Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6982efa6-9e80-446d-b7b7-9d50b3efdb2d.roa
File: 6982efa6-9e80-446d-b7b7-9d50b3efdb2d.roa (raw, json)
Hash identifier: RUHPi8S8yCc8FjxCo7BR2W/fg3/V+ldr8pZDWFHS8lE=
Subject key identifier: 3E:8F:90:69:E9:0B:EF:DC:1A:8D:7B:85:72:30:34:55:D2:F5:E8:D1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 24D6F62D14D12FD06B89D8803EC797C47759A13C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6982efa6-9e80-446d-b7b7-9d50b3efdb2d.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d6:f6:2d:14:d1:2f:d0:6b:89:d8:80:3e:c7:97:c4:77:59:a1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:7c:0b:21:b3:63:24:02:42:9b:a6:9a:d2:
73:a5:8b:3b:94:df:38:51:ba:c7:fe:1d:89:08:77:
8b:5a:6e:80:3a:82:d2:97:84:bd:e9:94:df:6a:03:
5e:d1:0e:59:27:69:8c:ca:3a:de:79:6e:d0:a2:da:
22:37:b0:04:9e:c4:ef:0e:3b:80:d4:00:96:2a:78:
0f:09:a6:67:7e:19:f9:0e:6c:22:0e:3f:26:24:2b:
97:0a:a7:f8:f7:62:fa:91:8a:e8:48:b4:0d:d2:52:
ba:e1:40:8e:bb:64:9c:5d:2d:ff:89:49:83:7e:6c:
8f:ba:d9:c6:93:fe:0a:89:ed:1f:a8:4a:2b:c2:bb:
7a:40:7a:6e:df:7a:ed:fb:05:34:1d:5e:72:5e:50:
df:c3:c3:d3:3e:e7:0d:46:a4:50:ca:df:e9:5b:85:
dd:ab:92:01:8a:f9:67:db:2e:1c:6f:10:0d:1b:ea:
ba:f7:4e:d7:83:91:70:88:db:59:1d:e7:86:83:bd:
63:f7:0d:19:b3:ae:2c:69:d5:e1:de:a7:c5:d9:f4:
4d:26:e9:aa:62:24:f5:88:33:3b:ef:7e:71:f6:fc:
dd:5c:ba:8e:99:47:8e:40:89:6c:0f:21:8b:67:09:
02:8a:67:13:d5:8b:d0:66:4b:40:69:d5:90:78:f8:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8F:90:69:E9:0B:EF:DC:1A:8D:7B:85:72:30:34:55:D2:F5:E8:D1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6982efa6-9e80-446d-b7b7-9d50b3efdb2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.144.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e6:17:ac:a8:a8:1f:67:c1:9e:21:1d:81:16:8a:b6:9c:a0:
5d:cb:67:37:3f:55:14:e0:89:fd:30:dc:48:a3:9c:81:55:78:
a4:ec:9e:33:4b:37:51:36:f9:7d:51:7e:b4:30:47:7e:ef:1e:
9d:f2:49:c0:05:4a:bd:ca:f9:b0:db:17:20:42:a5:ae:70:9d:
0d:07:ff:6f:43:d2:de:61:28:a7:75:81:b7:3a:38:d7:e0:ac:
9c:0c:44:1e:09:d9:32:1a:ba:eb:92:9a:05:53:62:0b:d3:05:
ce:84:86:b2:97:fb:85:a7:01:15:7f:1d:45:83:42:1a:01:bd:
97:77:90:24:31:8b:0b:ee:76:b1:e0:9a:22:8e:f9:23:13:c8:
3a:64:33:43:07:50:66:79:6a:67:f9:98:c0:e0:9f:8f:51:9d:
21:5d:cd:3f:6a:21:9d:20:7b:65:5d:ac:06:df:fb:62:1a:de:
ce:c5:51:96:68:79:35:7c:2c:79:ed:9e:02:c2:63:04:50:6c:
f2:db:09:76:f1:bf:48:1e:da:6a:d8:c3:1a:b9:f0:da:7f:7b:
84:52:7c:79:da:c6:a3:95:07:f8:24:d1:cc:63:ff:77:39:e8:
78:ab:cd:f4:af:ba:e9:b6:9d:dd:c8:bb:1e:49:7f:ba:87:d3:
c4:2c:48:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:15 2025 by rpki-client