Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3174cf18-41b3-3cb1-b5f8-9312f16d9856.roa
File: 3174cf18-41b3-3cb1-b5f8-9312f16d9856.roa (raw, json)
Hash identifier: O6RPnEYFkTK6KPKgcL/ErLAGcxpzuadt7cs8FKlMePE=
Subject key identifier: 2F:30:9B:17:D4:6D:F2:CC:E3:8B:E8:03:53:23:44:DD:CB:DB:F3:5F
Certificate issuer: /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial: 010D0C9F43285841E446B40043CFE2B1774A1A98
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3174cf18-41b3-3cb1-b5f8-9312f16d9856.roa
Signing time: Mon 15 May 2023 17:04:52 +0000
ROA not before: Mon 15 May 2023 17:04:52 +0000
ROA not after: Thu 03 Aug 2023 08:11:40 +0000
asID: 1239
IP address blocks: 45.59.118.0/24 maxlen: 24
66.23.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:46:b4:00:43:cf:e2:b1:77:4a:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Validity
Not Before: May 15 17:04:52 2023 GMT
Not After : Aug 3 08:11:40 2023 GMT
Subject: CN=6fae5765-99d3-4ff7-b6a5-2c36c59ace3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:0a:28:72:5a:31:a9:80:d1:b6:c4:c0:c1:
2f:20:9a:50:d0:c5:a8:72:ab:a1:78:e1:bf:5f:68:
b7:5a:b7:64:ba:d3:b8:59:e6:02:0c:5c:22:20:42:
f8:fe:c7:1a:bc:dc:b3:97:52:b0:7f:1f:1b:e2:51:
ba:4a:30:58:67:49:5e:e7:b4:3b:96:da:6b:44:e9:
51:aa:14:7c:8c:b1:76:b0:eb:5d:d2:27:8b:c7:1f:
9c:2f:fe:14:f6:04:9e:dd:b4:1b:a0:55:3d:46:b7:
68:51:e5:6b:14:f8:cf:cc:86:21:10:21:03:08:bb:
a1:6f:f2:1b:94:91:e1:38:91:c5:c8:6e:47:8d:8c:
0b:52:8a:26:57:f8:47:58:52:dc:24:df:e8:9e:a7:
45:b4:e2:6e:57:a9:48:91:31:5b:e1:71:01:4b:da:
9f:dd:28:08:14:e0:a2:fd:2c:27:fc:5f:e0:4c:d6:
8e:fb:3d:09:4c:dd:ec:69:99:96:7b:81:51:3f:1c:
83:b1:ad:ec:b2:90:8e:c0:a9:8a:94:41:d1:68:0f:
04:8e:11:42:fe:4c:76:26:0d:1b:66:66:69:9e:82:
c8:49:02:77:40:96:8d:dd:7a:e9:37:7e:4c:f0:b7:
77:fb:46:3e:28:22:30:e6:d4:29:a8:e0:51:97:45:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:30:9B:17:D4:6D:F2:CC:E3:8B:E8:03:53:23:44:DD:CB:DB:F3:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/3174cf18-41b3-3cb1-b5f8-9312f16d9856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
X509v3 Authority Key Identifier:
keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
sbgp-ipAddrBlock: critical
IPv4:
45.59.118.0/24
66.23.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:d8:5d:c6:47:8f:0c:0f:83:3a:5a:3d:05:7e:02:a9:e3:c5:
13:84:6a:b6:e4:bf:6b:26:12:c8:99:5b:d5:5a:1e:17:41:75:
02:9c:11:05:a0:fc:25:be:e6:df:81:11:84:e4:11:c3:2c:38:
2a:68:23:30:59:3a:60:99:0f:15:e0:e3:c5:eb:e2:29:1d:90:
ae:43:11:30:9a:c7:66:4b:df:f1:a1:72:83:99:bb:f3:ff:02:
4b:0b:a2:a0:ae:cd:ea:8f:16:3b:3a:f7:22:df:32:05:b4:d5:
06:5a:e6:33:66:fd:83:21:c2:53:b2:34:c6:63:7d:41:2d:71:
10:2f:35:d9:d6:c3:8a:a8:dc:09:36:54:12:77:94:61:76:df:
6b:c1:eb:e4:e2:e0:94:24:92:dc:54:ac:ab:9c:95:b8:a8:11:
15:53:52:b7:cb:9c:b8:f0:72:8d:4b:ff:cc:1c:10:20:a2:eb:
3b:f4:ce:4d:53:5f:80:9c:e7:34:18:f3:92:b4:6c:7d:a5:43:
31:0d:b5:b9:b0:29:91:49:83:fc:69:85:25:3f:f7:fc:af:50:
a9:4f:cc:bc:0e:a9:3d:c6:82:2b:8d:aa:71:0e:16:d3:19:a7:
6c:bc:a2:76:26:7d:5e:a5:7f:f7:01:8b:b9:6c:49:5d:f8:95:
5e:96:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org