Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf812b11-4d50-46c7-b8de-97c65f2363d0.roa
File: cf812b11-4d50-46c7-b8de-97c65f2363d0.roa (raw, json)
Hash identifier: jDou/YSKQG+BFygjrKAfThB39WZ9oOBH6G1OCn0cxPI=
Subject key identifier: DB:60:C4:5D:12:72:50:E6:71:48:43:59:5B:72:A6:36:02:2F:CE:90
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7486BC7545CE170539845A3F5EB5D062826ED4BE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf812b11-4d50-46c7-b8de-97c65f2363d0.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.248.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:86:bc:75:45:ce:17:05:39:84:5a:3f:5e:b5:d0:62:82:6e:d4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:03:23:55:a7:4f:03:ca:a2:88:69:e7:22:
3d:4f:c7:40:f4:99:71:23:d9:e8:f1:be:48:b4:75:
41:12:65:13:6b:c7:35:4f:06:5c:dc:4b:a6:9f:84:
6e:5e:15:ea:78:ef:e5:38:7b:ce:36:21:4f:65:b5:
3a:e6:55:7e:b5:35:c4:c4:47:7c:4d:e9:eb:b8:f1:
a6:fb:22:44:51:ff:55:b2:40:39:ea:3f:14:25:a6:
06:ad:c8:e9:8d:6a:8f:de:42:f7:91:8b:89:5e:29:
fb:e7:0d:37:b2:25:82:b3:6c:ce:c4:6c:ce:33:62:
3d:50:0c:d9:b2:b8:2b:6b:2e:d6:9c:33:7c:83:08:
28:b4:41:15:47:2c:3e:ff:77:f0:fb:61:46:93:92:
f9:98:ee:20:a8:45:70:b9:9c:b8:b3:b1:36:8d:95:
d4:98:6f:0c:28:03:3e:98:0c:91:8e:33:e3:e1:9d:
52:ad:b1:02:9c:3e:28:3f:7b:38:b1:b5:26:e1:a7:
0b:ad:2f:fc:67:8f:db:f1:70:1f:ba:f5:50:72:2d:
90:f9:fd:ad:09:36:87:e4:88:e4:84:45:83:d2:83:
69:c0:2e:7f:ce:fe:fe:99:e0:39:13:ce:74:89:a8:
04:5c:5e:c7:49:a4:e4:c9:76:94:c2:a5:6c:49:5f:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:60:C4:5D:12:72:50:E6:71:48:43:59:5B:72:A6:36:02:2F:CE:90
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf812b11-4d50-46c7-b8de-97c65f2363d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e1:b5:ec:c2:36:bd:c2:4b:9a:42:9a:db:e4:7d:20:51:a7:
bc:69:8e:95:fc:c2:b3:1f:8d:2e:96:78:24:ce:cf:b5:75:86:
4e:3e:c8:97:56:e9:85:02:5c:70:c8:a0:7e:fb:d7:25:95:e2:
b6:fb:97:13:0d:3d:0f:53:49:4e:6a:bf:b6:c8:ba:c9:c9:f0:
83:b1:e7:72:1d:08:e6:ec:cd:b6:17:2e:ce:68:be:6d:af:7a:
c2:11:ca:53:d9:97:b1:38:6d:f7:c0:a5:0d:fc:8b:60:39:f3:
2a:b4:73:40:4e:60:66:56:83:b7:31:53:2f:a5:4c:d3:85:d1:
ef:48:86:6e:0a:6c:5d:1d:d6:9b:59:be:04:96:fb:b1:50:a3:
29:57:65:a9:d0:eb:8e:0d:3b:95:c7:78:d5:85:e3:31:4e:c9:
81:44:d4:7d:a8:84:91:b9:18:69:67:8c:06:89:fc:6b:08:39:
48:0c:d1:94:5a:9e:2e:23:7b:ae:35:b7:30:58:72:6d:8c:d6:
10:58:1f:21:59:d9:7b:72:8d:7f:37:75:9b:63:9d:26:cf:c0:
f8:fb:5b:f4:8d:94:4b:8d:08:98:3a:d1:43:af:3d:2e:e0:6e:
3a:ef:17:07:35:85:2c:e7:d0:43:66:aa:a9:fa:9a:cf:c1:ad:
04:ab:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:01:44 2025 by rpki-client