Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b08a12e9-f65a-455c-b415-2ab6701dd381.roa
File: b08a12e9-f65a-455c-b415-2ab6701dd381.roa (raw, json)
Hash identifier: tPKfJTCXmdApMpnm67nRwp1yI9sngZr2UjuMBZJfU+o=
Subject key identifier: 22:FD:8A:AB:1D:7C:72:65:77:E6:85:1B:B1:12:7A:9E:CD:10:FF:4D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1716BA728D1D07071E34BC57370CDB4BB4F0ACC2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b08a12e9-f65a-455c-b415-2ab6701dd381.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.5.160.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:16:ba:72:8d:1d:07:07:1e:34:bc:57:37:0c:db:4b:b4:f0:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:f6:00:e0:81:6b:a3:0c:70:a7:3e:60:f4:
62:35:09:38:02:13:8e:7d:a8:b1:94:26:e9:6f:08:
b2:da:cc:ff:ab:42:5a:00:b8:4f:13:50:28:1e:c6:
ce:b4:01:c2:70:5f:d7:bf:e3:84:28:2f:48:dd:b8:
99:2d:9b:72:0b:2a:e3:7d:02:8e:56:e0:c1:7c:06:
9a:07:3f:c4:63:22:04:07:69:cf:d8:f4:4e:90:02:
75:35:b9:12:03:1b:f1:06:85:2b:d4:e2:2d:42:46:
69:e6:bf:de:23:c8:95:fa:73:87:d0:e4:3b:1e:87:
c3:71:ff:be:41:14:e2:e2:dd:47:02:1b:6f:c6:07:
82:58:fa:85:45:07:53:1e:f0:36:6f:33:7d:00:ca:
01:95:98:18:a5:06:6b:7c:a1:ed:b3:f3:62:88:be:
39:3e:fe:37:f8:e6:9a:6b:72:1a:b4:b6:e8:ed:0a:
a0:d5:90:75:73:b2:3a:e3:2e:2b:12:f0:30:38:87:
73:88:ff:b0:44:d0:ef:97:b4:9a:49:48:20:31:95:
48:51:80:79:54:2b:fe:1c:17:6e:54:ac:a0:56:94:
3d:72:51:53:b1:f6:8b:bf:05:85:14:d4:38:2c:73:
f5:5a:eb:74:04:0c:79:ee:3c:58:89:04:93:1d:90:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:8A:AB:1D:7C:72:65:77:E6:85:1B:B1:12:7A:9E:CD:10:FF:4D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b08a12e9-f65a-455c-b415-2ab6701dd381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.5.160.0/22
Signature Algorithm: sha256WithRSAEncryption
12:61:17:0d:fd:9f:49:82:0b:e5:83:04:5f:3b:a3:af:7b:0f:
0e:e4:8f:f1:89:06:df:d7:0f:16:a1:a1:76:d5:e5:17:66:30:
d1:69:f7:b0:41:92:92:fb:66:f1:79:45:35:ab:07:91:02:a9:
3f:45:6c:58:64:74:2f:94:de:f5:33:67:94:6d:2e:58:fd:b2:
cb:e5:38:36:45:f5:33:37:29:9d:9a:e4:ec:39:6b:5d:ab:29:
24:f1:07:f1:2d:de:e6:e8:1f:cd:9c:08:bf:0b:02:4d:d0:ae:
ce:75:75:52:cf:49:db:b9:49:88:e7:d1:8b:8a:da:03:9c:83:
34:bd:e6:a0:78:11:c6:89:d3:45:16:00:81:e0:c5:08:86:36:
c4:df:93:6b:3a:97:c1:3b:23:8a:87:4f:d8:90:1b:20:aa:ca:
75:56:2a:fc:e1:66:32:e1:b4:65:16:e5:27:4f:70:e1:27:53:
bd:18:f5:c6:0c:a6:21:0f:ef:80:10:21:a3:75:4d:84:8a:92:
57:a0:06:f8:b6:bb:29:d4:1a:d9:53:de:70:19:82:4d:3a:14:
88:ae:7a:d2:2d:d9:b1:b3:08:3c:4d:24:72:00:80:0b:1b:61:
c5:17:60:0f:4b:11:6d:d5:fc:21:4e:46:15:4d:19:71:52:ee:
8c:74:f3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:07:05 2025 by rpki-client