Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/359a446f-d574-45d6-95c9-eec09a0e5999.roa
File: 359a446f-d574-45d6-95c9-eec09a0e5999.roa (raw, json)
Hash identifier: 4m1/zlReDDm1psr5oUTNEujcY4/xN1tqwWfWJ0HuuB8=
Subject key identifier: E8:49:A9:53:9B:D8:28:43:EB:BC:99:A9:82:CE:29:1A:10:59:7D:A1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 23B60EF807007755A1BBAECF88639A8CD508CD80
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/359a446f-d574-45d6-95c9-eec09a0e5999.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b6:0e:f8:07:00:77:55:a1:bb:ae:cf:88:63:9a:8c:d5:08:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:d9:d1:6b:cf:9b:a1:82:c8:74:15:8d:13:
25:2f:1b:df:45:25:d0:85:be:ae:fe:e6:b2:7c:bc:
27:8d:f4:ba:a6:42:ce:b2:68:25:23:13:2c:81:de:
a1:bf:3b:8a:be:d5:ab:91:a3:67:5d:8c:51:59:7c:
23:92:f3:dc:57:b1:5b:42:2c:cb:92:e4:68:73:3f:
0b:ec:13:a2:31:11:94:ab:02:c3:2e:c9:72:00:ba:
cf:5b:a1:87:73:eb:49:98:62:c9:a5:59:8f:d4:c9:
a9:53:71:ac:76:8c:89:8b:36:a6:3e:d0:9a:3c:37:
a7:6e:87:35:f7:ce:f3:5d:d6:87:63:d4:e6:f4:cc:
3d:39:e6:20:89:e1:ce:8d:c2:8b:6e:8a:c0:68:18:
5d:5a:c5:9d:43:26:5f:0e:5a:eb:d7:f2:c4:a5:d8:
e2:9f:ed:d7:0d:e4:b4:3b:f4:03:8d:dd:25:8b:2e:
44:5f:ff:3b:04:b2:11:4e:37:75:98:20:26:02:6b:
5e:14:d0:e9:19:12:fa:d9:57:f2:f5:a2:f0:e0:63:
01:8a:47:a7:df:bd:4d:80:48:a1:16:3a:58:36:62:
aa:63:69:85:c2:97:39:2c:c5:4a:e4:6c:49:4b:85:
3e:29:b8:1f:63:94:eb:24:36:01:83:cc:4e:25:8a:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:49:A9:53:9B:D8:28:43:EB:BC:99:A9:82:CE:29:1A:10:59:7D:A1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/359a446f-d574-45d6-95c9-eec09a0e5999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c2:0f:02:2f:c6:fc:d2:e9:a7:9f:bd:3e:fd:36:83:5d:11:
9c:5b:e1:47:f2:a9:c8:09:9a:f2:ca:5f:92:ec:a3:9f:82:c2:
11:84:b3:83:4c:ff:f9:55:2c:8b:be:93:90:b8:2b:bd:cf:22:
c0:eb:da:1a:d6:e1:35:1f:8b:20:14:ce:27:53:b7:2f:56:bc:
fd:8c:33:af:7a:3a:c5:f9:8f:ea:e3:6a:87:27:7f:a4:75:34:
27:c3:ad:4a:75:0d:66:5f:55:63:a2:01:a4:91:42:01:d0:74:
ac:18:68:8a:e4:d2:8e:f9:42:4f:f6:bc:af:6f:a4:fb:8a:13:
3b:46:96:8f:9f:1c:76:ac:8e:e6:40:70:0b:ae:12:39:f7:7e:
d6:fd:fb:5d:0b:d0:c3:cb:63:d1:12:ff:5f:75:ca:c3:42:b2:
3b:0b:ae:a8:1b:da:39:1a:f0:af:eb:31:2c:f6:23:6a:15:13:
7d:d1:1a:f2:51:82:0f:30:c2:48:7e:1c:93:4f:87:cf:eb:cd:
c1:41:47:27:13:c7:a0:a0:c4:0e:32:24:e3:fb:28:eb:34:d3:
96:5c:4c:78:15:aa:66:37:0f:c0:20:76:ea:bf:23:d0:32:a0:
0f:79:44:99:41:7c:cd:ea:3d:bd:20:13:2c:a1:15:32:1c:3e:
92:9b:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:12 2025 by rpki-client