47-8989-4a8c-b36b-55ad361ba2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:b3:02:10:0b:f2:4b:af:8f:97:42:2f:4b:
b7:94:38:e5:51:1a:ab:cb:14:bb:01:ba:6a:13:57:
b1:99:3b:36:b1:91:98:00:58:e9:f9:cc:e2:a1:95:
91:5c:00:92:cb:3f:62:89:60:46:f0:e9:9d:d6:42:
28:2a:ab:7b:07:c6:fc:c9:e0:5b:08:2f:8d:6c:5c:
78:5a:01:4f:f6:1a:30:5e:e0:34:c9:6e:5d:2d:a3:
13:05:ee:f1:5e:82:05:88:9c:2a:e4:35:e1:17:d5:
60:9d:4d:26:01:e3:f5:8d:dd:9c:96:67:64:29:d9:
48:d5:d2:ed:b7:6e:a7:13:0b:b0:91:17:9e:38:c4:
30:f0:96:47:36:4a:d7:bc:fb:e0:aa:8a:ad:f0:98:
4d:70:49:eb:38:f9:98:d3:3b:58:0e:5c:5c:b4:b5:
0d:3a:00:64:37:aa:2c:42:4d:95:1a:c3:40:a5:22:
eb:1a:47:69:50:36:c0:4b:6d:2c:19:3a:83:2e:52:
32:d3:d5:34:d4:91:d6:99:89:bc:a6:e8:06:a2:94:
9f:44:df:70:bd:64:bb:7d:60:a9:f5:29:a6:f8:42:
15:66:87:0e:f5:b3:c9:c0:79:86:33:8b:65:7f:57:
77:e4:f8:bb:d4:0a:f5:b5:2c:52:54:53:81:03:b6:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:5A:00:E4:4D:4F:52:55:38:AD:17:62:44:44:7D:BC:39:C2:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/2e52089a-df73-39d5-890f-0d664469f969.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.crl
X509v3 Authority Key Identifier:
keyid:3C:69:02:72:6D:77:DC:4C:A9:8E:3C:9A:57:60:85:35:39:D6:EA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7fde067-6a5b-4ae6-b9a1-e3ec208c5940.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.0.0/24
IPv6:
2602:fcac::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:ef:88:55:dc:92:4b:08:03:4a:0f:63:5c:0e:24:b4:82:1f:
fa:81:e1:42:75:c2:70:ea:d3:6e:64:c0:a6:92:25:7b:83:d4:
30:b4:48:e9:f5:be:8d:26:c2:e4:e4:7a:0b:19:aa:7f:28:11:
74:cc:93:81:ed:94:3b:39:0b:7d:be:1f:84:d8:fa:b8:c2:c6:
8a:65:40:c0:26:e2:4a:a3:f8:65:40:8e:e0:1d:9f:02:d4:c8:
9d:af:73:3a:c5:85:be:4e:96:ac:db:6a:2c:6a:b5:59:99:82:
8f:c9:b3:ce:fa:89:22:58:b8:30:24:b0:51:93:50:38:19:11:
0d:21:4e:aa:d4:da:5a:c1:1c:e8:16:ca:2c:bd:03:2b:9c:c9:
f7:5c:5e:aa:d7:4b:5e:cc:82:af:56:3f:22:3d:1f:53:09:91:
a2:3d:46:86:0f:1a:4a:bb:2d:30:e9:e2:f3:94:3a:2c:79:4b:
22:db:4d:b0:4e:62:b4:5a:13:a2:74:a2:46:d9:94:54:12:f1:
40:09:c9:8c:f9:ad:8d:16:64:6c:f2:f8:4b:5a:2b:f5:4e:7a:
a1:2a:f2:0c:9f:49:a0:74:10:ae:ab:10:7d:c2:bc:b1:6c:b1:
16:02:af:5e:4b:7b:61:75:71:04:84:77:b7:93:5f:60:a2:e3:
ee:5f:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org