Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa
File: 13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa (raw, json)
Hash identifier: eDMuEv0+WclI/afobv3GtdZRFw5z98jVPJB20s8JCB4=
Subject key identifier: A9:8E:C6:F5:BB:39:77:11:27:3A:99:73:B9:EA:66:3C:AE:07:D4:3E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 602280C738B5D96337028636F6DDD523A37CAE63
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.196.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:22:80:c7:38:b5:d9:63:37:02:86:36:f6:dd:d5:23:a3:7c:ae:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:65:ec:5a:06:ec:34:ca:31:6a:aa:b1:29:
a4:84:66:3d:92:31:30:93:4d:d5:63:6f:29:92:f5:
bc:1d:f4:9e:29:5f:0e:9d:7e:a7:9c:ba:f7:dd:78:
b7:41:96:cc:71:39:dc:9e:bd:9d:4b:97:a8:a3:9d:
9e:ec:04:33:ad:a2:8b:a0:9b:9f:f7:d5:6c:d8:c8:
2b:dd:fa:31:c5:97:38:19:c3:db:70:e3:93:3f:c1:
61:ef:d3:6c:27:5c:84:96:0f:a4:5d:01:95:fc:7d:
c2:64:52:68:7b:c1:61:7a:9f:d1:80:f6:4c:22:89:
3a:c8:5b:fa:41:c3:90:58:c2:0a:a8:29:03:cc:32:
15:d3:9e:55:68:32:59:21:02:70:7a:4d:0b:2f:3d:
ef:e9:88:54:5c:1e:91:d1:aa:ea:83:25:78:3d:f4:
10:b1:dd:1c:b7:70:62:58:3c:de:52:48:a0:c8:bc:
2d:39:9f:63:67:27:ec:7a:f6:1d:a2:b0:68:3b:ce:
0f:e7:d0:6b:44:12:39:20:dd:0f:b5:21:ac:91:ff:
b7:66:82:8e:e7:46:4d:58:4b:e9:32:69:7f:08:54:
6d:fa:57:74:6f:e6:50:59:df:f1:7a:33:09:13:2c:
73:e3:7f:e4:76:75:fe:c6:03:db:77:0b:18:6c:5a:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:C6:F5:BB:39:77:11:27:3A:99:73:B9:EA:66:3C:AE:07:D4:3E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13bdf75b-6d22-4bb5-9fb8-2b29ed5daf45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.196.0.0/14
Signature Algorithm: sha256WithRSAEncryption
61:9c:24:9d:09:6b:05:0c:7e:d9:65:50:2d:47:ef:97:47:40:
f3:32:18:05:01:2a:1c:ca:44:66:5a:32:62:3d:c1:9e:ad:9c:
4b:0d:9b:c7:d2:1d:c1:ab:74:d1:b0:a5:df:45:5c:b9:56:c2:
23:e1:3f:73:83:66:4c:e2:7b:57:12:02:cd:56:d2:7f:6b:bf:
eb:1d:97:00:04:dc:ec:7a:6d:93:85:21:e8:39:d2:e1:c7:08:
0a:4c:e6:2a:a0:45:30:aa:9d:cb:00:60:95:51:c6:20:d4:99:
5c:eb:7e:38:4c:96:3e:3c:32:35:c1:29:d3:bb:df:47:32:83:
39:cd:fb:40:dd:31:44:76:e1:87:df:5b:62:a7:df:df:2f:c9:
80:eb:35:99:b4:a3:f7:6d:ee:cf:9f:4e:6b:7d:31:a4:70:12:
09:81:f3:1a:da:89:a8:cc:67:d6:d3:14:91:1b:a1:29:2f:f5:
b0:86:88:7f:34:16:15:84:bd:3f:95:4a:94:1f:a2:75:a4:db:
c0:69:14:1c:23:ca:99:90:6f:f3:13:6e:41:6d:5d:05:f4:32:
cf:d5:13:75:85:18:27:93:14:73:6c:99:75:62:58:06:e6:32:
a8:d1:87:bd:bb:8c:18:d7:9f:d3:a8:08:b3:2f:4f:1e:c1:63:
b5:0c:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:33 2025 by rpki-client