Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3640bce9-6078-494c-942f-73dbe6a586f2.roa
File: 3640bce9-6078-494c-942f-73dbe6a586f2.roa (raw, json)
Hash identifier: 5ukj397/vtNdHf3QqMgwOLk8WHKcLegpiawVmehhwXQ=
Subject key identifier: C4:3F:7D:40:C9:DB:13:E5:3A:7E:FF:CB:25:FA:93:A4:ED:FA:83:0E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 22E39384054D8AFE990539399F1CA786E4663AA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3640bce9-6078-494c-942f-73dbe6a586f2.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.58.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e3:93:84:05:4d:8a:fe:99:05:39:39:9f:1c:a7:86:e4:66:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:dc:96:3c:d5:03:9b:48:58:bb:ea:f9:9d:
21:99:de:22:fd:aa:20:7e:3a:8c:f3:aa:64:38:5b:
48:b3:ac:b0:25:0a:25:cc:4e:c9:a1:60:ea:86:b6:
2e:04:64:ad:d0:dc:c0:5b:37:64:20:be:8a:3e:1e:
19:0a:b3:96:0c:8e:19:26:88:93:06:b3:b8:13:9e:
18:3a:89:b1:88:23:3f:cc:ce:5f:90:e4:c8:eb:77:
52:34:ab:4d:f9:34:bc:eb:2b:43:b4:be:32:6e:13:
6d:8c:0f:44:19:f3:83:9a:b9:26:dd:c9:0e:3c:ec:
fd:b4:2f:de:75:dd:2b:36:14:f9:8d:74:5c:44:1b:
4c:06:08:0b:28:d8:9b:c5:4c:da:f7:c9:40:c8:0c:
23:bb:c2:ce:57:7b:04:2d:f3:c3:e9:8c:7a:b6:b4:
73:e9:21:dd:68:8d:5f:5f:80:fe:6b:29:ef:d3:97:
2d:c5:8a:66:8e:fe:d1:7e:98:cf:0f:44:29:92:f5:
42:e7:97:58:7b:a7:5f:dc:ea:ef:ce:41:8b:90:8d:
d4:6f:d6:97:27:04:dd:58:c5:fd:b9:47:eb:f6:51:
85:7d:26:e0:8f:68:12:4b:46:b7:e3:46:ca:ca:c2:
00:09:72:70:86:0b:a3:95:44:3b:fa:4e:38:63:aa:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:7D:40:C9:DB:13:E5:3A:7E:FF:CB:25:FA:93:A4:ED:FA:83:0E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3640bce9-6078-494c-942f-73dbe6a586f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:91:29:72:41:22:32:63:4f:3a:f2:b6:6a:8e:d9:0d:3e:4a:
35:7a:96:70:49:fe:9e:7d:f6:9e:5f:ed:17:15:b7:3b:95:ab:
8c:3a:5e:a1:80:68:12:0d:2c:dc:ea:37:13:03:6f:2f:44:0f:
f8:fd:21:50:93:74:a0:48:3c:88:26:31:6a:e1:a4:86:c6:c3:
14:d8:58:6a:ca:37:10:ba:ae:88:30:28:86:59:8d:ea:20:68:
7c:eb:fc:66:e9:f2:d2:44:08:5c:89:eb:b9:40:d2:82:93:bc:
88:1e:bb:0b:d9:fc:94:70:5c:33:86:a5:39:57:28:44:50:d5:
af:0b:38:79:f9:12:a5:52:da:41:ce:19:e5:81:67:a3:5e:3b:
1d:ed:0d:26:ac:79:1f:9d:94:90:47:b9:15:fd:07:47:d3:25:
5a:5a:dc:6b:7f:95:80:a7:34:b0:65:2a:e2:83:22:7f:77:87:
c8:70:d9:89:74:2e:e2:af:b8:cd:95:45:79:1a:eb:2b:e7:22:
7b:95:3e:33:fd:b2:5b:9d:8c:17:fe:d3:d7:a1:ab:c1:d0:01:
ac:60:b8:c2:8b:af:57:7f:64:2b:b9:55:20:db:b2:ff:10:fc:
ca:1e:60:cd:7f:58:ec:91:8c:c3:99:66:9e:a0:c4:d7:a7:76:
4e:fe:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:29 2025 by rpki-client