Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa
File: 8959218d-55b8-31a2-9b18-62f722d76e17.roa (raw, json)
Hash identifier: 4h4FCaAZBnQTfzHbyQg3wCwAicOrhfpoqRotr8oB6No=
Subject key identifier: 62:52:CE:F9:D5:34:1A:8E:76:3E:85:AF:A2:7A:0D:7E:04:6F:02:BC
Certificate issuer: /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial: 010D0C9F43285843D3322EDAD7766C66A7DF8A00
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa
Signing time: Wed 08 Nov 2023 23:48:52 +0000
ROA not before: Wed 08 Nov 2023 23:48:52 +0000
ROA not after: Tue 06 Feb 2024 23:48:52 +0000
asID: 25759
IP address blocks: 2602:fa3d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:d3:32:2e:da:d7:76:6c:66:a7:df:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Validity
Not Before: Nov 8 23:48:52 2023 GMT
Not After : Feb 6 23:48:52 2024 GMT
Subject: CN=c3a51578-74e9-4e91-90f3-b711230d3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:5b:24:15:d5:38:94:75:1e:e5:1b:cb:d0:
6b:3b:f4:c5:57:c3:58:79:9b:0c:8c:52:88:6e:df:
4e:29:92:40:2c:22:9c:5c:0d:6a:c3:45:f8:cf:eb:
78:96:45:ff:96:14:b6:e3:06:b4:95:18:1b:c7:c6:
ad:6c:50:75:59:6f:f9:d8:c5:27:2e:df:2b:58:3d:
e9:67:ba:9b:37:4e:3b:5f:24:52:f8:10:25:c0:f8:
66:59:04:bb:d1:84:ad:87:56:b7:92:30:75:91:5d:
b4:b0:f2:24:4e:7e:bb:32:6d:75:06:7a:c8:0e:21:
03:79:2d:0f:4f:82:21:a0:1e:fa:dd:70:64:85:e2:
32:25:6e:1d:26:f2:ab:a7:0a:87:ce:0a:7f:0c:bb:
01:f8:bd:5b:36:7c:e1:dd:55:21:a0:50:f1:93:19:
b7:eb:ea:29:9e:69:39:2c:66:f6:2e:26:1c:6f:88:
82:ed:40:97:f2:98:44:00:36:5f:df:e8:ba:c7:a6:
dc:a3:06:b8:45:60:86:6c:b3:c6:68:f3:d1:04:52:
0a:1a:72:f6:66:73:cb:07:80:ff:e7:8f:4e:bb:15:
e0:76:95:d7:59:d7:83:9f:6d:09:80:5f:1f:4c:bb:
7e:6b:5b:52:bd:1e:2e:9a:fa:4e:d3:63:ae:d4:c7:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:52:CE:F9:D5:34:1A:8E:76:3E:85:AF:A2:7A:0D:7E:04:6F:02:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/8959218d-55b8-31a2-9b18-62f722d76e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
X509v3 Authority Key Identifier:
keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa3d::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:06:ab:03:4f:2a:90:69:5f:87:e0:41:9f:55:c6:e7:b7:d4:
8f:d5:69:61:92:14:f4:42:28:8f:bd:b5:39:8b:99:3b:e2:1f:
4c:05:a9:6d:ff:32:99:0f:6d:f3:49:c8:94:18:af:f4:0e:c2:
7f:11:2d:a5:8c:ce:cc:4f:f2:4c:30:74:80:e6:61:ef:0e:c6:
22:3b:dd:ca:f4:38:4b:6b:7e:67:1a:b4:92:c2:0c:4b:f7:fe:
df:5e:98:50:b3:62:c5:b2:a6:6e:9c:e0:66:0d:a1:65:fe:33:
61:1b:5a:0d:8d:8d:ff:b4:67:e4:c5:e7:71:05:6c:37:f2:38:
7b:85:e4:8c:90:83:52:df:f3:d0:47:2c:b1:62:85:5b:e3:d5:
b9:00:62:b3:1c:da:30:fa:fb:92:bd:4f:00:07:54:ad:39:79:
a1:68:4c:44:69:55:d2:4e:b9:c2:eb:11:17:f5:af:6c:0b:b8:
8b:c4:29:5e:f1:d3:36:19:4e:6e:12:1d:20:71:c0:a0:6f:3a:
4f:2e:09:c5:ff:8f:eb:8e:91:fb:51:a9:bf:fd:8f:80:70:c4:
e4:f1:c3:bb:89:52:31:65:19:cc:88:a2:79:ed:55:a2:0f:fc:
7c:34:02:9f:53:68:29:00:a3:c6:5a:ad:34:8d:72:66:aa:18:
af:21:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:08 2024 by rpki-client on console.sobornost.net