Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f94d6fe7-3d47-4838-8573-b5f8ee4e6884.roa
File: f94d6fe7-3d47-4838-8573-b5f8ee4e6884.roa (raw, json)
Hash identifier: G6S4/X+FzO8Q+6NAVOKAW/GkQYWq+xQdXB35wg9tsGU=
Subject key identifier: AE:F8:A5:5E:9D:BD:B2:5E:4A:86:76:80:FD:84:B4:3C:3D:F1:E6:BC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3DD960489EC0538050E52B9F8C9BBB9D4F787CF3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f94d6fe7-3d47-4838-8573-b5f8ee4e6884.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.71.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d9:60:48:9e:c0:53:80:50:e5:2b:9f:8c:9b:bb:9d:4f:78:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:d8:32:47:0d:c6:86:5e:ab:aa:e2:5e:52:
3c:44:8a:12:9e:fb:43:a8:ac:82:f5:ec:21:37:bf:
9a:43:00:78:c1:d3:4a:07:fe:f8:77:16:a5:79:37:
6d:e0:f6:7f:a0:e0:be:1f:61:77:26:a6:77:5f:8e:
43:c4:f2:ee:b9:26:3e:34:78:f1:09:6c:33:0b:56:
aa:1b:18:57:53:a5:9d:ff:17:9d:16:3e:e6:54:89:
a7:08:6d:64:a2:0c:51:28:ca:65:e0:51:eb:a2:59:
cf:8e:0a:16:7a:0c:6d:05:f8:6e:04:87:7f:71:d3:
ca:66:37:0a:93:ba:b4:78:36:c6:d9:85:0e:68:16:
5a:08:28:3a:14:49:0d:68:d7:94:84:5f:74:fd:4e:
f2:5d:88:40:fb:99:33:50:3f:58:45:4d:e9:0b:70:
e9:be:0c:e8:76:d7:07:62:c5:75:a5:00:18:9d:24:
63:fe:b0:56:95:cd:80:11:a7:8c:aa:43:dc:a8:a7:
8c:3c:62:c2:48:e5:59:36:e0:10:99:46:59:41:80:
d1:6d:28:95:13:30:0d:b2:64:1b:9e:90:68:12:49:
dc:e8:5b:ac:75:30:10:6b:03:14:5c:0d:d9:07:a3:
ce:73:14:56:19:24:29:ab:97:ea:0a:ea:1b:97:ac:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F8:A5:5E:9D:BD:B2:5E:4A:86:76:80:FD:84:B4:3C:3D:F1:E6:BC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f94d6fe7-3d47-4838-8573-b5f8ee4e6884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.71.126.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fa:f7:45:d9:9f:b6:0c:e1:cd:e4:9e:32:85:e5:e3:26:bc:
f2:e2:c4:e8:f6:12:ce:04:35:89:9a:a1:4b:98:48:71:a8:4d:
b5:f1:f2:f2:67:9f:85:ea:0e:4b:02:e3:9b:4a:d7:e9:65:61:
64:08:a0:0e:d7:14:01:fb:6d:74:1f:44:4e:f7:e5:de:87:cb:
25:81:57:5b:bc:1a:c8:b4:db:0b:d3:b9:0d:93:1d:93:a5:10:
28:34:28:f7:b5:a4:f2:0d:7b:2d:e2:53:61:da:f5:f7:68:49:
88:9d:41:3c:ae:a2:f9:84:8e:8c:46:be:57:c8:58:06:1e:7c:
f0:50:3c:64:6e:cf:4f:89:c3:82:7e:23:a1:42:cf:12:1d:6a:
71:22:22:61:5d:c7:b1:2c:6f:07:3b:b8:78:7d:23:a4:f9:76:
5b:b9:c6:5f:05:1e:ad:c5:47:61:db:07:86:5d:73:aa:a5:50:
7e:a2:21:24:64:52:eb:49:d9:e4:de:e7:8e:69:d1:89:0a:d4:
43:bf:e6:2d:66:29:47:5a:54:59:1c:8c:47:e6:94:75:2a:75:
22:59:a4:ef:67:9b:93:ef:63:24:2e:e1:41:65:9c:6f:7a:9a:
10:08:4d:95:31:60:a5:1c:77:aa:7f:2b:52:00:b3:b1:2d:20:
f8:60:cd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:04:24 2025 by rpki-client