Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf413b9c-f4b5-4870-a7d7-01dbb47130ac.roa
File: cf413b9c-f4b5-4870-a7d7-01dbb47130ac.roa (raw, json)
Hash identifier: 5d5/q4hVQhbeH/Znd4dbxyyv4o+FPml141wRyM6bO1w=
Subject key identifier: 3C:6F:0E:89:84:86:A2:08:EE:E8:02:71:37:25:61:C3:2A:99:03:DC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 094D8831E4886502472B6E6AC6258B0D9CA9DE07
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf413b9c-f4b5-4870-a7d7-01dbb47130ac.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 18.247.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4d:88:31:e4:88:65:02:47:2b:6e:6a:c6:25:8b:0d:9c:a9:de:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:d5:32:b5:27:a8:5f:54:ed:fd:b2:d8:6e:
f6:04:78:0e:30:13:fb:60:99:8e:c6:4d:e3:94:7d:
b4:fe:8f:e4:ac:da:93:21:6d:d9:52:e7:e1:97:90:
48:9b:6a:b3:59:93:f7:47:07:cf:8d:85:9b:9b:03:
42:9a:99:85:98:96:58:10:51:67:29:14:1b:1a:fa:
2e:17:20:9a:e2:b8:17:f2:21:20:24:35:d5:b2:97:
b2:17:14:b5:df:d4:d1:32:5e:c4:09:b0:e1:41:2f:
93:f1:d7:ac:fb:41:27:72:da:17:17:47:04:6a:8a:
1c:62:56:d6:5d:44:c4:4b:1a:d9:12:da:f0:f9:ea:
10:87:1d:fa:70:8f:e1:2a:60:e2:26:1d:61:af:4e:
2e:1d:3d:8a:d1:44:8f:24:a8:94:54:15:8f:71:81:
68:25:51:ee:3c:a7:98:75:6a:ae:69:97:ad:18:1f:
77:55:b5:6e:1d:07:eb:39:9d:1c:32:0c:eb:e2:2a:
91:1e:c1:74:a5:60:e8:32:7f:77:bb:23:f8:b9:b1:
db:02:84:2f:9f:cd:d5:8b:fc:cf:6a:69:88:9e:85:
bd:bd:43:b4:e8:a9:9d:2e:4a:1a:1f:f5:85:c9:65:
ac:51:37:e6:e4:8e:e7:6e:b5:84:cc:37:12:d3:79:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6F:0E:89:84:86:A2:08:EE:E8:02:71:37:25:61:C3:2A:99:03:DC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf413b9c-f4b5-4870-a7d7-01dbb47130ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
98:47:88:c0:12:6f:3b:4b:a7:35:38:ad:51:2b:5a:3b:a7:22:
27:fe:37:9d:d8:91:32:36:29:7a:1e:0e:a0:a6:29:aa:f0:31:
ad:c2:fd:5f:b8:8e:70:80:72:96:dc:d1:14:cd:e5:e3:4d:f1:
00:e9:3b:32:c3:b6:30:d4:85:02:91:74:30:57:bd:9e:96:79:
22:50:bb:97:b8:35:28:6c:46:ba:fa:8f:b9:bf:a4:23:38:08:
85:6c:fd:9f:b1:7e:38:67:0b:d3:ae:39:35:63:80:cb:44:46:
03:1e:05:2e:b0:9f:06:55:aa:5d:80:10:31:4b:f1:d4:5d:80:
58:c8:58:64:7a:d5:87:1d:db:19:01:10:e7:97:35:04:86:d7:
9e:b1:8c:06:f1:20:e3:b0:72:19:01:41:38:86:cd:c3:a6:2b:
aa:ee:40:b0:7d:14:3f:72:db:e6:32:2d:ec:1d:00:f4:49:c3:
21:44:f0:e4:ce:2b:7f:02:b5:b0:55:48:5e:f7:b7:85:17:5c:
38:b5:c6:f3:0d:2d:3e:cd:e1:ce:b2:10:5c:db:c8:42:e1:af:
eb:49:31:92:45:3a:7d:a3:36:c1:43:f0:bb:15:ee:f8:0c:cc:
31:05:ea:74:91:4b:84:ba:1f:c8:64:99:38:73:ad:33:40:b4:
c5:e5:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:48 2025 by rpki-client