Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/d778df75-cde0-39aa-9ece-3acffc6625a5.roa
File: d778df75-cde0-39aa-9ece-3acffc6625a5.roa (raw, json)
Hash identifier: gHGUwhZQMrqDa1OFU3ARtHC3IIfBALojOyt5NFDLiSY=
Subject key identifier: DD:68:99:7C:D4:B5:3D:8E:71:63:D8:7F:0D:26:01:B1:5F:EB:70:01
Certificate issuer: /CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Certificate serial: 010D0C9F4328576D51CC73C042CFC17083325BF3
Authority key identifier: 9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/d778df75-cde0-39aa-9ece-3acffc6625a5.roa
Signing time: Wed 26 Feb 2020 20:31:20 +0000
ROA not before: Tue 25 Feb 2020 05:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 23483
IP address blocks: 66.244.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:83:32:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc2be88-240f-418a-aea9-3c6a0776ce7a
Validity
Not Before: Feb 25 05:00:00 2020 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=849df563-da5f-45f5-9969-2506a2cc7b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:8a:2f:bc:a3:93:a4:22:07:4a:09:28:aa:
b7:90:e8:24:41:94:64:e0:be:57:7d:30:66:df:a5:
d5:b7:df:9c:08:79:bd:34:75:01:45:61:e7:4c:ee:
53:e9:56:08:f6:cf:07:f4:de:18:18:e0:9b:f4:e5:
9a:01:91:92:06:d6:3a:6a:8b:31:ff:f0:13:38:17:
a9:51:a7:04:11:ed:15:9c:a5:ff:b7:e0:23:21:a5:
b5:c4:18:4d:a8:68:3a:02:71:40:00:b2:37:da:b8:
b0:fe:f7:0f:4d:8d:91:0e:52:5a:85:b0:5a:f3:8d:
0d:53:88:9e:a2:7b:8a:dd:b3:f6:0c:2a:b7:97:01:
52:2d:88:32:88:86:56:1e:9a:7c:3a:1a:41:ab:8e:
56:15:09:4c:eb:cb:07:64:4c:d7:e9:cc:d3:fb:63:
7c:56:f3:86:6b:29:45:fb:ab:e5:83:46:d4:2d:e9:
c7:cb:70:18:a7:77:df:36:12:14:46:97:c0:a7:02:
37:0c:0a:35:70:54:67:83:b5:87:58:8c:78:66:0c:
0b:01:45:04:fa:01:9b:d2:51:40:4f:be:9c:cb:14:
db:ac:ac:6b:8b:a9:26:9d:ae:29:11:df:e2:1d:15:
ee:af:a7:e2:72:24:12:5d:43:9a:49:ed:c5:89:c1:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:99:7C:D4:B5:3D:8E:71:63:D8:7F:0D:26:01:B1:5F:EB:70:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/d778df75-cde0-39aa-9ece-3acffc6625a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a/2cc2be88-240f-418a-aea9-3c6a0776ce7a.crl
X509v3 Authority Key Identifier:
keyid:9D:86:B9:F6:46:DE:03:F9:D3:9D:C0:FE:10:8D:56:8A:BA:14:9F:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2cc2be88-240f-418a-aea9-3c6a0776ce7a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.244.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:f6:96:20:05:06:c3:b8:b4:83:40:c0:d5:6f:c5:76:11:7a:
db:a6:e7:b4:49:a8:04:72:77:31:e3:79:62:36:09:ab:19:dc:
b7:d9:6d:98:71:f7:f2:d4:79:c5:23:e0:b4:6d:7c:f9:85:df:
c3:cb:56:ab:78:7f:f6:2b:ec:ad:14:4e:22:33:de:3d:3e:c9:
ba:f5:b9:cc:b0:a3:eb:d5:b5:5d:19:65:15:7c:53:ba:b9:50:
95:67:d6:96:9e:04:38:7f:6c:67:82:d3:2c:8f:aa:59:80:d2:
7c:49:6f:93:d3:12:08:aa:53:97:14:39:a7:2b:e8:80:46:d2:
b3:b6:9b:fd:fc:cf:82:51:ec:7a:e5:17:83:db:ad:ad:76:ac:
3a:97:23:62:ff:a0:4b:63:a9:e4:a6:02:68:b9:15:38:7c:a7:
4f:91:86:97:c1:4e:d2:da:d2:85:ff:88:38:04:14:2f:f5:a5:
b3:cd:24:9e:ac:8c:38:b0:aa:46:36:59:f6:db:b2:b6:bb:ef:
6f:6d:bc:7b:ec:0f:6a:b8:f5:c0:d5:b4:7b:c1:49:74:01:ed:
22:ec:79:10:db:41:dd:5e:8c:fd:bc:0c:83:e0:cb:93:22:50:
ba:77:e9:96:40:d2:62:47:40:d6:7f:21:ad:26:c5:be:96:5e:
35:43:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org