Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f6a9c7-65fd-463a-9537-cd8d79a59dec.roa
File: 54f6a9c7-65fd-463a-9537-cd8d79a59dec.roa (raw, json)
Hash identifier: 98PecOgL7D5dMskcEF7/qakEZ50MOkBHLebq6aoo8cg=
Subject key identifier: 35:BB:D9:0C:B3:AD:9B:6E:DD:EE:7B:02:A0:60:E9:3C:3F:4F:2D:C3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2377963129B7D30D82AA7828521DFB37AE60BDA2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f6a9c7-65fd-463a-9537-cd8d79a59dec.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:77:96:31:29:b7:d3:0d:82:aa:78:28:52:1d:fb:37:ae:60:bd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:00:b0:6b:97:63:ca:4f:13:ee:72:77:69:
5c:35:ad:d3:94:80:44:c1:9b:ea:71:27:9d:93:7c:
97:34:c7:6e:f4:2f:60:a6:ca:6b:95:4d:63:bc:a8:
14:10:47:7c:82:be:61:27:18:39:df:52:5f:44:e0:
10:9a:c5:5b:b9:bf:e2:b9:0f:41:ad:11:5e:c9:dd:
02:96:88:93:15:26:cc:ad:93:4a:70:a2:1f:bc:6d:
9a:65:53:89:f1:73:14:bb:86:47:0c:d6:a2:6a:80:
fd:a9:79:ac:8b:2d:0d:3f:73:b2:71:0c:ea:6e:7c:
93:de:25:31:b5:e3:f3:a6:34:5b:23:09:4c:b0:f2:
57:05:20:02:b9:be:9d:75:e7:97:01:60:4a:eb:09:
70:de:71:26:e3:bb:70:e0:c5:61:83:76:ed:eb:fb:
98:63:52:bc:8d:82:5d:2c:16:73:8a:fb:68:27:7e:
5a:e2:fe:09:7f:29:08:e1:45:fb:be:21:0a:68:04:
a4:e4:df:9e:77:52:9a:46:99:35:d8:a5:41:ff:d8:
77:26:2c:07:c2:f7:f5:cb:4d:b1:34:c9:28:bc:43:
24:4c:a6:fe:90:02:3f:67:ed:6a:99:85:55:c8:f3:
cc:46:19:97:89:75:38:9d:74:6b:d4:01:6f:9e:70:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BB:D9:0C:B3:AD:9B:6E:DD:EE:7B:02:A0:60:E9:3C:3F:4F:2D:C3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/54f6a9c7-65fd-463a-9537-cd8d79a59dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.115.0/24
Signature Algorithm: sha256WithRSAEncryption
39:dd:63:3b:9e:5c:58:76:86:3a:02:d1:62:9e:2e:40:f4:1b:
12:b1:37:f8:fa:fe:0f:0a:c7:1e:78:eb:49:0f:b6:a9:e3:82:
df:1e:3f:ef:83:b9:c3:8a:3e:a2:21:79:02:07:9f:3a:09:5d:
34:8f:8b:3a:85:cd:85:96:7e:86:62:44:3f:7e:43:cf:a1:ea:
e9:5e:8a:0d:cf:1e:a4:c5:26:d3:55:d8:cc:b6:85:02:99:e6:
41:a9:18:be:e0:3f:ed:18:1b:20:b7:cf:26:9b:f7:37:1b:9d:
eb:21:93:4c:63:a8:24:aa:d0:a6:79:e9:da:cb:e2:25:6a:ad:
ce:02:86:34:05:9e:40:57:f8:9b:c2:28:17:6e:18:78:3d:2e:
65:68:34:b7:54:04:30:3c:27:1c:82:2f:f1:9e:b8:ae:8b:59:
b6:49:60:b2:a8:e8:49:fe:61:f4:21:5d:be:7b:4a:3e:09:7c:
85:94:62:5b:f7:14:11:88:f2:e8:4a:65:b8:89:1c:5e:26:e0:
17:39:82:02:7b:e7:eb:8b:4b:f4:e7:36:2f:3c:8c:e6:d8:96:
48:9c:97:b6:8c:80:43:cb:51:36:55:6b:4b:87:a0:fa:b6:96:
d0:45:02:2d:3a:1c:d4:43:ed:ad:25:44:ab:ad:8b:f7:77:a1:
8c:07:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:53 2025 by rpki-client