Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/e39e64ba-9804-31ca-ba01-cd9c223cbfee.roa
File: e39e64ba-9804-31ca-ba01-cd9c223cbfee.roa (raw, json)
Hash identifier: mRIbp/UrVH+aZOFqpyvGoA7p+u+CTG8UwdrehoFWjss=
Subject key identifier: 93:77:AB:D7:11:0C:91:EF:EF:81:18:25:05:7B:2B:A2:A5:A0:DC:DA
Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial: 010D0C9F43285838B2D1EE7FDA741C9C161DA240
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/e39e64ba-9804-31ca-ba01-cd9c223cbfee.roa
Signing time: Wed 29 May 2019 04:00:00 +0000
ROA not before: Wed 29 May 2019 04:00:00 +0000
ROA not after: Thu 27 Apr 2023 04:00:00 +0000
asID: 21659
IP address blocks: 142.202.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:38:b2:d1:ee:7f:da:74:1c:9c:16:1d:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Validity
Not Before: May 29 04:00:00 2019 GMT
Not After : Apr 27 04:00:00 2023 GMT
Subject: CN=d90ef908-c334-4b71-8239-84facc2d17f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:26:9f:4d:32:8e:46:7a:4c:e6:75:5b:2c:
d1:a4:d1:bc:b7:1b:a1:8a:d8:3e:66:06:3f:6b:85:
64:c3:06:5b:5d:8b:fb:d8:ed:d5:52:2a:7e:6a:60:
94:0a:c9:e3:20:95:49:42:f7:31:54:91:4b:b5:be:
be:83:ea:53:9f:b5:11:12:94:e0:81:79:1d:0a:22:
4d:ef:a8:58:df:32:72:2f:46:61:7a:b1:a9:e3:ab:
67:17:17:7a:73:bd:bf:0a:45:65:a9:6d:a4:5d:61:
2d:2e:c3:60:32:59:f7:4e:4a:80:5e:51:e0:27:eb:
e5:ea:d5:54:f9:da:41:bb:4a:27:1f:7a:d1:5f:f0:
fa:1d:c0:dd:38:96:1c:52:17:81:1d:3c:87:3c:cf:
e7:8b:a9:4c:0f:80:19:3f:00:a3:14:e5:e7:6c:30:
72:ab:45:cd:d2:2e:e5:24:82:6e:9b:7e:39:61:56:
6f:86:85:59:f4:a4:07:3d:3e:7a:67:1d:ad:e2:e8:
4b:f3:96:9d:10:a3:cb:c5:65:09:17:37:b3:e5:3c:
b0:9b:a5:4a:51:c7:2f:fa:74:7d:6e:44:ad:d6:ef:
37:e1:ff:a8:77:a2:0d:51:e7:cc:d5:41:5e:0f:2a:
c7:b3:6b:e8:a6:76:f2:4b:16:12:a4:4d:e3:18:7e:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:77:AB:D7:11:0C:91:EF:EF:81:18:25:05:7B:2B:A2:A5:A0:DC:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/e39e64ba-9804-31ca-ba01-cd9c223cbfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
X509v3 Authority Key Identifier:
keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:ae:f5:06:d0:8a:99:5b:d3:d2:b4:c0:4a:70:c8:d1:f6:51:
50:01:ae:46:27:bd:a7:66:88:c6:a0:52:73:e7:43:6d:df:af:
91:36:44:1f:91:de:fd:10:3b:7c:48:a2:da:e2:d4:16:e6:16:
66:08:63:7c:fa:3b:83:dc:49:bd:8f:3e:c3:c2:b4:03:78:a5:
15:e3:2a:10:44:b6:dc:19:3a:88:29:38:b0:1d:ad:bc:ee:e5:
2a:1a:af:d7:68:f9:37:2e:dc:c5:4a:5a:9f:d8:f7:ab:7e:5e:
3c:3e:33:43:09:62:79:9c:4a:69:8f:a2:a7:54:e4:78:d9:0a:
60:c2:4d:4e:ba:7b:9a:33:d5:55:15:83:27:af:8e:3b:52:fb:
ee:69:e8:b9:05:d3:1b:40:b3:00:93:7a:7a:b9:06:1e:a3:08:
cb:3a:b9:fa:ca:89:c0:13:11:21:d3:0f:4f:ff:b0:6a:de:a9:
58:90:7b:67:a1:25:df:9e:d2:97:1e:4e:21:26:6a:b5:73:1a:
75:34:86:1e:4c:39:d7:02:e7:94:33:3e:86:22:b9:16:df:e8:
1e:03:d2:52:63:72:be:ea:8b:61:17:00:84:ff:e8:32:9e:43:
72:0a:72:06:85:c8:6a:0d:ba:c0:37:f4:e7:3c:06:6f:ad:1a:
6e:22:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:56 2024 by rpki-client on console-ams.rpki-client.org