Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c02ef8c7-c735-3630-b401-3075a01ee2bf.roa
File: c02ef8c7-c735-3630-b401-3075a01ee2bf.roa (raw, json)
Hash identifier: mFwPO/f3K4cG10Km/C20BuAfiLxqJVykpLGf443isKc=
Subject key identifier: D2:08:82:51:8C:37:BF:5E:18:AF:50:EE:2A:E2:1A:EA:1D:64:D0:4E
Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial: 010D0C9F4328576D51CC73C042CFC17422435143
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c02ef8c7-c735-3630-b401-3075a01ee2bf.roa
Signing time: Wed 22 Apr 2020 04:00:00 +0000
ROA not before: Wed 22 Apr 2020 04:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 32128
IP address blocks: 158.106.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:22:43:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Validity
Not Before: Apr 22 04:00:00 2020 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=555c0a5c-9c47-429d-9cf1-38925005c2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:2c:49:b5:cf:2a:aa:ec:72:c9:85:36:f4:
71:40:2b:45:04:cf:c5:3b:c5:35:37:a8:f2:95:22:
f6:d0:a1:1c:bf:35:05:84:d7:a3:ca:fe:c2:74:bc:
2e:bf:f6:3e:98:4e:fb:43:b3:fb:21:06:f3:95:ab:
5f:38:b2:43:88:d2:d3:f8:65:93:6d:af:24:92:72:
1e:a0:b9:86:59:52:14:26:74:89:8a:48:14:c1:ab:
1c:27:a4:be:20:13:63:df:76:bf:28:7a:60:ce:33:
1b:12:ec:13:2e:76:eb:8d:e2:28:71:ca:2d:be:63:
a5:e6:71:21:b4:70:9a:ee:64:fc:37:d3:d7:fc:43:
b5:87:a3:d9:44:36:c2:15:08:02:0e:1e:83:95:b1:
81:7c:a3:f8:fd:5f:6d:39:ff:39:a3:fc:dd:32:95:
21:e7:9e:8c:18:66:7a:3f:aa:5c:94:29:71:7a:3c:
1d:f5:a8:43:d4:c0:29:a6:c6:dc:c4:9c:09:b1:01:
09:8c:9d:d1:50:85:fd:b0:2c:45:aa:7a:5f:8c:5c:
6d:f3:40:72:9e:e0:bd:4f:f5:19:77:d3:0d:d0:3a:
dd:1c:4c:ed:04:65:aa:48:c8:c0:08:cf:27:4c:72:
58:69:2d:85:29:2d:a4:2d:d6:fd:a2:19:de:48:3a:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:82:51:8C:37:BF:5E:18:AF:50:EE:2A:E2:1A:EA:1D:64:D0:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/c02ef8c7-c735-3630-b401-3075a01ee2bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
X509v3 Authority Key Identifier:
keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.106.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:30:14:9b:b4:b1:67:f0:db:5b:d7:e0:37:94:5d:2d:ff:b8:
51:6e:0b:7b:3f:ea:7e:62:8f:e8:b2:5d:de:5c:3b:90:70:0c:
88:c0:ef:82:a8:e7:29:2e:f7:8f:e1:b4:be:3b:d0:93:05:68:
43:39:65:56:07:63:fb:b0:ef:8f:94:57:6a:97:a9:91:e0:88:
5f:c5:9e:61:cc:ee:a6:4b:d2:fd:42:2c:5b:58:12:7a:c3:85:
23:7f:93:e3:fd:89:5f:9c:8d:4a:17:19:08:9e:08:46:58:84:
b3:09:2b:69:c0:b2:8b:dd:ad:0d:79:4e:2f:d3:dd:65:3e:fc:
f5:b5:e3:49:f8:7d:ca:dd:22:0d:ce:bf:65:6b:1c:df:38:0d:
6c:11:67:f5:1c:a5:7d:a9:32:12:d8:6a:d9:ca:ff:1b:b6:ad:
56:b3:4a:25:b8:9d:5c:ac:74:62:c9:8c:27:0c:54:3f:46:c5:
ef:5e:9d:6c:c8:be:5f:5a:2d:64:d1:56:5e:7f:1e:7b:2d:c9:
fd:7d:5a:0d:70:98:8d:a7:0c:81:36:08:06:90:d6:b9:6f:c0:
33:96:67:e9:a3:7d:7f:ee:b1:7d:e6:d4:21:64:27:71:ea:9c:
42:48:00:d8:b6:e5:d9:53:22:4e:54:6c:ba:19:2a:d6:3d:cd:
89:8f:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:51 2023 by rpki-client on console-fra.rpki-client.org