Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/ec981891-2edf-3998-941e-cd0733e7f74d.roa
File: ec981891-2edf-3998-941e-cd0733e7f74d.roa (raw, json)
Hash identifier: m7Ii6LnKGH8iXa6Ye5w3BxqZyZLbAOYHuyXDeChygKI=
Subject key identifier: B6:CB:AC:77:CD:BF:E1:71:3F:9A:D5:C1:79:EB:19:80:16:AE:8F:30
Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial: 010D0C9F43285843BD00373F90C75B3A02731670
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/ec981891-2edf-3998-941e-cd0733e7f74d.roa
Signing time: Wed 01 Nov 2023 01:00:15 +0000
ROA not before: Wed 01 Nov 2023 01:00:15 +0000
ROA not after: Tue 30 Jan 2024 02:00:15 +0000
asID: 205320
IP address blocks: 206.212.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:bd:00:37:3f:90:c7:5b:3a:02:73:16:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Validity
Not Before: Nov 1 01:00:15 2023 GMT
Not After : Jan 30 02:00:15 2024 GMT
Subject: CN=a885dbe9-9174-4cf2-90c9-01ae7f5285b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:ef:82:5d:25:46:f9:df:b3:57:15:d4:e1:
f3:74:bc:0f:72:db:82:77:f0:47:a3:39:3e:37:3e:
8b:fd:f0:16:53:9c:d3:ee:ee:ee:b7:3a:3a:e8:e0:
2f:fe:95:e9:11:9b:16:6b:4b:da:88:a9:a8:60:5e:
dc:76:95:ad:b4:ef:a5:5b:0e:62:0b:48:5f:98:d9:
73:78:65:de:1e:cc:dc:25:9c:9c:af:69:2a:91:ad:
a1:97:ec:d2:eb:c9:89:c3:92:b3:8c:8e:39:2a:24:
e7:34:cf:26:31:61:31:c7:35:40:15:e0:da:4d:df:
10:51:bf:4b:20:51:97:c9:b4:c2:e0:48:b7:fe:20:
8e:64:a1:4b:55:fc:1a:11:6a:76:f2:9c:58:cc:bc:
26:20:eb:9b:1e:1b:e4:f4:9b:1a:e7:d7:7a:a7:53:
aa:f9:29:50:55:30:35:a0:eb:bb:5c:18:f7:ab:ff:
0d:39:8a:bc:59:11:7d:43:95:09:66:62:2f:98:5c:
32:71:75:97:f8:80:51:c4:42:b6:d7:2e:96:96:02:
a3:d4:e7:9f:02:c8:cb:e3:b6:b9:25:31:e6:87:a9:
7c:c8:ef:a8:df:5b:ea:3f:5f:c7:b9:17:ca:4d:e5:
c6:b3:1e:ce:8b:4c:5b:90:7f:8e:e7:64:9d:ce:d1:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:AC:77:CD:BF:E1:71:3F:9A:D5:C1:79:EB:19:80:16:AE:8F:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/ec981891-2edf-3998-941e-cd0733e7f74d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
X509v3 Authority Key Identifier:
keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
sbgp-ipAddrBlock: critical
IPv4:
206.212.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:2f:00:99:01:77:f7:36:a2:c9:f6:2d:fb:14:5f:6b:38:7c:
11:e5:f1:96:18:67:52:b5:0c:01:e8:26:13:24:e6:97:50:0e:
d4:b6:48:38:aa:25:50:91:5e:a0:d8:1f:7c:2f:d6:81:46:b3:
15:9b:67:e8:6d:17:18:3a:64:66:0e:86:d6:d7:b4:5c:90:08:
31:de:33:ce:b3:cd:0d:68:83:4d:48:25:24:f3:18:17:9e:c9:
9d:41:59:1f:fd:48:55:dd:b3:75:40:09:e3:3a:b0:c1:5c:41:
ea:db:d4:c2:88:91:7d:82:00:8b:72:22:83:72:2e:4e:39:7c:
ad:ec:6b:8d:81:82:8e:a5:77:55:16:66:25:0f:e2:48:a8:03:
11:36:e8:03:29:08:1f:d4:35:57:32:df:14:cb:f8:b0:5d:7f:
c2:c5:21:0b:96:c9:25:a5:8f:85:2d:0d:41:77:d9:a2:8d:52:
f0:20:27:23:41:8e:97:2a:3e:ed:ab:5a:60:68:b2:c7:c7:d9:
c7:75:2c:a2:03:7c:77:20:57:af:3f:ed:8a:91:a5:c1:c1:f2:
0e:e7:91:56:a3:f7:1e:32:ec:46:54:00:55:1c:ff:c3:b6:9c:
91:89:07:ef:3d:a6:3e:84:03:15:eb:1c:6c:68:10:93:95:86:
cc:c0:b4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org