Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cab27689-7701-3c8c-b644-3ce860b34137.roa
File: cab27689-7701-3c8c-b644-3ce860b34137.roa (raw, json)
Hash identifier: 3u7hdcwmPKnBUD3hYNFP+cLss1pRQC/pFYxP2aXX+bE=
Subject key identifier: 53:6C:4C:F2:30:41:53:A1:13:8E:D7:68:60:AA:BE:6C:C0:61:7B:72
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7BC9033A25E3583135F6260
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cab27689-7701-3c8c-b644-3ce860b34137.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:bc:90:33:a2:5e:35:83:13:5f:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=2c4d406d-426b-4706-822f-94449aee3e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:40:97:4f:c3:96:2a:58:06:e5:f2:c0:10:
cf:ab:ac:34:f3:ac:27:aa:55:4f:54:30:63:5d:8a:
8c:26:31:bd:c3:81:2a:3a:57:15:e4:86:40:a7:5e:
a6:1f:f8:98:de:f3:af:61:59:ea:16:50:51:7b:77:
18:6f:fe:12:7d:9f:35:5a:c3:3e:c3:d9:9b:b5:85:
7e:5d:d8:bc:75:53:de:41:05:13:95:b1:97:80:f4:
5b:d7:eb:0a:91:f1:f3:ba:00:ca:fd:b0:cd:11:95:
2f:b2:45:4d:60:3c:58:bd:c1:df:db:b4:6e:97:38:
35:ec:f8:1b:e9:fb:7b:fc:f1:94:fb:84:56:57:5a:
63:97:0a:c3:85:fe:04:91:8b:40:a4:e7:10:62:99:
1f:28:65:ab:b0:34:3a:16:0c:5d:3e:e4:c4:aa:c2:
28:2e:a5:ff:97:3d:59:48:ba:c3:53:76:e7:70:fc:
ae:27:09:fc:e3:db:a4:aa:d0:e0:48:7d:93:96:bf:
41:68:5b:30:21:7b:9a:de:24:df:2d:94:6a:8e:e7:
52:a3:75:ab:67:48:d4:63:79:5a:0d:2c:72:c2:d8:
c8:b0:ba:b8:8b:7c:7e:69:e7:b9:3d:13:6d:62:6f:
ca:86:8a:1b:b8:99:87:a7:82:bd:1a:fb:a6:1f:ed:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:4C:F2:30:41:53:A1:13:8E:D7:68:60:AA:BE:6C:C0:61:7B:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cab27689-7701-3c8c-b644-3ce860b34137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:5d:1e:66:de:52:ef:e4:b5:e1:8a:32:fc:c8:68:fa:ad:b4:
bb:ac:d4:02:d8:f0:56:6f:c3:a6:11:91:a0:aa:59:35:6e:91:
f6:de:60:d8:83:b1:9f:d5:8c:fd:68:33:35:d9:7e:a5:9c:33:
56:78:5f:66:e0:13:7f:74:71:68:28:28:10:de:79:83:1e:6f:
76:b4:2b:bd:95:b3:02:d9:46:d4:7b:9d:da:65:41:9d:1b:69:
66:b9:43:23:dc:fa:90:df:0d:3d:b5:cd:a2:e8:e0:20:db:a6:
a3:f4:36:99:ca:da:0b:0a:bb:23:48:78:b5:b8:1e:5d:5a:12:
84:1d:d6:95:51:bd:03:42:3b:19:08:43:43:68:3c:ac:61:c5:
b3:8f:b6:ba:58:03:35:5d:3b:45:7e:5d:98:ee:2f:dd:3c:93:
3e:d4:3a:d5:0b:9c:48:d9:a4:4a:b4:51:b1:40:09:d7:3f:13:
5a:35:7a:fd:44:94:0d:97:92:54:76:44:89:67:47:25:dc:d2:
fd:47:87:99:55:6e:c5:8d:cd:11:9e:6b:13:f9:f9:1a:49:c1:
d0:03:19:7f:c4:0d:23:2c:f6:d0:ff:d9:9f:e7:b9:7d:d0:26:
21:50:e8:66:03:5e:24:a5:b7:7f:16:86:f7:81:57:f7:95:ac:
9a:02:59:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:50 2023 by rpki-client on console-fra.rpki-client.org