Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/f01568be-940c-30c3-99f6-d07e191cf056.roa
File: f01568be-940c-30c3-99f6-d07e191cf056.roa (raw, json)
Hash identifier: K7U5ROiAAwEhJcWNZm48mxj2zEaUgpOC5EroMUbS6a8=
Subject key identifier: FD:CF:4B:22:4F:A9:D7:DF:21:52:D0:D4:66:65:66:27:D1:2B:2D:4B
Certificate issuer: /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Certificate serial: 010D0C9F43285838C9333799278DC9F616D07D40
Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/f01568be-940c-30c3-99f6-d07e191cf056.roa
Signing time: Thu 28 Jan 2021 05:00:00 +0000
ROA not before: Thu 28 Jan 2021 05:00:00 +0000
ROA not after: Fri 05 May 2023 04:00:00 +0000
asID: 14618
IP address blocks: 203.89.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:c9:33:37:99:27:8d:c9:f6:16:d0:7d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad
Validity
Not Before: Jan 28 05:00:00 2021 GMT
Not After : May 5 04:00:00 2023 GMT
Subject: CN=a1b703e8-7032-4d2d-98b6-7a2e1a06ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:19:69:f6:95:44:88:8a:52:c8:f1:1a:5b:
59:67:5f:0e:e8:52:85:d0:6b:bd:c6:24:de:8f:68:
27:a2:0e:3f:ce:4b:53:9d:80:88:9d:83:6d:88:d3:
41:19:83:80:3d:b9:75:16:23:06:6d:2d:10:22:7d:
ab:c9:ee:0e:33:47:62:97:19:b7:e0:10:5a:b2:2e:
c3:a7:1b:99:47:38:45:3a:d5:ad:e8:27:2e:9a:64:
0e:74:27:ce:17:5f:29:00:38:d1:8e:33:a6:c2:5c:
9d:c4:dc:07:80:7b:ed:51:ef:b4:c4:18:1d:53:3d:
8d:84:28:eb:91:54:cd:54:12:14:7e:54:71:66:32:
69:8d:f0:57:9e:b1:20:5f:fc:fa:a2:6a:f9:a9:fe:
2d:f2:06:fa:8b:5a:e9:78:72:bf:9c:85:f8:d4:ad:
2b:73:4f:dc:40:cf:e5:dc:f1:be:13:63:8e:0a:78:
43:45:59:71:71:68:50:50:39:35:26:5c:ed:90:7d:
45:be:66:83:a8:51:bc:3e:34:d2:20:fe:81:71:d1:
3f:06:3b:7a:f0:d8:66:e9:39:86:6f:45:de:fe:42:
be:2b:8f:90:2f:b2:c5:f1:c7:39:02:06:a4:69:2c:
83:2b:37:13:1b:85:66:c9:29:d1:3e:7a:a7:b7:e3:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:4B:22:4F:A9:D7:DF:21:52:D0:D4:66:65:66:27:D1:2B:2D:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/f01568be-940c-30c3-99f6-d07e191cf056.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl
X509v3 Authority Key Identifier:
keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
203.89.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:59:24:f0:c9:04:2f:a6:24:b1:20:43:0c:e4:82:40:e2:40:
b6:f2:63:3d:d4:24:e1:9c:31:19:f0:f9:fb:7e:b4:05:67:25:
7f:86:fe:5f:7e:5e:ac:d8:ba:71:a1:39:70:7d:e0:f6:75:d6:
4a:9f:25:ac:6d:09:13:b3:8e:c0:20:db:51:49:0e:96:9d:10:
25:8c:68:67:5c:5a:87:5a:e5:d2:f8:3c:66:46:38:66:84:b4:
16:ea:b5:2c:1b:0d:58:9e:19:46:52:d1:18:ae:dc:ec:0b:da:
cf:40:2f:1e:31:80:64:30:15:36:11:be:66:27:b9:44:f1:80:
c4:d7:c2:89:34:66:bb:b2:ad:2d:bc:2a:8d:79:9b:e2:d4:05:
77:15:0b:c3:7e:ba:9f:dc:a6:a0:df:b6:12:1e:96:85:e4:e9:
ca:ba:95:d9:c9:9b:2d:dc:5d:50:2f:7f:02:a3:6c:96:e2:eb:
ad:d0:f8:15:e6:9e:6c:66:95:a3:22:72:ef:ea:b2:90:a9:b3:
2b:9b:28:05:14:6d:49:8d:ac:bb:cc:80:fa:c8:d9:71:f7:ec:
4b:0c:34:29:63:76:e5:3c:40:b0:58:33:03:74:5d:1c:f8:81:
8e:cc:ab:46:89:f9:60:84:24:c3:56:55:9f:b5:f2:78:38:6c:
ce:bd:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:45 2023 by rpki-client on console-fra.rpki-client.org