Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/6473d32f-be41-3faf-a692-900d4015fe72.roa
File: 6473d32f-be41-3faf-a692-900d4015fe72.roa (raw, json)
Hash identifier: Z1LaMHQ2xYuS90TdxV4OJLGshJMLYyjOSPglmiD0evI=
Subject key identifier: A4:DD:2F:15:56:1B:0C:9D:8C:AB:06:95:BD:FA:93:3E:CF:2C:EB:18
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328576D51CC73C042CFC1713BE7AFDD
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/6473d32f-be41-3faf-a692-900d4015fe72.roa
Signing time: Thu 02 Apr 2020 17:19:31 +0000
ROA not before: Thu 02 Apr 2020 04:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 11377
IP address blocks: 167.89.0.0/18 maxlen: 18
149.72.24.0/21 maxlen: 21
149.72.64.0/19 maxlen: 19
149.72.19.0/24 maxlen: 24
149.72.1.0/24 maxlen: 24
149.72.8.0/22 maxlen: 22
149.72.12.0/22 maxlen: 22
149.72.20.0/22 maxlen: 22
149.72.32.0/19 maxlen: 19
149.72.128.0/17 maxlen: 17
167.89.64.0/19 maxlen: 19
167.89.96.0/20 maxlen: 20
167.89.112.0/24 maxlen: 24
167.89.116.0/24 maxlen: 24
167.89.117.0/24 maxlen: 24
167.89.118.0/24 maxlen: 24
167.89.120.0/23 maxlen: 23
167.89.122.0/23 maxlen: 23
167.89.124.0/23 maxlen: 23
167.89.126.0/23 maxlen: 23
168.245.0.0/18 maxlen: 18
168.245.64.0/20 maxlen: 20
168.245.84.0/22 maxlen: 22
168.245.88.0/22 maxlen: 22
168.245.92.0/22 maxlen: 22
168.245.96.0/19 maxlen: 19
192.254.112.0/20 maxlen: 20
198.21.0.0/21 maxlen: 21
198.37.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:3b:e7:af:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: Apr 2 04:00:00 2020 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=d7085675-c05b-4930-a564-527daf0db399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:f9:69:08:38:54:16:b0:28:25:66:b3:9c:
31:93:4e:50:07:f7:48:62:33:d3:d2:e7:76:cf:0c:
7a:f3:51:58:93:ed:01:64:df:86:47:e4:c1:82:43:
45:74:60:90:f9:5a:cb:a2:9a:b8:38:38:78:12:0f:
24:15:c1:f9:c8:de:0e:07:d1:d5:0a:89:10:b7:af:
1c:68:51:22:c2:45:96:fd:11:55:52:9b:50:fb:da:
7e:0a:dc:4e:a3:e3:70:a0:e0:6a:f4:9c:f2:a6:19:
b5:7a:f3:35:79:73:37:26:22:30:41:ac:0c:c0:06:
05:09:d1:0b:11:17:1e:dc:cd:87:33:35:6e:32:d6:
46:66:dd:7d:14:6c:27:92:e7:56:62:70:b5:b3:5f:
0d:bd:1c:ea:9a:b9:bf:d7:df:42:bc:9d:06:4f:10:
df:98:a8:52:e7:15:83:e9:99:b3:e0:aa:ab:01:f7:
2e:67:93:6f:40:16:c5:c2:d6:28:8b:a3:dc:c6:d7:
f5:4a:8c:d5:27:1e:ee:4f:86:16:cc:97:4d:a7:c4:
21:42:a4:67:1a:22:db:f0:3a:a6:e1:8a:1c:2e:a3:
63:79:6c:b1:b7:c1:f8:e6:03:11:7e:0e:13:88:74:
88:c1:9b:f5:71:76:2c:07:3f:7d:82:47:db:0f:af:
9e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:2F:15:56:1B:0C:9D:8C:AB:06:95:BD:FA:93:3E:CF:2C:EB:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/6473d32f-be41-3faf-a692-900d4015fe72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.1.0/24
149.72.8.0/21
149.72.19.0-149.72.95.255
149.72.128.0/17
167.89.0.0-167.89.112.255
167.89.116.0-167.89.118.255
167.89.120.0/21
168.245.0.0-168.245.79.255
168.245.84.0-168.245.127.255
192.254.112.0/20
198.21.0.0/21
198.37.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:ae:0c:d0:0b:09:05:27:df:4e:70:fc:24:d1:39:96:5b:82:
97:a4:60:f5:c8:1c:81:21:58:21:79:0b:b8:d1:c9:69:3c:34:
20:a9:5e:1a:4a:5f:b2:26:1e:d0:5e:5b:55:f8:20:9c:1c:1f:
d9:48:44:97:42:6a:0b:97:ca:0d:7d:e3:e6:fa:f5:76:31:f0:
9b:cc:52:13:1c:aa:82:55:c1:9a:b7:4d:dd:11:67:7d:1f:31:
ba:cb:1f:1f:cf:c7:62:37:ee:a0:95:fb:9e:da:f2:4c:af:06:
ee:76:d4:e2:f8:84:f2:3c:68:67:fd:1e:57:eb:d8:fd:cf:78:
0a:fa:1e:69:f5:0b:20:2c:ea:32:d0:8d:4a:e1:c5:0c:de:15:
ed:2c:cd:94:ff:19:2a:cf:86:1f:7d:46:e5:d3:f1:b1:07:82:
d8:9a:33:a0:0d:21:6a:b9:36:e0:62:04:e6:84:2d:5a:63:07:
f3:ed:6b:8c:1e:e3:41:1b:c0:de:42:20:d6:7f:a3:ff:41:80:
f6:b8:85:27:4d:94:84:47:63:89:91:c1:a9:40:ad:09:d7:ae:
5e:90:16:13:4d:7f:e7:7d:2f:7d:9a:8e:f2:b5:c8:fd:c6:9f:
76:56:ae:8b:71:72:d2:0f:28:6b:1d:64:44:ff:00:5b:ca:3b:
92:e8:c3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org