Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c47e2469-22c4-401d-8f25-1a1765157b44.roa
File: c47e2469-22c4-401d-8f25-1a1765157b44.roa (raw, json)
Hash identifier: s74KXKuwdoxZS6q7xX5pKEbm4gItGmt2Pbegcdepefk=
Subject key identifier: 9B:72:1E:97:41:BF:88:6B:92:49:AC:84:AF:A5:06:34:9F:35:C1:EE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1A58F697525D2365C6FF991234F56F1995C28DA9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c47e2469-22c4-401d-8f25-1a1765157b44.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 18.136.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:58:f6:97:52:5d:23:65:c6:ff:99:12:34:f5:6f:19:95:c2:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:9b:94:a1:f7:33:7c:6c:06:cd:b0:2d:33:
17:f2:72:36:c3:b4:bd:11:b3:d5:91:f3:3b:19:00:
24:5b:58:4a:40:db:d5:80:de:3c:66:b9:bd:fe:c8:
34:0a:13:47:eb:81:7a:eb:28:1f:a0:bf:3a:2e:e1:
b9:d1:9e:02:f7:ac:ab:13:2d:18:61:c6:9b:b7:a0:
81:46:07:0d:43:ca:bf:d4:94:1b:31:53:b1:76:01:
7b:1f:9e:49:46:90:7b:c2:28:f9:bc:7f:12:b9:aa:
12:e2:e0:22:23:62:43:2e:18:2c:f9:3c:11:35:e4:
90:7f:dc:c9:1a:a6:3a:c0:ed:6e:fb:aa:e5:47:be:
62:01:35:87:b4:7d:95:b7:ae:5c:d7:c2:83:79:82:
a6:bb:24:61:fe:85:3c:e8:b5:73:17:4a:f2:a7:7b:
af:e8:cb:e7:69:1f:dd:90:86:f7:24:c0:fb:b9:e9:
72:1c:32:b7:64:08:e8:a7:57:b6:6a:a9:e3:16:87:
52:26:b3:8d:4c:da:67:2c:65:76:29:4b:b6:20:ff:
d7:98:f2:8b:0d:45:3a:c4:9e:2c:9a:37:39:c6:00:
58:b7:aa:69:d0:2c:39:31:33:a3:ca:ff:e5:af:62:
56:7e:75:57:de:33:d8:ce:3c:22:28:37:dc:60:98:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:72:1E:97:41:BF:88:6B:92:49:AC:84:AF:A5:06:34:9F:35:C1:EE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c47e2469-22c4-401d-8f25-1a1765157b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:15:77:98:c5:f2:47:d8:79:a0:76:df:b7:fa:46:a4:c9:62:
3f:1a:65:22:04:e5:67:f8:e2:71:b0:a0:b2:ca:41:eb:32:35:
89:cf:70:68:8f:c6:26:f4:73:b2:75:40:4e:43:20:dc:75:78:
ef:23:72:67:21:ef:2e:d6:ee:ad:70:2a:92:46:93:18:dc:c9:
f5:8a:7d:75:5d:a0:56:ff:2a:ce:25:8e:31:ee:78:dd:02:83:
7a:00:5b:f5:7a:db:69:70:ae:1a:d0:30:e2:d9:2d:04:00:79:
3a:1a:04:fa:70:66:da:43:a9:d8:bc:51:d0:44:de:a2:c8:d9:
c0:80:49:da:af:b9:c6:2f:70:25:54:6b:8d:e9:37:e8:6d:32:
4c:58:f8:c6:8d:4a:60:42:d7:7d:a2:ba:7c:fd:52:20:09:f0:
67:01:66:ff:91:83:fe:cb:8f:7e:f7:37:3e:36:5c:29:4e:df:
9f:5e:ca:3c:e0:c0:e7:e5:ec:87:89:d3:9c:61:ba:ef:e1:7c:
1b:cf:fb:9f:7a:d7:7e:36:7f:fb:ea:94:1c:6b:21:74:2b:d2:
6c:e6:54:e9:f8:fb:9b:85:34:14:43:31:2f:f1:40:4c:97:9c:
1f:32:e2:7f:77:18:7d:0d:ae:6b:e5:8d:ae:f5:5d:0d:ce:9e:
fe:00:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:18 2025 by rpki-client