Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6c71c6e-c050-4809-915d-cbdced1558c2.roa
File: b6c71c6e-c050-4809-915d-cbdced1558c2.roa (raw, json)
Hash identifier: V3JjZJgbFSbPPeI7bcWY/qjXb/aMCdA21jvdVm8KiUk=
Subject key identifier: 99:0A:1B:2F:1A:F0:32:AD:3C:13:E7:50:84:24:3C:ED:46:87:5C:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 73E6A19253B4F324894C398E1ADF4DB544145901
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6c71c6e-c050-4809-915d-cbdced1558c2.roa
Signing time: Tue 14 Jan 2025 00:00:00 +0000
ROA not before: Tue 14 Jan 2025 00:00:00 +0000
ROA not after: Tue 18 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e6:a1:92:53:b4:f3:24:89:4c:39:8e:1a:df:4d:b5:44:14:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 14 00:00:00 2025 GMT
Not After : Feb 18 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:6b:40:07:09:a7:85:93:f7:83:69:e8:12:
91:c7:3f:3f:0c:1f:43:3b:ad:ba:db:d8:80:ec:4f:
b2:5f:b4:77:35:a3:0d:bb:bf:ce:26:8c:b2:93:3a:
2e:34:93:1f:51:11:eb:87:27:b1:2d:61:76:e9:dd:
e4:32:fa:c2:42:78:ab:1b:d7:b1:71:54:08:eb:71:
3c:73:2e:a2:0f:95:84:81:af:a1:77:a5:34:19:6a:
68:9f:a3:55:e2:11:70:9f:98:9d:1e:1d:83:b0:a8:
14:e8:13:19:0c:8c:5e:5c:53:a9:45:d1:6f:62:22:
79:37:94:4a:dd:59:e1:ea:7c:0f:76:36:61:4a:b0:
d9:3d:5d:a3:20:6c:84:ed:01:31:0e:4d:08:e1:1d:
f3:fc:62:73:74:d3:f6:5e:85:f2:9b:d4:79:9d:16:
85:1a:80:43:f6:62:ae:32:9e:76:5a:b4:e3:5b:0b:
ba:35:d2:19:75:eb:da:2c:0c:7b:5b:7d:33:42:1a:
42:63:73:0b:16:65:35:6f:27:a7:41:0e:ba:f9:21:
cc:58:d4:9f:41:64:51:ab:ff:aa:c4:ed:93:60:f0:
c9:06:6b:88:a7:99:b7:11:fc:c5:69:57:49:5b:85:
bd:f2:c0:00:b0:7c:37:88:cc:c3:14:11:16:59:96:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:1B:2F:1A:F0:32:AD:3C:13:E7:50:84:24:3C:ED:46:87:5C:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6c71c6e-c050-4809-915d-cbdced1558c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
24:86:96:db:d5:47:ee:be:dd:72:eb:d5:6e:5f:6f:ef:37:cd:
5f:ed:3c:d5:a0:64:1e:bd:db:ff:ff:ac:e6:27:53:00:c8:1b:
e6:7c:d0:f3:36:0a:4b:b8:b3:79:8b:b2:be:86:61:33:64:45:
dd:a7:2f:25:ca:7d:c1:e7:7f:81:8e:fd:de:63:3f:30:bb:f5:
55:8c:b2:7e:79:e9:d6:72:6b:09:7a:4c:f4:cf:8f:ec:1f:dc:
6c:8c:b2:df:2a:b1:6b:63:04:78:9c:83:a3:77:ef:10:77:a1:
37:c5:32:c3:45:79:45:fe:bc:4a:7c:4c:2f:bd:b1:9d:1d:90:
57:d3:ee:6e:04:92:f2:58:2c:38:d9:15:b5:f9:1a:02:35:f5:
7f:c7:53:59:03:fb:8b:40:d5:fe:e3:65:9a:3b:64:47:e9:78:
81:b8:24:f2:ad:f3:d1:b3:3a:5f:32:0e:be:2d:ee:c7:99:46:
93:09:ed:3d:16:61:b1:f2:46:e1:49:8d:29:91:82:fc:84:ce:
9c:64:40:d1:a2:d9:ca:aa:e7:91:de:94:b9:b3:12:99:5f:1a:
44:dd:bc:1e:cd:31:1f:6a:d2:8b:3a:d0:e0:bb:22:ac:79:4f:
49:ba:0c:f9:a7:91:12:d3:be:cc:b3:9a:7f:3e:4f:9b:09:1b:
8b:09:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:14 2025 by rpki-client