Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3ddd58f8-bb01-3244-859e-7db9a58ecb2c.roa
File: 3ddd58f8-bb01-3244-859e-7db9a58ecb2c.roa (raw, json)
Hash identifier: Us7kgMn7clRku2+rviDQyeNNxlLncEPPOLHmow58uJg=
Subject key identifier: 7E:9F:EF:AA:BA:DD:1B:5B:EE:20:C9:D8:62:8C:BE:D3:27:5A:3E:B1
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F43285840B22C4381849E5D891BD20740
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3ddd58f8-bb01-3244-859e-7db9a58ecb2c.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Sun 24 Dec 2023 05:00:00 +0000
asID: 200182
IP address blocks: 74.119.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b2:2c:43:81:84:9e:5d:89:1b:d2:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Dec 24 05:00:00 2023 GMT
Subject: CN=f096a444-4ec3-4ecd-b098-0f174a1bf8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:1a:77:e9:dd:ec:c4:4a:f1:25:f0:77:09:
dd:d8:b2:ff:13:b7:7d:b9:e8:cb:9a:14:8e:31:8c:
eb:81:d0:e0:ae:af:e9:6c:cf:75:9e:d3:9e:63:59:
4d:37:cd:46:9d:9e:90:be:cc:27:09:02:e9:e3:5b:
b0:c3:cd:28:78:ba:6e:52:30:2d:d8:4e:f6:36:55:
75:43:e0:9f:30:d0:37:97:bc:a0:53:46:07:e0:a9:
af:3f:77:1f:74:dc:e5:62:c8:7f:e6:5a:81:b0:a9:
ab:88:08:04:53:3f:59:6f:a3:29:07:49:c7:cf:7a:
34:bd:d6:ec:6a:35:a3:db:18:ad:d2:07:74:1a:1e:
a6:f1:6c:37:47:c9:5f:d9:57:6b:4b:99:2e:71:c9:
50:3d:98:18:7a:ca:3f:29:10:82:95:df:b2:a5:93:
8c:07:98:6e:f1:2b:ee:0c:f5:7b:36:e1:bc:9f:a6:
c8:f3:47:8e:0b:db:e4:e6:77:e9:7f:c7:e0:f8:e5:
3b:7f:59:91:e0:58:d3:78:88:2b:c8:83:18:f2:fc:
2a:ef:66:71:3b:bd:83:cf:04:4b:51:0d:6d:0d:9b:
b4:06:88:73:57:87:c9:38:dd:76:58:06:f1:4b:d5:
78:2f:46:59:fd:34:09:5e:ef:18:c4:3f:59:0b:8b:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9F:EF:AA:BA:DD:1B:5B:EE:20:C9:D8:62:8C:BE:D3:27:5A:3E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/3ddd58f8-bb01-3244-859e-7db9a58ecb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv4:
74.119.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:9d:8c:4c:f0:d6:77:dc:5e:ca:a1:f6:62:54:82:31:9d:2c:
f5:64:39:4b:08:27:1d:d9:69:7d:b3:bb:79:cd:1a:eb:83:68:
2e:84:d1:18:d0:0e:4a:15:f9:b4:89:fe:76:f4:a5:2d:7c:89:
6c:a4:37:7f:84:1b:0d:a6:46:41:8d:e9:3c:69:8f:a3:5d:28:
93:f2:86:aa:dc:48:e7:9d:0b:01:fa:d9:6d:78:a3:64:7b:25:
13:0d:b5:f9:1d:9f:79:1a:77:39:7e:7b:8a:c5:d8:15:ff:f6:
b2:61:af:62:98:12:cb:f4:95:69:0f:c3:8f:dc:b1:45:d7:ab:
c4:7e:ef:59:b0:14:19:5d:7d:e7:ca:b1:7c:40:ec:cd:8a:9e:
f1:c3:de:92:ce:71:21:8b:7e:8b:9d:c1:31:3e:b7:7b:05:40:
b6:a7:17:56:a7:89:ef:74:f1:34:c3:43:9f:3f:a4:c4:2c:4a:
7a:34:d3:97:24:33:ab:a0:8a:26:c4:a8:30:25:54:9b:ed:84:
b4:3e:81:8e:f4:3b:ad:6f:48:10:c4:1b:93:1e:e7:2a:03:4f:
e4:1e:53:29:3b:a3:07:03:12:4a:cb:f7:90:07:01:f8:61:2e:
e9:26:1b:eb:6a:c8:ed:49:32:32:d6:8e:d6:37:ce:e7:fd:f0:
2d:f7:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:01 2023 by rpki-client on console.sobornost.net