Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf757539-2eef-4131-8e50-ca653539405c.roa
File: bf757539-2eef-4131-8e50-ca653539405c.roa (raw, json)
Hash identifier: KEsi5oxDWL4fzneD6qC4dtgRTiK5Mn3CQ2Wps3Tvh/w=
Subject key identifier: 53:B8:CF:48:F2:51:F2:24:D6:D9:74:16:E2:E9:C5:76:98:CF:AF:E3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 49BBC63AB3C951F1B782B1E295BF227B7B6F9CD6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf757539-2eef-4131-8e50-ca653539405c.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.230.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:bb:c6:3a:b3:c9:51:f1:b7:82:b1:e2:95:bf:22:7b:7b:6f:9c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:26:67:3b:de:58:84:90:7c:bc:9b:a8:11:
8d:7e:30:c1:6b:22:b8:de:9a:44:51:f6:e1:35:89:
ff:a3:13:a0:22:21:43:39:72:ed:1f:51:ed:4a:cd:
25:ae:49:85:26:5d:4f:93:bf:07:47:d8:ec:54:8d:
0a:7f:d9:be:b7:84:7a:74:fb:7a:85:15:53:82:2c:
96:29:58:20:ef:54:82:04:7e:6e:b9:a0:16:93:a4:
36:98:bd:0a:c9:1d:f7:a3:9c:a6:49:99:e5:3d:99:
74:a6:b5:0d:1a:ef:18:ba:d0:c9:3a:97:95:13:b5:
16:76:f2:de:d1:ed:64:94:ca:8f:a1:7f:d9:a7:7c:
9a:30:1d:b0:70:d9:d2:41:f4:86:2e:3f:49:23:89:
ba:57:35:30:22:85:d9:69:76:70:5f:31:f9:64:0c:
fc:a1:94:ca:cb:5b:c4:92:38:53:b9:8e:cd:cc:e4:
ef:fc:ec:37:7f:31:9f:16:05:ea:ba:da:9b:2f:de:
a1:d0:40:e6:02:37:4c:2d:70:7b:1b:48:8d:a5:15:
aa:f7:eb:7a:38:3d:cd:5f:ec:5e:f4:c7:fe:a8:04:
d9:35:51:7f:1e:17:8f:d9:40:c5:4d:b3:9a:1d:8b:
bf:a3:69:21:c2:55:cf:7e:67:2c:7b:ac:78:5a:6a:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:CF:48:F2:51:F2:24:D6:D9:74:16:E2:E9:C5:76:98:CF:AF:E3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf757539-2eef-4131-8e50-ca653539405c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7f:d7:cc:aa:46:a0:9d:5c:c6:e5:c0:ac:6b:97:25:b1:66:81:
c3:9b:db:ef:1c:a0:e2:06:3c:bb:b1:8a:53:91:be:0c:6e:8c:
bd:19:05:47:51:75:dd:bc:69:2a:ed:ab:84:ab:f0:f7:93:2f:
58:ce:81:72:be:3b:a9:f1:28:e4:26:b9:c7:0a:7f:8f:93:f1:
1f:cc:1b:e6:22:1f:f5:5f:c6:b5:7d:3f:c0:22:14:bd:5a:cf:
d0:c7:51:35:ff:3a:ef:3e:8b:f6:a1:25:b4:e4:e8:19:62:27:
27:60:d7:98:5e:c2:cf:1a:27:07:f5:bd:8f:9a:49:a6:9c:d5:
eb:e5:2c:12:45:38:18:6a:43:a9:1a:c8:0f:35:25:bd:08:91:
22:56:5f:63:59:6b:87:32:b4:36:99:87:2f:7d:43:c7:7e:99:
ed:c8:b9:85:e0:a2:a4:48:f6:aa:ad:ee:e6:4a:0d:d1:4c:79:
73:83:cd:41:8a:42:64:44:e4:2e:73:e6:36:bd:3a:d1:39:9b:
b5:dc:55:ad:9b:38:4b:36:a5:a0:b7:6b:cc:40:ce:55:8b:fd:
ee:62:e2:0c:e1:a9:e7:d5:04:9a:74:c6:cb:7f:76:43:4f:70:
8b:c1:7c:67:43:6f:3b:6b:94:82:6e:7d:f2:be:7e:13:ce:da:
46:99:3c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:48 2025 by rpki-client