Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb09f914-81d2-49d0-a4d1-4e3d5408725e.roa
File: bb09f914-81d2-49d0-a4d1-4e3d5408725e.roa (raw, json)
Hash identifier: tygVj6v0zWFm8eki+89EjT0rz5oMdjWlJ6cP260JUDw=
Subject key identifier: 44:CF:31:A7:41:D5:A3:51:7B:E9:F2:61:87:4F:C3:44:FE:93:D7:BE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 711606A07335C3FC37A0215FBF670FB5FE501968
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb09f914-81d2-49d0-a4d1-4e3d5408725e.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:16:06:a0:73:35:c3:fc:37:a0:21:5f:bf:67:0f:b5:fe:50:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:22:69:c1:9f:c6:35:27:85:ff:ca:f0:c4:
38:23:3e:38:25:4f:6f:49:79:88:f6:3a:54:51:67:
6d:e8:ba:0e:70:61:09:a2:cd:fe:be:1f:fc:29:ef:
03:11:60:25:69:02:69:98:43:c6:8f:3f:83:54:bd:
35:68:24:d2:02:76:ee:0d:67:57:77:22:01:dd:0d:
5d:fa:2c:18:58:2d:98:11:67:50:66:14:24:da:4c:
d8:22:f5:4b:5c:4f:d5:82:be:a9:50:79:7c:49:57:
b5:84:4a:45:d2:29:a2:05:9a:59:0e:30:5d:e0:20:
a6:46:cd:33:13:4e:7b:92:a8:63:08:46:ce:40:eb:
b0:4e:4a:f2:15:cc:20:15:96:9c:d3:87:6b:57:5f:
51:d6:58:e4:4e:b0:5b:37:28:1e:1e:86:2c:25:82:
25:8b:4d:8f:19:fc:f3:7f:2b:aa:89:a5:65:43:fd:
b3:e4:8f:db:37:37:9c:ed:7c:ce:70:af:41:fe:ff:
a3:69:f9:aa:ee:12:5c:ed:42:f3:70:cc:9d:87:8a:
0e:db:3b:fa:4a:8b:b9:0a:68:28:36:fa:f2:05:28:
0a:4d:f5:e6:ec:66:32:aa:47:67:8e:30:b0:5f:1f:
34:8e:71:30:e5:6e:b1:ab:d3:77:0f:a9:25:35:98:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:31:A7:41:D5:A3:51:7B:E9:F2:61:87:4F:C3:44:FE:93:D7:BE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb09f914-81d2-49d0-a4d1-4e3d5408725e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
Signature Algorithm: sha256WithRSAEncryption
57:0d:55:5a:5a:cf:e3:11:f1:dc:ab:99:8e:a9:2b:75:73:14:
00:7d:11:2a:fa:9b:54:84:b4:f0:1b:04:be:e6:bc:57:67:04:
3a:55:2a:b5:c8:18:09:fd:52:86:9f:c2:82:21:4a:47:7d:7e:
9e:41:68:32:74:93:62:a1:1c:84:40:b8:6d:e7:45:a8:7b:16:
6f:db:36:9d:c7:a0:33:23:08:74:fc:df:b1:f0:c9:91:82:8f:
c3:02:4e:6a:d9:24:e2:aa:c9:99:b4:6c:6d:fe:e0:72:e8:71:
d5:82:43:0d:7c:94:46:5b:30:fb:cd:ea:bb:6d:0c:84:26:25:
40:84:b5:d2:1d:6e:8f:b2:aa:ba:0c:4b:66:86:ea:9a:82:3e:
dc:45:dc:61:7b:81:b9:d8:7f:36:b9:b8:28:0d:9d:54:04:b4:
42:bd:9b:6d:be:34:43:c3:0f:9b:63:ec:5a:dc:49:30:d4:7a:
01:d6:57:d6:67:6e:d7:3c:d1:88:f8:a7:ce:68:a4:fe:ba:f5:
f1:33:1c:3d:a9:2b:b3:bc:fe:dc:be:fa:e3:e5:27:a5:36:24:
53:7f:7d:e7:44:98:75:f0:d4:6c:f7:17:fe:59:68:31:9c:ff:
24:dd:77:c6:0e:62:72:ab:b8:09:b1:24:f0:99:30:ba:7a:30:
18:d3:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:09 2025 by rpki-client