Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c962645-4200-466b-8c9c-c63cfbb3da65.roa
File: 5c962645-4200-466b-8c9c-c63cfbb3da65.roa (raw, json)
Hash identifier: f4L5o5EuyLsVQYk6zCaQcctXYEjeOQlDGfdG39eHXCQ=
Subject key identifier: E4:D5:F3:D4:DC:E8:F5:27:2A:CE:0A:63:04:AF:1B:40:B9:74:A4:54
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 50FD7B79EE8A135D6D0B36B5FB2A7B36E4F5A867
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c962645-4200-466b-8c9c-c63cfbb3da65.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.192.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fd:7b:79:ee:8a:13:5d:6d:0b:36:b5:fb:2a:7b:36:e4:f5:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:fc:fe:64:6e:49:90:52:fb:8a:2e:fa:7e:
52:91:81:0c:72:5d:a0:2b:d1:86:74:99:f4:00:4c:
db:14:bc:6b:e8:0a:c6:e3:49:99:e2:a9:31:b8:d7:
85:f5:1a:5f:95:04:56:0c:20:82:85:ef:2d:67:2e:
36:1d:d9:58:c2:49:ef:42:1a:1c:33:65:a9:cf:67:
ea:37:6c:7b:3d:3c:47:bd:3c:04:2c:40:cb:e8:65:
3a:7b:21:c2:1e:0d:b2:0e:1f:fe:b3:88:21:e5:f5:
a4:72:df:29:3c:d7:fd:86:3f:1e:04:5d:ce:73:ac:
a0:43:b5:a5:fb:d8:7d:5c:fb:cc:96:98:51:22:07:
c4:b2:fd:e3:29:2c:5e:87:b2:f4:29:a1:2e:79:f9:
a3:ec:05:8e:cc:19:b0:9b:eb:c8:d2:8e:09:a4:4b:
96:25:b2:1f:aa:7b:e2:00:62:da:13:7a:85:d6:ab:
5e:64:d0:ce:75:2b:6c:f6:30:a0:cf:10:b1:e3:6e:
ec:15:76:25:0e:73:81:2b:0e:c8:4e:27:91:4c:0d:
ff:3a:aa:74:c1:b0:d3:df:5f:46:e1:44:f8:23:76:
38:ca:84:13:60:db:3f:b7:e5:db:19:83:6e:25:ef:
bb:a2:6d:23:e4:9e:c5:81:3b:55:e4:b9:8d:0f:37:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D5:F3:D4:DC:E8:F5:27:2A:CE:0A:63:04:AF:1B:40:B9:74:A4:54
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c962645-4200-466b-8c9c-c63cfbb3da65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.192.0.0/12
Signature Algorithm: sha256WithRSAEncryption
22:e4:74:b7:7a:3a:f5:2f:4d:b7:a1:a4:c3:65:2e:8a:e0:f5:
49:61:06:f1:7a:c5:77:45:8c:2e:cd:fc:c3:b7:58:2a:a9:99:
c7:57:0a:15:d6:e2:77:5b:bc:3d:0e:da:fb:d1:1c:87:fc:3f:
f3:8f:7b:de:34:9e:ab:2d:14:37:4e:1a:dd:d3:7e:b7:9c:52:
58:d9:10:da:65:45:c3:16:80:71:d8:4e:7b:2b:5c:54:42:90:
3d:bc:53:e1:0f:11:f3:12:6a:f6:79:c9:eb:d5:0e:60:51:56:
32:db:92:49:20:45:4f:34:37:96:18:d0:db:17:0f:20:66:48:
1d:c0:4c:7e:ab:54:43:33:d7:22:a2:64:18:20:33:7d:b1:12:
b0:6f:de:53:ff:ad:77:66:1d:af:86:4b:8c:97:90:fe:54:a4:
cd:ce:b8:1d:24:2d:56:eb:99:13:24:f4:b6:c4:76:c6:e1:1b:
a3:05:d7:64:4a:24:d3:22:a7:5c:90:44:75:77:d8:0c:8f:14:
cc:59:d1:97:05:c6:5a:3e:92:a0:05:b2:52:44:13:07:53:01:
02:80:3d:a2:be:1a:64:08:bc:75:78:af:f3:42:fe:dd:13:1a:
87:90:e5:75:d3:24:32:34:ff:e2:91:2c:3e:2e:aa:e8:33:78:
e6:a6:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:19 2025 by rpki-client