Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0864d77b-91be-450d-8568-281a7fabe248.roa
File: 0864d77b-91be-450d-8568-281a7fabe248.roa (raw, json)
Hash identifier: K5HkXNKp9P4lmjOeu8Qb7HlH1Bhfyl40oiPhbtagEYM=
Subject key identifier: DC:18:9B:AE:DB:13:09:D9:BE:EA:20:62:3A:F0:ED:A6:41:47:24:D3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6E1592544A6862FA17AAA90028797DC5AFF19724
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0864d77b-91be-450d-8568-281a7fabe248.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:15:92:54:4a:68:62:fa:17:aa:a9:00:28:79:7d:c5:af:f1:97:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:49:2c:1a:aa:ec:d0:6d:b1:ba:66:6a:62:
3c:d1:24:4f:ec:74:aa:f2:6a:79:d1:99:0b:fb:36:
1c:c7:55:ee:8d:ad:3d:32:27:be:1c:90:87:09:f9:
60:07:45:df:27:16:13:93:58:b8:2b:e4:bd:fa:35:
5a:ab:af:a7:f2:a1:4a:33:9b:ff:5e:0b:ad:49:85:
0d:af:1f:0f:33:49:4a:81:9a:b2:b5:5f:b9:07:5c:
6c:49:28:d6:27:3b:c6:b6:6a:bf:23:2f:51:18:8d:
aa:0c:71:3b:47:d9:76:fc:b1:95:60:63:a9:83:f5:
db:78:4f:30:00:cc:f9:0a:ef:0d:64:e6:08:fe:68:
74:de:67:ac:77:53:e0:78:49:65:cb:ac:5d:af:6f:
63:34:89:21:60:75:3f:72:7b:1f:75:18:21:1c:11:
fd:9e:ad:14:17:5c:e5:04:9f:cf:15:14:84:54:e8:
44:bd:c9:66:eb:ff:14:94:bd:67:fa:b4:99:a8:75:
57:af:16:b8:4e:cb:10:d1:41:ce:83:b4:a1:1f:1e:
3f:9b:d3:89:32:4b:7a:f8:73:b0:7d:ca:28:35:07:
ac:3d:2c:d3:7a:8c:be:1d:40:cf:1c:0f:ed:1d:fe:
d6:72:a1:bb:68:06:19:05:22:79:55:a4:74:0d:8c:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:9B:AE:DB:13:09:D9:BE:EA:20:62:3A:F0:ED:A6:41:47:24:D3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0864d77b-91be-450d-8568-281a7fabe248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:aa:3e:b9:19:fb:f5:35:34:0a:91:32:a4:cc:24:67:7c:b4:
65:f6:86:7d:24:28:f9:fa:68:cd:4e:4a:7d:79:a3:c7:d1:1f:
ec:25:3f:57:86:2f:ce:a2:48:f1:24:e0:ca:71:01:f4:99:3f:
04:56:5d:07:82:88:58:76:2a:59:19:a6:76:f3:e4:02:30:5e:
50:56:ce:27:0a:f8:4d:53:7c:d5:68:ff:33:88:d5:31:42:3e:
c3:61:cb:56:b8:05:42:c9:45:3a:59:93:43:c4:35:55:ed:b9:
21:d1:06:eb:41:8e:89:49:48:8e:80:b8:d3:54:88:ba:cc:d0:
91:7d:aa:16:dd:7b:62:9b:cc:5c:08:23:f7:ae:e4:03:2c:3a:
3d:b5:be:74:45:39:6f:31:15:f2:e0:bc:40:71:d1:e0:7e:e0:
a1:26:c3:bf:88:47:5d:ac:37:0e:bb:a0:76:c0:9e:4f:11:50:
9c:bf:8d:0e:e7:2b:e5:d7:09:b7:af:a7:82:24:b9:ac:16:b2:
3c:d4:78:cf:73:f5:6f:e1:58:04:2f:82:7a:8d:09:aa:f8:6f:
68:28:96:2f:be:00:31:ba:bf:be:62:d9:b8:df:87:77:ab:9d:
d0:89:90:bb:34:97:6d:21:21:9f:77:2e:3c:44:f4:7d:b3:6e:
39:8b:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:49 2025 by rpki-client