Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06fbba3a-2626-4447-b888-212eba2983c8.roa
File: 06fbba3a-2626-4447-b888-212eba2983c8.roa (raw, json)
Hash identifier: iKc+sWT2cFHXnUF/liW9mNVzNQkMA3C7DTNDhpg6ohE=
Subject key identifier: 9C:40:F5:3B:D0:7D:1E:CA:EC:2A:6A:DB:5C:A3:40:98:BE:69:55:B3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0F5F76251894404A3F6198646B67D31DC9CDA1FC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06fbba3a-2626-4447-b888-212eba2983c8.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:5f:76:25:18:94:40:4a:3f:61:98:64:6b:67:d3:1d:c9:cd:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:67:7e:f9:63:60:3b:dc:9e:69:2f:1b:e4:
15:6d:1b:e9:d5:4e:cb:13:b4:2d:64:79:e1:46:1b:
74:e2:5e:bc:3a:b2:e0:ea:10:0d:dc:09:06:0c:92:
71:df:47:d8:c7:14:fb:74:e9:51:02:aa:27:23:35:
26:0f:a5:e7:bd:51:ff:cb:23:e6:9c:ae:82:a0:27:
e2:df:9a:59:c2:93:6a:5d:66:6c:87:47:f8:0e:9e:
22:93:99:fa:c6:c0:fb:9b:b3:c2:d2:a0:40:83:f6:
a2:81:bc:ff:bc:8f:cf:27:9b:27:09:6a:e4:ee:9e:
b7:6a:19:6a:cf:56:23:0d:91:ae:f7:75:30:76:07:
3f:48:ce:5e:d5:3a:b2:db:68:fd:a0:d7:9a:5b:a3:
7a:1f:b6:ce:1a:4e:ed:e8:14:3a:ca:7f:fe:6e:94:
d6:57:e7:ab:7d:ee:c6:1c:9d:77:89:bb:dc:cc:cb:
bb:22:a2:45:1f:fc:3f:28:cb:c0:9c:8d:eb:d0:40:
d2:d2:54:a3:8a:08:05:45:6e:51:d8:f5:db:7f:6d:
83:b5:e7:71:3c:7a:b9:eb:1e:5b:e8:67:4c:e1:05:
e3:e1:b3:20:7c:90:e9:92:28:dd:9d:51:11:7a:9b:
02:c9:34:d1:8b:9b:e5:b5:1b:0f:8c:86:a2:aa:2a:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:F5:3B:D0:7D:1E:CA:EC:2A:6A:DB:5C:A3:40:98:BE:69:55:B3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06fbba3a-2626-4447-b888-212eba2983c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:53:7c:57:c0:18:d2:7b:9a:3c:85:7f:16:01:a2:8c:83:
97:47:e5:57:82:34:35:18:a7:de:50:63:71:3b:69:ae:03:90:
ab:22:ef:95:87:b6:8d:b6:1f:ca:4b:b1:2a:25:8a:4a:21:e8:
50:a2:6f:64:3d:9a:41:f9:ee:83:45:4c:f3:b7:91:66:1b:97:
1a:50:23:ed:0b:e6:08:25:20:9e:b3:23:6c:ca:c6:4f:07:d5:
09:01:51:fd:60:ab:96:44:8c:57:68:d4:72:51:95:51:3f:fb:
1c:8f:98:d9:e6:b8:87:fa:2e:72:53:49:6a:bc:f7:a3:05:0d:
7a:1a:52:f2:c0:c7:a1:49:07:c8:c3:88:8e:55:cb:e1:dc:f1:
9a:42:ab:e3:7e:70:22:12:96:56:24:ac:14:b7:86:eb:80:55:
c1:5c:61:2c:08:a0:b4:31:32:50:fe:98:7e:9f:ef:6a:c5:12:
a0:36:af:41:87:56:86:e1:2a:bb:ab:73:0c:0d:7c:d1:b6:98:
c5:f5:a0:2c:42:41:a5:7e:b3:6a:5e:45:4c:f9:29:b8:82:12:
7f:0f:f6:7b:1a:c7:11:cb:67:fe:36:41:42:cd:ef:b5:65:0e:
e3:28:57:7f:e0:a3:f4:89:d4:e4:31:7f:33:4d:fa:d2:7a:f1:
35:99:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:50 2025 by rpki-client