Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b277cb87-d1bc-3770-83c0-2bd8b551d479.roa
File: b277cb87-d1bc-3770-83c0-2bd8b551d479.roa (raw, json)
Hash identifier: 82vKKuSdqQiGFuxAAvw+aQnvgNfulbRUe+lqCQlLg8Y=
Subject key identifier: D2:C7:4B:E6:3C:11:66:26:10:47:C0:8D:9C:AD:D0:38:4D:BC:9C:7F
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F43285843F366D81E461C4A023DA2A500
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b277cb87-d1bc-3770-83c0-2bd8b551d479.roa
Signing time: Mon 20 Nov 2023 12:40:51 +0000
ROA not before: Mon 20 Nov 2023 12:40:51 +0000
ROA not after: Sun 18 Feb 2024 12:40:51 +0000
asID: 60558
IP address blocks: 172.98.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:f3:66:d8:1e:46:1c:4a:02:3d:a2:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: Nov 20 12:40:51 2023 GMT
Not After : Feb 18 12:40:51 2024 GMT
Subject: CN=bf8d39e7-addb-496d-8d02-0b7853209d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:e8:83:ce:2b:71:c7:04:0d:35:09:57:16:
7e:16:29:2b:b3:eb:1e:18:c6:0c:51:1d:2e:82:e7:
a1:05:ab:6d:18:8a:eb:74:85:bc:9a:3c:4d:c2:07:
14:f1:f8:c9:ff:d0:fe:0e:4c:e1:01:03:3e:f5:f4:
fd:41:60:68:c9:84:6e:d9:6c:3b:b4:3d:14:00:bb:
ce:7f:d4:80:08:ff:2d:cd:f9:00:a4:46:3f:bc:b0:
76:c4:23:d2:46:81:15:88:28:a7:d2:02:5e:fe:89:
35:9d:c1:13:b0:f9:70:e6:c7:94:d5:39:47:0b:c1:
da:45:e6:92:1a:1c:49:70:ed:6b:89:cf:6d:57:9d:
92:5e:3e:1c:e0:f4:50:d0:e7:ef:07:ff:4e:5f:57:
13:a0:72:27:ec:2f:e2:5e:f4:45:90:65:d7:5e:de:
50:a1:a9:a6:72:4c:08:4e:14:70:77:f0:24:7a:d1:
e6:79:b7:61:62:55:38:73:2e:e6:fe:26:fa:e2:2d:
09:cb:4b:1c:69:e5:88:bd:d9:a8:69:1e:09:7d:c5:
fe:75:22:f4:7f:43:d3:60:e4:55:5b:bb:75:cf:dd:
49:f9:0c:75:84:6a:d2:b0:69:7d:79:31:c7:3b:35:
bf:43:d5:55:7a:60:69:5c:62:4b:7c:80:77:db:13:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C7:4B:E6:3C:11:66:26:10:47:C0:8D:9C:AD:D0:38:4D:BC:9C:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b277cb87-d1bc-3770-83c0-2bd8b551d479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:12:8a:69:c0:ac:2f:cd:a5:8d:01:ee:aa:07:3a:0a:a7:be:
b4:92:fa:4d:4d:ae:a4:62:4b:13:42:ad:b8:fc:ea:bc:90:c8:
c6:91:64:41:fa:48:c1:22:ef:22:6f:9a:30:0b:a0:fb:80:59:
d5:6f:e2:53:d3:48:83:3b:e2:03:4b:56:c3:33:a9:1c:0f:fb:
fc:c6:e8:07:d5:0c:67:29:3e:17:56:ba:ef:8d:cf:18:15:ef:
26:33:6c:af:e4:07:c9:1e:74:28:03:60:8d:76:ac:72:74:4f:
76:d3:cc:75:e4:a4:a7:90:ff:33:e4:9a:25:ce:aa:94:57:46:
80:99:3a:23:e2:fd:30:9a:7e:33:0a:53:05:c7:23:1e:e4:f3:
b0:22:8c:85:6f:73:a2:8d:03:7b:b2:34:03:3c:12:65:ce:31:
21:26:6d:97:63:a4:29:e8:56:68:be:70:91:1c:4d:54:4d:ee:
81:85:73:65:b5:49:e7:70:60:68:86:3d:0b:3e:cc:74:37:92:
f2:ff:42:a8:9a:c4:81:25:0e:3f:64:ed:4e:23:81:42:2a:25:
be:22:52:d5:34:37:fc:5b:70:04:30:cb:54:dd:f0:e0:9c:b4:
65:ef:d2:e6:79:9c:2e:c1:76:c7:27:e9:46:34:2f:d4:8a:b8:
6a:b7:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:09 2024 by rpki-client on console.sobornost.net