Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7078523d-6813-4e9d-ba71-8d71aa591634.roa
File: 7078523d-6813-4e9d-ba71-8d71aa591634.roa (raw, json)
Hash identifier: CKnH7yHSgkR7UriboDvDg0CMb10TCNcGePU29PS9riM=
Subject key identifier: 62:8B:B0:23:6A:96:F9:88:B5:85:A5:67:EA:A5:9F:9C:D2:A3:3B:A9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 38D5967C5B460C31B7F4D312CFECF899F632B646
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7078523d-6813-4e9d-ba71-8d71aa591634.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 130.205.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d5:96:7c:5b:46:0c:31:b7:f4:d3:12:cf:ec:f8:99:f6:32:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:0a:54:9a:11:55:11:a6:06:f7:24:7f:95:
35:70:1b:e1:09:6b:6d:b8:f3:00:49:54:2b:43:dd:
2d:f6:b4:ed:87:0a:de:c8:81:9f:a7:bf:73:12:9a:
14:eb:82:66:80:e5:30:0e:5e:2c:f8:1e:46:63:34:
51:10:86:0c:62:65:36:2f:57:eb:46:bb:31:72:76:
d9:ab:96:0c:ed:67:3e:59:e5:e8:94:0d:43:e6:43:
e0:6e:55:82:55:cd:b8:72:7d:63:62:de:93:c3:14:
38:f7:f3:b1:0c:ac:61:f4:b1:13:eb:6f:b3:a3:25:
8d:ea:e8:6b:5c:ac:ee:37:1f:51:63:cc:e2:b3:a5:
aa:4e:17:a8:88:b0:1b:9b:b0:76:91:6f:d1:14:d0:
21:1a:59:36:28:6a:e1:46:11:ce:6f:bb:44:c5:c7:
ce:60:41:20:7e:84:09:89:2f:64:0a:6c:68:d5:7a:
16:9b:04:01:30:ba:bd:e9:92:2b:82:f7:de:8c:ef:
0d:d6:fc:54:01:2d:d5:1b:5e:6e:62:94:63:50:b6:
61:4b:af:33:26:36:45:1e:15:cd:c6:9b:20:1b:c7:
2f:e8:50:ff:7c:05:a9:3d:a9:34:9f:52:07:44:52:
d6:28:20:c7:a9:51:6c:31:0d:e5:23:47:23:f1:79:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:B0:23:6A:96:F9:88:B5:85:A5:67:EA:A5:9F:9C:D2:A3:3B:A9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7078523d-6813-4e9d-ba71-8d71aa591634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:8c:0f:86:53:d7:c0:70:ce:fe:51:cb:b6:b6:20:37:4e:27:
10:e4:cf:44:35:a7:27:d9:8f:15:e5:7e:b5:28:f1:ee:60:39:
f3:03:d1:05:55:2a:a0:95:75:11:b5:37:a0:b7:c4:ac:00:5b:
3e:35:07:17:e2:a3:98:03:4e:20:c4:4f:c0:56:40:8c:85:c6:
45:46:ad:6f:70:62:8d:4b:bd:83:c6:0c:d3:87:de:51:48:c7:
fc:5a:ad:7b:30:60:14:01:1f:15:ce:a4:b3:4d:51:78:e3:ee:
b5:41:26:35:66:36:2b:11:72:fb:d3:59:64:85:a5:27:1f:a7:
c2:48:ae:d0:0b:32:bb:bf:61:6f:f3:0b:d8:0f:36:4a:ca:01:
a8:e0:ec:41:0b:8a:1e:ea:85:02:78:c6:8d:ed:69:40:3c:42:
95:ea:fe:6e:dc:5e:e6:a9:94:85:7b:cc:6d:9c:05:34:7b:ac:
29:56:d2:a1:a7:1c:07:40:b4:1b:69:b9:c1:d3:8f:f2:a7:ce:
07:6e:5a:3c:74:0c:3d:8d:61:4d:de:35:7b:c6:4f:c7:e6:09:
04:ad:b8:51:e1:1f:46:e9:1f:51:c5:b4:ff:79:d2:1b:f2:84:
85:17:69:9c:ed:8a:5a:48:74:d2:ea:87:cb:61:dd:31:98:3b:
e2:20:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:08 2025 by rpki-client