Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59482883-699f-4ef6-9bd5-c7cb55c72167.roa
File: 59482883-699f-4ef6-9bd5-c7cb55c72167.roa (raw, json)
Hash identifier: hUhIlwsijfqV4PDU4U5BsC9be9+WzZh2fDIVZy8jupQ=
Subject key identifier: B7:8D:17:76:E5:2F:DD:2D:9A:66:53:56:0A:58:4B:25:4E:18:11:05
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 303F6AD4E27DEEF56A964A93EF0D5C7FA2B68CEE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59482883-699f-4ef6-9bd5-c7cb55c72167.roa
Signing time: Fri 10 Jan 2025 00:00:00 +0000
ROA not before: Fri 10 Jan 2025 00:00:00 +0000
ROA not after: Fri 14 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 15.209.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:3f:6a:d4:e2:7d:ee:f5:6a:96:4a:93:ef:0d:5c:7f:a2:b6:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 10 00:00:00 2025 GMT
Not After : Feb 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:bb:9e:dd:9c:c9:f9:68:a5:df:57:d1:5b:
73:e3:25:db:8f:98:0f:2f:5c:09:f1:13:84:06:da:
15:2d:7d:c1:31:b1:e1:ef:30:a3:11:16:85:41:fa:
99:93:c1:87:cf:b7:13:d0:41:1f:d3:11:04:b5:39:
2c:25:1b:a0:08:a9:e1:41:11:b1:5b:e4:89:84:64:
88:94:0e:45:0c:d0:06:8c:bb:54:ef:89:62:e3:a4:
93:8f:eb:1f:99:80:55:a4:8d:fe:6f:c0:1b:0f:dd:
c6:db:fe:56:3f:67:72:f6:98:53:2b:42:31:25:10:
51:f7:0a:f4:8f:8f:3c:42:42:e6:df:ed:eb:eb:0e:
2f:be:43:05:96:74:21:e8:67:c4:bd:0e:01:4e:6b:
75:4f:36:b7:f5:6e:35:ee:fd:95:e2:9b:b8:ce:93:
b7:ab:73:0f:ad:1d:24:b8:72:5a:86:8d:8b:59:aa:
6e:ac:be:0a:cf:9b:11:48:65:a7:60:51:4f:70:a0:
35:79:79:4d:e6:c7:64:d3:62:95:13:4d:59:93:91:
69:bc:fa:0d:8a:5e:ce:39:c0:45:b0:97:47:df:ae:
79:fe:a6:bf:62:b5:7f:c5:d7:77:a4:40:51:28:da:
6d:8b:7f:a1:7b:70:ed:da:d3:27:d4:9e:1d:b1:33:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:17:76:E5:2F:DD:2D:9A:66:53:56:0A:58:4B:25:4E:18:11:05
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59482883-699f-4ef6-9bd5-c7cb55c72167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:e8:e1:1e:53:fd:19:6e:c3:2b:4b:22:36:97:38:cc:3a:81:
02:4b:2c:f8:3a:63:83:c4:53:6c:55:ef:1b:c9:72:e1:fb:f3:
e3:a1:03:31:4e:ff:88:e2:b5:40:eb:c5:ca:d2:6d:6d:d5:83:
14:a5:7a:2c:12:38:26:ac:bf:c2:3c:14:92:39:f8:b8:f1:8c:
7d:4e:10:c2:eb:1f:d9:6c:f2:1a:9a:55:f1:6f:53:84:fa:02:
a5:1f:ea:50:27:ae:4e:9e:58:c8:2f:4c:24:60:89:70:99:df:
1a:56:81:2f:57:b3:f8:16:55:97:d2:b6:8d:77:3c:f7:ea:9f:
de:60:68:fb:00:93:ba:6b:d5:ba:7f:e9:46:c7:79:63:21:7f:
81:d3:1a:47:a9:39:9b:a6:72:f2:6a:6b:e6:e6:8f:93:d8:b9:
b8:35:15:ec:67:a7:1f:8b:91:6a:ed:56:13:89:23:32:31:8a:
f1:f4:57:56:a0:c7:54:33:93:ec:9b:4a:dd:64:0a:0e:83:13:
e4:cf:12:74:97:2c:00:fa:6f:4a:0a:ca:77:f2:ba:ca:3a:f2:
71:5d:07:49:56:58:95:a5:b0:4e:0c:1d:50:33:33:b1:18:fe:
3d:b6:e2:7f:0a:b9:06:cd:67:e9:a8:52:32:04:a7:9a:11:97:
74:3e:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:01 2025 by rpki-client