Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/cb20928f-1f0b-36e5-b292-a77d972a8048.roa
File: cb20928f-1f0b-36e5-b292-a77d972a8048.roa (raw, json)
Hash identifier: /obmivqpGniaXij0cz8EzwjMZguU1tdsGCXiM2t0oTY=
Subject key identifier: 0E:EB:2A:B8:5F:0F:07:C9:26:2B:53:C5:43:F6:DB:6D:8A:44:14:CA
Certificate issuer: /CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Certificate serial: 010D0C9F4328576D51CC73C042CFC17087811ED9
Authority key identifier: DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/cb20928f-1f0b-36e5-b292-a77d972a8048.roa
Signing time: Thu 27 Feb 2020 16:35:51 +0000
ROA not before: Thu 27 Feb 2020 05:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 393507
IP address blocks: 149.20.68.0/23 maxlen: 24
2620:137:6000::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:87:81:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935332e4-2b48-45ab-95bc-6d4c2916350f
Validity
Not Before: Feb 27 05:00:00 2020 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=54ea659e-1b55-4695-ad6d-cf2cae536b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:bc:ce:d6:7e:72:c2:1b:9d:a1:10:5e:20:
1f:f6:1e:82:db:1b:83:f7:69:81:df:eb:7e:68:0b:
a0:0a:45:0c:3b:c5:26:6f:78:b6:f8:ec:5e:3c:90:
f2:4b:18:24:49:14:31:d6:60:6d:37:cd:75:90:9f:
97:e6:2a:6b:d5:22:0f:39:5e:bc:97:b9:02:00:91:
41:26:6e:88:f7:80:18:3a:af:b4:4c:d9:8d:ab:41:
41:15:86:00:c3:37:3f:09:c2:90:6b:0d:e5:fb:19:
c2:c7:c1:b2:63:da:cf:9e:92:09:4c:fe:39:fd:f9:
74:2f:6c:31:e0:34:b0:7a:0d:fe:2d:79:ad:5b:bc:
96:56:45:6b:b1:0d:6a:c4:9d:57:9e:1b:c0:eb:af:
2f:cb:dd:83:9b:90:d7:68:45:2d:c6:da:7d:3e:cb:
09:bb:e4:75:d1:0e:31:b0:d6:02:58:41:9d:c3:98:
7d:5c:a9:f4:1e:f3:0b:78:4b:5f:7f:0c:3c:ab:da:
b6:3e:63:a9:9c:83:d7:bd:f1:7a:cd:42:80:7d:e7:
67:1a:b4:9f:f1:0e:be:72:22:c7:bc:c9:ac:c0:87:
ee:0b:da:a7:44:8b:c7:5b:fd:be:b6:9a:01:48:38:
14:9c:7d:a8:51:c3:1b:e1:af:a2:b3:27:58:19:06:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:2A:B8:5F:0F:07:C9:26:2B:53:C5:43:F6:DB:6D:8A:44:14:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/cb20928f-1f0b-36e5-b292-a77d972a8048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f/935332e4-2b48-45ab-95bc-6d4c2916350f.crl
X509v3 Authority Key Identifier:
keyid:DF:20:11:5A:2F:2A:44:A5:5D:73:0C:2A:31:F4:C2:AF:27:F9:EA:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/935332e4-2b48-45ab-95bc-6d4c2916350f.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.68.0/23
IPv6:
2620:137:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:2b:ad:f3:bb:10:16:02:fd:ae:43:74:26:67:af:1f:fd:07:
2d:d6:8b:a5:9a:5f:14:56:dc:11:e9:2c:e8:cb:b4:9a:4e:3f:
79:08:c6:53:b0:f9:84:48:73:58:ce:51:c6:c2:59:13:7a:6f:
bc:55:44:d7:45:40:37:78:5c:37:40:83:86:74:90:a9:5e:7b:
d7:30:b3:d9:12:3a:82:f6:6c:77:92:24:df:ab:35:cb:7b:55:
dc:7b:8c:1c:00:53:08:48:a6:69:da:d7:84:5d:a9:06:8e:9d:
8b:e1:7e:cb:19:62:44:aa:43:83:f1:f5:d3:44:8e:ab:c3:ed:
54:ab:e3:c1:c9:e3:f1:82:9d:fe:44:7b:71:84:b2:85:00:59:
30:3e:36:96:3e:13:6b:ff:a2:29:b5:a9:cf:f6:36:97:52:5e:
e2:a2:1b:db:f4:98:5d:c2:97:bd:e2:9f:59:f8:16:9d:85:e3:
fc:ab:12:bb:65:77:16:81:d6:ff:47:df:06:61:ef:79:8b:15:
1c:e6:5a:34:bb:45:11:70:a0:87:92:53:d2:c5:d2:5c:e5:56:
57:ba:eb:86:9d:43:63:13:6b:b4:6e:d8:e7:2a:b6:65:1f:7f:
33:8c:54:e9:d1:51:e6:6a:b6:e2:75:9b:f8:3f:4b:66:41:0f:
62:e3:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org