Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/8bbf70d2-5def-368d-aa6e-f46bb49c0cff.roa
File: 8bbf70d2-5def-368d-aa6e-f46bb49c0cff.roa (raw, json)
Hash identifier: cp+vexxs3mteBrESvmKiOXJb9I0iv5KGY3S7fnSPfns=
Subject key identifier: 7A:B5:58:4A:24:B9:92:F6:D3:77:46:D5:F1:8F:56:FE:B2:2C:B3:3E
Certificate issuer: /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial: 010D0C9F43285843DFFFA4CA0997EA15066943C0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/8bbf70d2-5def-368d-aa6e-f46bb49c0cff.roa
Signing time: Mon 13 Nov 2023 13:52:33 +0000
ROA not before: Mon 13 Nov 2023 13:52:33 +0000
ROA not after: Sun 11 Feb 2024 13:52:33 +0000
asID: 211138
IP address blocks: 208.67.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:df:ff:a4:ca:09:97:ea:15:06:69:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Validity
Not Before: Nov 13 13:52:33 2023 GMT
Not After : Feb 11 13:52:33 2024 GMT
Subject: CN=a07dcfd0-1020-4a77-976e-490420bf899f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c6:f4:5f:c4:72:a9:89:34:74:da:6a:bf:0f:
36:9f:bc:bb:cd:8a:82:bd:51:f2:20:b8:55:6e:82:
be:1d:d3:5c:bf:e2:6c:a0:34:6e:28:58:74:66:37:
d7:6d:ff:1c:5b:08:a8:96:ee:ed:b1:3f:c2:7e:ef:
dd:fe:73:75:76:10:c4:60:c2:51:d5:fd:4e:e5:dc:
c0:c1:48:2b:87:1a:ca:20:fb:d7:ca:fd:97:bb:61:
3d:82:ff:b1:4c:72:2c:ad:6f:a4:8d:dd:e7:9b:06:
21:4f:b2:e1:34:6a:1e:2f:10:a3:8b:4d:3e:d7:58:
28:19:61:67:05:fc:fd:89:c2:9d:33:03:3e:f3:b5:
01:fb:21:15:04:f6:cf:5e:a3:73:b4:08:a6:6f:01:
56:32:3f:0f:c1:b4:79:65:a0:27:44:36:c5:1c:d0:
c5:8d:8d:c1:28:26:2e:03:fe:89:65:dc:cc:7f:74:
05:9e:ee:c7:8e:60:63:e4:69:61:16:70:8e:f9:0a:
da:5f:49:46:54:c2:f1:23:a8:e4:6b:33:c9:9f:a6:
53:94:fb:85:92:46:64:cd:77:b5:ae:f2:b5:08:e6:
3b:7f:9f:1b:f6:cc:69:94:30:93:c6:95:72:f4:5f:
dd:c0:c5:11:18:31:1f:09:83:f2:dd:a2:40:b5:87:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B5:58:4A:24:B9:92:F6:D3:77:46:D5:F1:8F:56:FE:B2:2C:B3:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/8bbf70d2-5def-368d-aa6e-f46bb49c0cff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
X509v3 Authority Key Identifier:
keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
sbgp-ipAddrBlock: critical
IPv4:
208.67.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cd:35:8c:93:1b:cf:48:fa:d0:30:2f:be:a0:ff:23:4e:24:
37:4c:a5:77:f6:46:1f:d9:d6:e2:58:f4:9d:50:0f:46:a8:f3:
b0:74:fb:94:97:f6:3a:2c:a9:6b:4d:d1:ad:34:4a:62:2e:97:
b1:61:3d:6c:5e:e8:1c:bc:5b:be:dc:10:2f:4f:24:8e:4f:24:
b5:bc:8a:ac:03:e8:db:52:68:6c:4e:77:ef:f1:8c:1c:55:5c:
d8:87:34:b0:ba:41:25:fe:a6:d1:5b:80:60:67:41:77:27:d5:
04:d8:97:9d:25:a9:dd:f3:9c:77:6d:b7:6f:e5:84:98:7b:ca:
bf:6a:9b:a4:80:5f:67:99:0a:a8:cc:39:c0:c6:c4:87:cb:18:
76:30:9f:bf:64:82:cf:0b:cf:59:4f:b3:da:5d:cf:1f:14:ca:
8a:c8:5d:33:fb:ea:0d:4a:b4:f8:ae:56:ab:11:fb:06:34:5d:
a6:37:a7:56:ef:39:47:35:8b:62:13:c8:5e:30:2f:d5:19:1e:
e0:29:33:87:36:fd:d0:79:3b:8b:3b:86:7c:92:5f:24:0a:d8:
3b:6b:e1:98:c8:ce:6c:aa:cc:eb:ad:ae:a8:46:0f:a8:3a:bc:
db:9e:e9:e3:a5:53:85:b5:fd:75:ae:64:74:1e:5b:f4:5f:d4:
bb:72:d6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:08 2024 by rpki-client on console.sobornost.net