Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ebd8f97d-67e7-303f-a5ce-f0a1e48db018.roa
File: ebd8f97d-67e7-303f-a5ce-f0a1e48db018.roa (raw, json)
Hash identifier: Jn85DAh4U0cT6N3908wEmdSTbYjqVF1vjJgM6zVyhf8=
Subject key identifier: A6:87:13:A0:EB:AE:CC:40:87:2E:66:EC:5C:71:22:B6:66:EA:83:5C
Certificate issuer: /CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Certificate serial: 010D0C9F43285844CF6290B14D3CC0C0F0EDE200
Authority key identifier: 53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ebd8f97d-67e7-303f-a5ce-f0a1e48db018.roa
Signing time: Wed 07 Feb 2024 07:50:04 +0000
ROA not before: Wed 07 Feb 2024 07:50:04 +0000
ROA not after: Tue 07 May 2024 06:50:04 +0000
asID: 205663
IP address blocks: 104.193.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:cf:62:90:b1:4d:3c:c0:c0:f0:ed:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ea12ff-f954-4229-88a2-d2c6656a0eca
Validity
Not Before: Feb 7 07:50:04 2024 GMT
Not After : May 7 06:50:04 2024 GMT
Subject: CN=6896058c-2164-414b-b032-6099c35934d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:69:f1:2b:7f:76:02:18:4c:71:13:17:7c:
16:92:d7:c9:8c:5f:b3:0b:ac:f7:28:e2:50:16:66:
fb:97:11:20:14:8d:25:f6:78:a9:d8:7d:3b:4b:39:
b5:e0:4a:b5:f4:02:68:3a:0e:60:d9:56:a7:be:65:
48:73:f5:cb:aa:0e:1d:14:8c:16:e2:eb:31:63:3e:
70:61:13:11:62:86:97:99:2d:7e:5f:7b:41:f0:09:
80:8c:0e:62:df:e5:f8:32:19:9e:e9:92:9d:dd:f5:
fc:96:7b:5e:8e:d0:f1:80:e1:4e:69:94:39:c8:62:
32:d0:4f:da:2f:f6:86:5e:37:8e:ee:51:52:27:64:
a1:2e:00:20:a5:54:5a:4c:3f:2a:14:56:4e:fd:c1:
33:53:a6:75:e8:57:ad:f4:b6:5e:33:34:ae:2c:90:
50:21:5e:e3:40:9f:8c:2d:76:c3:8d:ea:60:14:13:
45:7d:25:2e:1f:b5:e7:04:38:e1:5b:ca:3b:03:ce:
07:b0:16:1a:5a:15:b3:7e:9f:70:02:55:f4:b5:ca:
8f:44:8e:5d:19:c9:76:ef:c0:ba:5d:9d:a0:9a:fe:
51:25:23:c5:6e:65:4d:40:20:d6:80:5b:48:21:17:
1b:49:66:8c:1e:a5:55:1a:bd:1a:fb:de:11:10:f0:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:87:13:A0:EB:AE:CC:40:87:2E:66:EC:5C:71:22:B6:66:EA:83:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/ebd8f97d-67e7-303f-a5ce-f0a1e48db018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca/d0ea12ff-f954-4229-88a2-d2c6656a0eca.crl
X509v3 Authority Key Identifier:
keyid:53:44:7F:09:63:92:50:77:CF:65:A6:EE:0F:7D:1F:E6:BD:CE:A4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d0ea12ff-f954-4229-88a2-d2c6656a0eca.cer
sbgp-ipAddrBlock: critical
IPv4:
104.193.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:fc:e2:99:d6:db:12:a5:ab:ec:45:86:15:1b:0e:9a:c1:ed:
6e:46:98:9d:c8:96:d9:1f:d2:18:20:91:f9:da:3b:1a:f8:c8:
82:92:53:aa:48:53:26:5d:51:ae:d5:0e:de:98:18:b4:85:3d:
84:01:6a:56:87:33:fc:24:f2:19:9f:fa:25:42:03:41:2d:35:
6f:74:b8:24:e4:79:c5:af:b5:c3:dc:19:54:80:de:22:b9:e0:
77:23:5d:26:28:aa:e6:ba:c3:7d:b7:16:10:59:ef:9e:14:f8:
11:bc:0f:92:25:19:7e:ab:53:d3:a1:fa:93:4e:60:13:b3:e7:
ca:b9:d4:ff:16:58:9f:1f:56:d8:7c:b7:c9:ff:51:27:e8:7e:
29:cd:4e:ac:dd:fe:c0:a9:6c:c7:b9:d1:d6:bc:78:f4:75:d3:
de:8f:a7:a1:2e:85:a1:fd:7d:5b:07:4a:c3:6a:f4:a0:cc:ce:
64:c6:29:92:d6:4c:d8:f6:2c:a1:0b:48:0a:a6:a8:b9:3d:e2:
f7:40:75:65:2d:94:c4:c2:2a:81:80:27:f4:1b:8d:a8:d7:be:
ed:ad:40:51:84:c5:40:82:df:86:fd:0b:47:db:ea:84:b1:0e:
22:80:ae:14:d5:bf:9f:1c:f6:c8:b8:74:9d:f6:8d:f6:a3:2f:
86:7d:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org