Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6bea01fb-b84c-302c-a899-77e0158560b4.roa
File: 6bea01fb-b84c-302c-a899-77e0158560b4.roa (raw, json)
Hash identifier: 7+MClGjWi1C/nTgChtReEdYikNqpIeFTyh9+pSehUUE=
Subject key identifier: 1A:CB:4E:20:01:71:77:07:E2:89:BE:81:81:8D:B5:91:A2:F6:3D:54
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F43285841E416775FE3BFDC6D86EBC380
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6bea01fb-b84c-302c-a899-77e0158560b4.roa
Signing time: Mon 15 May 2023 15:27:54 +0000
ROA not before: Mon 15 May 2023 15:27:54 +0000
ROA not after: Sun 13 Aug 2023 15:27:54 +0000
asID: 206092
IP address blocks: 173.239.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:e4:16:77:5f:e3:bf:dc:6d:86:eb:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: May 15 15:27:54 2023 GMT
Not After : Aug 13 15:27:54 2023 GMT
Subject: CN=61cbae18-86ef-4683-bf88-4ca5b60edb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:73:06:cf:89:df:20:c4:d8:8c:bd:9b:c7:
1d:b9:5c:df:9a:6a:e9:f7:67:50:a0:63:38:8b:2e:
32:89:92:ee:ae:75:e7:69:8c:df:1d:d0:7d:47:c7:
74:63:e2:40:c9:85:68:1d:0d:2c:f4:d5:88:0d:7b:
61:89:6f:55:53:39:8b:40:3f:f2:c7:97:d3:f8:8e:
62:f8:ae:5d:a8:b4:82:22:92:b0:42:7c:55:31:3c:
21:1a:37:8c:e2:b6:75:55:ca:11:bf:dd:2a:9f:5b:
66:c3:ed:aa:f3:f0:48:bf:b5:0e:62:31:eb:a2:16:
13:9a:b3:b7:bd:82:69:b8:8e:21:da:cb:cb:8f:10:
05:9d:96:cf:8a:ef:bd:d7:fd:60:93:2f:60:72:30:
2f:b4:c8:57:3b:b8:a2:e2:0c:3c:fa:ad:9c:c0:83:
6e:26:f5:ab:c6:16:f4:ae:b1:87:51:29:ae:4c:74:
20:96:cf:e1:c7:4e:8d:c1:7f:89:89:60:04:fb:72:
79:a7:ae:2b:1e:b0:43:69:db:25:c2:47:6b:0f:ba:
d2:50:c2:0c:33:69:ce:36:8f:cd:aa:40:4a:55:ae:
48:a8:a3:c3:11:66:78:87:fc:c7:56:d0:c5:f4:c5:
1a:38:de:41:67:ef:65:15:0d:d0:de:15:7e:c0:cb:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CB:4E:20:01:71:77:07:E2:89:BE:81:81:8D:B5:91:A2:F6:3D:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/6bea01fb-b84c-302c-a899-77e0158560b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:07:ad:fb:ea:2f:6b:81:dc:43:68:66:87:e4:a1:95:45:1b:
51:70:1d:44:d6:5e:0e:d4:fe:a4:02:9b:99:9a:5b:ea:a7:5c:
93:75:82:0a:6f:fa:e3:b3:d0:31:63:d6:db:a2:24:e9:f8:19:
1c:00:e3:87:0d:fd:8d:b4:cf:9a:b4:6d:51:bb:b7:b3:7c:c1:
c9:37:5a:15:ca:f5:57:fe:bc:5b:f1:1b:44:e1:43:57:0c:48:
e2:f2:20:39:c9:ee:c2:ef:ec:da:50:a2:3e:4e:9b:e6:c6:84:
bc:51:fc:6f:b7:f0:e6:be:42:aa:3f:1c:43:1c:5b:00:45:28:
13:b2:61:3e:d8:e9:a7:f3:0b:17:62:90:fa:1f:c3:2b:c7:ce:
7d:e8:65:48:e8:cf:c4:40:1f:ae:01:33:45:7f:3a:66:e3:d9:
17:fb:1a:56:34:85:09:c0:00:24:e0:e5:f7:6c:c4:58:90:1f:
c8:8a:77:88:6d:79:e9:f8:e2:ad:57:c8:d8:83:c0:be:90:1e:
c2:e3:53:69:ca:50:71:a5:de:d7:dd:27:9b:4d:72:e7:ae:e9:
0f:6d:ca:ff:ea:da:99:e2:4c:5c:62:6e:90:40:20:6f:9a:7a:
66:ea:cc:f1:7a:5a:b6:9e:2d:7d:26:64:cf:f3:59:b6:da:51:
c0:16:cf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:44 2023 by rpki-client on console.sobornost.net