Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7adf1fef-d314-483b-bf0f-42d55e1c4d92.roa
File: 7adf1fef-d314-483b-bf0f-42d55e1c4d92.roa (raw, json)
Hash identifier: ryAUwpc2sxzFdCSoiTxzWqa6vVH1eh4K66x9R0Uu8+E=
Subject key identifier: B4:51:98:51:82:4B:5A:A8:BC:88:0D:93:C5:2A:6B:00:60:71:61:83
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 57A73C16E83257D138189B0FFC7110A2E39AA600
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7adf1fef-d314-483b-bf0f-42d55e1c4d92.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a7:3c:16:e8:32:57:d1:38:18:9b:0f:fc:71:10:a2:e3:9a:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:42:ae:dd:b2:6a:31:be:98:38:56:f5:79:
a3:14:c6:ba:7e:be:ec:cb:82:4b:41:c4:e3:d5:b7:
4e:65:c3:a1:a6:69:09:c3:89:2a:49:da:06:ea:02:
34:fe:bf:d8:79:fb:bd:2d:69:b1:c9:da:62:ba:50:
d5:4b:ab:8d:33:16:22:0a:cf:10:5b:38:0a:c0:a8:
2c:12:5b:14:a5:b7:c6:ee:51:39:21:4e:00:82:70:
32:fb:94:a8:c7:ab:7a:2b:b4:6f:5f:06:ca:66:41:
e4:6f:67:98:df:69:b0:e5:54:9d:ce:3a:d6:ea:48:
b9:61:80:a9:b6:65:93:26:8b:2c:35:cf:5f:2f:e4:
ba:42:8c:73:11:d3:de:15:a3:37:b4:4c:e3:6e:ab:
e8:84:10:18:51:04:aa:67:d6:50:91:c6:94:91:0a:
f2:11:f6:4f:18:58:25:c4:3a:93:4b:8c:94:a4:a8:
5e:29:31:bb:88:55:b5:ca:68:41:d2:6a:af:f3:cd:
e1:ea:9b:02:7a:98:70:0a:43:d5:7e:61:5e:d4:ad:
65:26:0b:f9:ea:b1:03:fd:33:13:37:33:37:8f:90:
24:cb:80:33:c2:74:8a:fe:24:d0:2a:1c:e7:72:d5:
8a:97:e3:2b:d5:7b:12:4c:d3:80:17:b9:ef:c7:ae:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:98:51:82:4B:5A:A8:BC:88:0D:93:C5:2A:6B:00:60:71:61:83
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7adf1fef-d314-483b-bf0f-42d55e1c4d92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.209.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e3:2b:27:c9:33:ab:17:83:1c:44:41:a7:40:ec:3b:fa:e3:
7b:dc:7c:12:e3:3e:8c:7b:0a:73:2f:64:3e:6f:b4:97:16:79:
2b:7a:23:d0:82:80:39:7f:51:60:21:ff:55:2f:b5:45:c8:f4:
46:97:2a:b6:aa:fc:95:92:dd:e5:05:e6:f9:bd:26:80:18:88:
58:1f:ed:80:d2:7b:23:94:6a:18:a3:7e:6c:22:47:f2:58:73:
8c:5f:c6:0c:c0:bd:88:b2:86:d7:09:89:65:37:ea:08:44:48:
3f:1a:10:ad:ec:ca:08:88:84:3a:f4:cf:08:20:68:9f:0c:9d:
06:ad:b9:3e:da:11:89:7c:b0:70:b7:bb:ab:c4:24:16:c8:d0:
53:dc:18:8f:17:a1:30:0a:8e:e7:ab:a2:5a:d8:1f:a0:59:c5:
dc:c7:ad:7f:f7:7f:93:f1:e8:0a:78:5e:b1:91:53:97:b9:35:
97:af:56:68:4a:f7:c6:2d:fd:2c:d4:28:c0:00:c3:22:5f:bc:
cc:55:89:f3:cf:5b:5e:40:70:48:00:a7:cb:cb:10:aa:84:df:
89:4e:c8:12:6d:1b:55:e8:04:2a:a3:06:f8:ba:56:8e:d5:47:
c8:d1:91:f2:39:0c:92:b6:dc:dc:38:b9:bd:7b:38:54:2c:0d:
5b:e1:31:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:32 2025 by rpki-client