Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/29283890-2b9b-3c1c-a022-04db899fa689.roa
File: 29283890-2b9b-3c1c-a022-04db899fa689.roa (raw, json)
Hash identifier: rzsSgeGQ52N1pmJum7olUWPmPKfwJRNffbx+DUZXvi4=
Subject key identifier: 2E:E9:45:C9:A5:91:B4:AF:79:FF:E1:56:77:A2:A9:0E:76:E5:45:E4
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F43285843AD892F8B7122B7805F100200
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/29283890-2b9b-3c1c-a022-04db899fa689.roa
Signing time: Thu 26 Oct 2023 12:03:27 +0000
ROA not before: Thu 26 Oct 2023 12:03:27 +0000
ROA not after: Wed 24 Jan 2024 13:03:27 +0000
asID: 9009
IP address blocks: 172.111.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:ad:89:2f:8b:71:22:b7:80:5f:10:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Oct 26 12:03:27 2023 GMT
Not After : Jan 24 13:03:27 2024 GMT
Subject: CN=fca313d7-2584-4463-b713-15737002a04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:5a:ca:71:49:5f:03:2e:6a:61:42:e3:32:
4e:e8:64:17:f5:2f:ea:65:9d:16:eb:d0:e2:65:62:
49:46:7a:8b:bf:d9:e4:3e:79:1a:73:77:4f:32:b1:
58:22:d9:46:29:5b:ee:51:59:aa:39:6b:37:56:56:
7b:a8:77:6c:70:44:32:82:1e:32:81:3a:fe:5e:62:
7d:2c:d1:c4:93:2c:cd:66:96:ab:c9:61:1d:20:66:
58:82:20:17:fb:17:de:22:c3:21:6f:c9:38:94:65:
10:91:68:c6:b3:e4:7f:45:ff:47:f2:55:db:49:a9:
a7:f8:ea:1e:f4:d2:34:ff:fb:e8:a8:d2:b7:bd:9b:
b7:d1:b1:72:df:60:42:9e:86:b7:b8:1f:b1:ce:54:
36:ff:75:c7:37:99:5e:b6:54:8f:87:dc:fc:e1:75:
57:55:30:1c:a4:cd:36:d9:9b:a1:7e:2e:d4:41:16:
aa:03:5a:1e:26:88:f3:c0:fe:48:ad:97:8f:16:67:
be:d2:76:53:b0:06:19:97:cb:0e:10:8d:78:f6:b1:
ca:37:8d:25:34:7e:12:15:26:e0:62:7c:af:ed:cd:
6e:b8:c2:34:55:46:d7:c6:32:5c:b6:4b:8f:0d:0d:
9a:3e:61:a9:99:95:03:c5:1f:c2:23:88:bb:0b:36:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:45:C9:A5:91:B4:AF:79:FF:E1:56:77:A2:A9:0E:76:E5:45:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/29283890-2b9b-3c1c-a022-04db899fa689.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2d:83:de:dc:d1:51:f4:80:e4:b2:d2:54:6b:64:93:ba:b4:
dc:3a:8e:73:2a:df:97:f3:9b:87:5d:1c:c5:a7:17:32:08:75:
a9:9f:8d:19:f1:3b:53:a5:5a:d1:7b:18:da:f3:a6:64:b0:d9:
57:a4:03:bb:d9:91:c4:00:76:f6:02:c0:32:13:51:db:4a:06:
17:35:7e:14:5a:10:6e:a7:47:b1:1f:3b:b6:91:09:37:ab:25:
f8:50:91:96:17:a3:d5:f3:11:d1:66:32:6c:e8:20:54:c7:f1:
16:ad:5b:8f:1a:b0:48:20:5d:1b:32:00:28:9d:ea:a1:16:57:
f6:a2:e5:35:57:4d:15:b6:62:d3:2d:7e:89:92:74:65:c5:f5:
f6:6f:32:5d:23:4f:93:9e:eb:43:43:11:ae:37:7f:03:13:69:
c9:50:5b:6a:31:02:1c:a9:d7:af:24:1b:e1:b2:94:ad:a2:f1:
eb:d0:11:8b:44:06:b7:a8:55:56:cb:c4:14:43:93:a1:8d:40:
82:ad:7c:13:fe:f7:25:7c:9f:04:3c:3b:dd:15:4b:24:76:dc:
89:2a:35:a5:43:97:3c:d9:ba:49:42:a2:9b:a7:d1:2b:a7:3d:
56:75:be:7f:7b:42:8d:9c:e7:80:e2:ec:aa:75:a8:86:b4:70:
e5:80:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net