Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed71e056-ff81-37d9-8c32-cef7b900cfee.roa
File: ed71e056-ff81-37d9-8c32-cef7b900cfee.roa (raw, json)
Hash identifier: 0d4+FIAJL7HvM0Y3nIIYWTwXueucLgAvNZTwyfT0GOo=
Subject key identifier: A2:72:18:82:60:49:CB:41:13:07:F1:A8:8A:8B:E6:55:34:A3:3E:CB
Certificate issuer: /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial: 010D0C9F432858391147F4C35F534ED7CAF7E294
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed71e056-ff81-37d9-8c32-cef7b900cfee.roa
Signing time: Wed 24 Feb 2021 05:00:00 +0000
ROA not before: Wed 24 Feb 2021 05:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 16410
IP address blocks: 205.157.249.0/24 maxlen: 24
205.157.245.0/24 maxlen: 24
205.157.247.0/24 maxlen: 24
205.157.240.0/24 maxlen: 24
205.157.193.0/24 maxlen: 24
205.157.203.0/24 maxlen: 24
205.157.204.0/24 maxlen: 24
205.157.242.0/24 maxlen: 24
205.157.246.0/24 maxlen: 24
205.157.248.0/24 maxlen: 24
205.157.250.0/24 maxlen: 24
205.157.251.0/24 maxlen: 24
205.157.254.0/24 maxlen: 24
205.157.255.0/24 maxlen: 24
206.180.0.0/23 maxlen: 23
206.180.4.0/24 maxlen: 24
206.180.5.0/24 maxlen: 24
206.180.6.0/24 maxlen: 24
206.180.7.0/24 maxlen: 24
206.180.8.0/24 maxlen: 24
206.180.12.0/22 maxlen: 22
206.180.25.0/24 maxlen: 24
206.180.27.0/24 maxlen: 24
206.180.28.0/24 maxlen: 24
206.180.36.0/24 maxlen: 24
206.180.37.0/24 maxlen: 24
206.180.38.0/24 maxlen: 24
206.180.39.0/24 maxlen: 24
206.180.52.0/24 maxlen: 24
206.180.53.0/24 maxlen: 24
206.180.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:39:11:47:f4:c3:5f:53:4e:d7:ca:f7:e2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Validity
Not Before: Feb 24 05:00:00 2021 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=ee942dd6-9c98-4658-bcff-88be33ce9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:50:0d:bf:b4:d3:ab:29:7e:84:b5:73:17:
28:75:d8:dc:66:b8:3d:75:45:09:3f:3f:2a:39:ea:
59:4c:ae:50:d9:03:de:54:cb:47:12:8e:98:c7:b5:
e8:a5:5a:ba:21:67:79:40:f8:8b:79:07:75:04:51:
81:27:1f:48:a8:8b:c7:92:4f:e2:8c:e6:c9:b6:be:
bf:6d:cf:4a:63:33:46:c4:35:72:3e:60:e8:0d:0b:
69:da:9f:23:6c:4e:39:50:15:6b:2a:b7:89:e5:80:
db:70:25:e2:21:62:66:f8:63:26:90:a9:3e:6c:58:
d2:10:cc:d9:9c:39:25:bd:e8:84:cb:3a:01:10:35:
38:6a:c0:9a:18:0a:1a:0f:4a:d2:57:e5:ef:4c:e0:
75:77:e6:88:bb:dc:39:b4:f7:d6:d3:aa:d1:12:dc:
42:3f:52:f6:3f:b8:a3:37:f1:3e:95:55:d6:dd:0c:
1a:f9:71:79:18:9b:8e:43:b5:13:4b:2e:84:9e:cc:
5f:60:6d:5a:7c:7b:c5:65:fe:c6:dc:ef:5a:89:f8:
49:1e:d5:66:83:c7:8f:f3:da:3b:3a:49:ac:fa:81:
eb:ad:d6:19:7a:2a:ae:e5:c6:53:f1:f4:a2:83:0d:
cd:9d:fe:bb:6f:5a:9f:67:26:73:1b:b5:37:0a:03:
61:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:18:82:60:49:CB:41:13:07:F1:A8:8A:8B:E6:55:34:A3:3E:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/ed71e056-ff81-37d9-8c32-cef7b900cfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
X509v3 Authority Key Identifier:
keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.157.193.0/24
205.157.203.0-205.157.204.255
205.157.240.0/24
205.157.242.0/24
205.157.245.0-205.157.251.255
205.157.254.0/23
206.180.0.0/23
206.180.4.0-206.180.8.255
206.180.12.0/22
206.180.25.0/24
206.180.27.0-206.180.28.255
206.180.36.0/22
206.180.52.0-206.180.54.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:a6:1d:c8:3e:97:7a:b1:7c:12:ce:a0:a2:5d:0e:84:8a:3c:
96:3c:3c:b6:a9:b7:8e:50:74:d6:7e:20:5f:9b:02:95:07:36:
86:49:2e:76:07:7d:cd:b8:7c:bc:2a:82:7d:4b:c5:0b:7e:20:
5b:58:2f:69:2e:5d:46:fa:b0:7c:a6:e8:dd:08:40:54:20:6e:
2b:64:b9:31:d0:dd:1b:23:a4:f0:ea:5f:8c:8d:2e:da:e9:42:
d0:d8:b0:b9:70:a6:5b:26:f3:61:16:46:b3:b7:3f:24:16:bb:
c0:5e:20:5a:83:36:ac:cf:e2:8a:87:d0:ee:e4:ef:2e:24:e3:
c5:32:17:66:15:5e:71:25:d4:4c:fa:ea:34:11:43:ac:bf:c3:
a6:ef:2f:1b:a5:e0:9c:3f:e2:7f:0a:a1:d2:9a:df:46:d5:db:
d4:57:44:fb:78:85:62:6a:8b:18:8f:52:4e:3a:9d:8f:06:8d:
8f:ed:4a:2e:73:50:51:d9:e1:d2:08:f4:1c:09:d5:13:48:50:
62:ae:4d:6d:e8:f8:0a:e1:ab:61:2b:a9:d6:46:d7:66:db:93:
d8:3b:d3:0b:1a:78:8f:60:06:25:c5:5d:8f:d0:1c:08:b7:56:
03:d9:6d:54:3b:1a:eb:b4:53:2d:c4:e7:aa:13:1c:04:c5:3a:
59:5b:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:53 2023 by rpki-client on console-fra.rpki-client.org