Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/7b621482-7325-3739-b304-a829738be170.roa
File: 7b621482-7325-3739-b304-a829738be170.roa (raw, json)
Hash identifier: q5/MF7FLbDQSXf4RgVQYUGZOaZboLP7jiwVAwmkx/tQ=
Subject key identifier: C9:14:87:D2:7D:D3:64:EA:6C:19:73:5A:24:36:D0:35:AF:FE:ED:44
Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
Certificate serial: 010D0C9F432858440ADF278CC964140B2C9CD500
Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/7b621482-7325-3739-b304-a829738be170.roa
Signing time: Tue 28 Nov 2023 22:26:51 +0000
ROA not before: Tue 28 Nov 2023 22:26:51 +0000
ROA not after: Mon 26 Feb 2024 22:26:51 +0000
asID: 395044
IP address blocks: 23.165.24.0/24 maxlen: 24
2602:816:7000::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0a:df:27:8c:c9:64:14:0b:2c:9c:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
Validity
Not Before: Nov 28 22:26:51 2023 GMT
Not After : Feb 26 22:26:51 2024 GMT
Subject: CN=93663940-28b1-4cdf-8727-503182c602c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5a:04:84:8a:c3:3c:d7:e1:63:6a:12:ff:f9:
6e:cd:be:67:0a:a4:11:82:9f:ed:0d:92:ff:9e:c5:
59:a8:fe:13:a6:54:1f:d8:97:b1:47:66:bb:4f:2a:
43:e1:5d:51:f4:d6:31:6a:f6:9b:9e:49:da:60:88:
cb:d9:62:1c:39:b3:81:91:e7:44:2b:d8:ad:0f:a9:
93:56:26:36:ab:1a:5d:22:74:c2:13:25:d7:cc:b2:
18:cb:d4:67:d3:e9:b5:9b:9a:90:df:73:83:3a:28:
74:b8:60:9d:ca:21:50:5e:e1:1e:dc:b1:7a:6b:86:
f6:8a:5b:31:a9:0a:9c:5a:b8:19:11:5a:df:48:63:
ee:ea:f5:5d:c3:e1:25:82:97:fc:05:e1:7c:0e:bb:
ff:7b:e2:06:af:65:9a:61:3c:8e:7f:d2:ab:db:6d:
6c:ca:a1:58:45:ce:b6:29:9d:4a:fa:6b:88:12:da:
c9:42:75:05:6a:fe:61:6a:a6:87:3c:15:fb:9c:ec:
eb:36:01:b8:63:00:6a:b2:c6:41:76:eb:8c:8d:ba:
4f:51:39:6e:83:19:d5:ba:4b:50:94:c4:7a:f1:55:
b8:2b:f6:e1:59:67:21:40:95:13:01:32:bf:b7:f5:
90:57:81:3d:a9:70:4b:3b:5d:73:96:78:ec:ac:10:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:87:D2:7D:D3:64:EA:6C:19:73:5A:24:36:D0:35:AF:FE:ED:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/7b621482-7325-3739-b304-a829738be170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl
X509v3 Authority Key Identifier:
keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.24.0/24
IPv6:
2602:816:7000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:bb:f7:61:f3:05:c3:ad:27:39:a8:4c:e3:91:8c:72:d1:02:
64:83:af:a3:8b:e5:92:10:4f:9a:2c:70:26:ea:15:36:ad:48:
dc:d8:a0:c2:bb:5c:f4:cd:c6:10:c2:21:45:c2:10:7f:54:8d:
dd:3f:e7:32:2a:28:09:b2:e2:a9:99:5d:02:61:91:23:ed:ca:
19:1f:67:fe:3c:6f:3f:f9:1f:14:8e:0d:52:ea:cb:1c:3e:49:
82:34:64:d9:0d:5c:f2:32:0b:7a:24:96:bf:d5:be:08:82:a9:
cb:e8:dd:3b:67:ed:ab:d2:37:7b:96:a7:35:f2:86:ec:fd:d2:
69:df:1e:d9:60:f1:9b:53:d0:a0:41:c5:8e:79:50:5f:4c:f8:
02:ff:eb:4f:8e:07:eb:a5:14:25:03:3b:5a:6b:e1:c4:e7:02:
44:af:e7:51:ce:9a:cb:93:6b:0c:ee:cf:8c:b7:65:37:e7:2f:
e9:23:55:7c:53:66:6c:45:57:f3:ad:4d:54:69:d6:9b:59:46:
f2:99:39:b3:6c:15:bb:2e:8b:c2:ae:5e:91:03:49:24:e5:17:
1e:a9:80:06:36:1c:d8:c3:39:36:ec:cd:27:a2:f1:ee:98:57:
cd:c5:b6:b9:4c:fc:43:bb:ed:b4:64:28:c9:7c:d7:e8:1c:1e:
06:23:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org