Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa
File: 461f4724-f7c6-4955-97f0-5fb9ae192315.roa (raw, json)
Hash identifier: Mp02DV7PxAONhGpUhJ81KLLPIVz6nfeOFzUj4dbs45s=
Subject key identifier: 1E:33:47:EB:8A:AC:2C:2A:C6:E5:2A:BD:33:E2:2E:DD:99:3A:06:69
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 7EA0DC833E3E23ABE084810F485932C97B8D906C
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 184.169.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a0:dc:83:3e:3e:23:ab:e0:84:81:0f:48:59:32:c9:7b:8d:90:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: serialNumber=2d12b1f54e10004f1d77eacfb3b453f8e6ffa6a833fee76c606085dbe21d3853, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:e4:8d:e8:16:77:6a:c5:35:73:64:58:81:
15:25:31:eb:4d:c6:05:6e:d2:99:fa:eb:20:fb:09:
70:1c:32:27:4d:6f:68:33:1a:b5:9b:a9:a5:42:b0:
98:af:6b:9c:31:b0:ef:e8:b8:9d:76:65:5b:b2:4f:
bd:4a:d4:dc:7e:f9:ee:0f:45:13:9a:fe:bb:55:3f:
85:9d:43:c6:54:46:05:24:76:ef:ae:39:47:c5:c6:
93:56:b3:02:a3:19:bc:fc:54:ef:9e:0a:8a:d6:d4:
50:0d:e8:f9:9c:78:65:62:c5:b8:c4:3e:98:67:eb:
d9:3b:0f:3b:77:c6:c2:08:01:13:ae:1c:57:fa:b6:
90:ab:dc:12:19:55:5b:a6:73:01:19:5e:93:8e:65:
95:5a:5f:38:cd:ee:0a:9e:c4:16:8b:55:2e:d7:1f:
ab:82:81:c6:2d:c3:1e:91:4f:6c:a9:5b:1b:5c:d9:
51:49:fb:f0:45:e9:24:c2:fa:d6:20:f7:7a:7f:a1:
35:0e:a2:29:17:95:18:f5:0b:f3:c9:50:2c:15:20:
e4:48:3d:83:5b:30:00:86:07:52:60:4e:06:59:6e:
74:07:fe:e3:55:0c:e9:97:b0:2b:fe:bf:4e:e1:4e:
45:27:2e:42:0a:4c:e4:ad:2b:a0:9b:1f:55:5b:f4:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:47:EB:8A:AC:2C:2A:C6:E5:2A:BD:33:E2:2E:DD:99:3A:06:69
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/461f4724-f7c6-4955-97f0-5fb9ae192315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.169.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7e:29:1c:f9:96:49:3a:3b:2d:16:f1:c8:03:0a:6a:c0:70:4e:
4e:a3:b2:34:05:0b:f0:49:d8:3d:7b:d1:36:d8:3d:5d:83:68:
f9:25:45:13:29:e5:81:4d:84:be:eb:f2:a5:d8:a3:f3:9d:aa:
06:cc:38:c3:c1:76:90:47:1c:30:00:6d:cf:a0:34:95:48:b1:
f7:09:09:ae:b6:1e:76:0e:19:c5:9d:b6:39:e9:12:44:b9:d6:
58:84:23:8c:b3:36:e6:11:7f:e2:9d:a3:80:86:7f:4a:96:14:
24:b4:29:b2:78:d0:f4:6d:af:f0:5d:2c:c1:4b:dc:3b:35:71:
ec:1c:21:6f:23:25:49:25:7c:2f:6f:f5:84:78:50:dd:7b:2c:
12:e2:bc:0e:00:22:fc:08:e9:78:06:64:c5:4f:f9:b3:fe:6f:
61:fe:38:8c:7d:9b:34:99:2c:23:51:e5:7e:9a:f2:e9:5e:77:
4e:15:2f:e5:3d:22:cc:92:ac:28:88:be:85:a2:d7:d0:db:6f:
f7:55:ef:43:63:8f:cd:d6:4f:ac:2a:1a:23:ac:d1:f1:50:dc:
c6:3a:c3:de:28:36:48:c9:d7:ed:dc:1f:2d:a4:0d:13:bb:38:
db:ed:e4:bc:2e:db:e5:f8:45:6d:13:55:1c:e4:79:00:bf:de:
f1:19:91:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfqDcgz4+I6vghIEPSFkyyXuNkGwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWQ4MDM4MDVlMjE4MjNjOTMxOTg3ZTljOWMzN2YwNDAy
MGFhYmFiZjliNGRmZjliNjQwHhcNMjQxMjA5MDAwMDAwWhcNMjUwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZDEyYjFmNTRlMTAwMDRmMWQ3N2VhY2ZiM2I0NTNmOGU2
ZmZhNmE4MzNmZWU3NmM2MDYwODVkYmUyMWQzODUzMS0wKwYDVQQDEyQ3MWMzODc2
ZS1iOTQ0LTQ2MDAtOTJjNy1jZWMzM2Q4OTUyM2YwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYLeSN6BZ3asU1c2RYgRUlMetNxgVu0pn66yD7CXAcMidN
b2gzGrWbqaVCsJiva5wxsO/ouJ12ZVuyT71K1Nx++e4PRROa/rtVP4WdQ8ZURgUk
du+uOUfFxpNWswKjGbz8VO+eCorW1FAN6PmceGVixbjEPphn69k7Dzt3xsIIAROu
HFf6tpCr3BIZVVumcwEZXpOOZZVaXzjN7gqexBaLVS7XH6uCgcYtwx6RT2ypWxtc
2VFJ+/BF6STC+tYg93p/oTUOoikXlRj1C/PJUCwVIORIPYNbMACGB1JgTgZZbnQH
/uNVDOmXsCv+v07hTkUnLkIKTOStK6CbH1Vb9DCdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHjNH64qsLCrG5Sq9M+Iu3Zk6BmkwHwYDVR0jBBgwFoAU/iLg9yLMTwYM
WFoSb+aiZQA2XkgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmIyOTkxZi0y
MmM3LTQyZjctOGNmNS00ZjMxMzg4NTk3MzIvNWQ4MDM4MDVlMjE4MjNjOTMxOTg3
ZTljOWMzN2YwNDAyMGFhYmFiZjliNGRmZjliNjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYTg0MTgyM2MtYTEwZC00NzdjLWJmZGYtNDA4
NmYwYjE1OTRjLzQ2MWY0NzI0LWY3YzYtNDk1NS05N2YwLTVmYjlhZTE5MjMxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2E4NDE4MjNjLWExMGQtNDc3Yy1iZmRm
LTQwODZmMGIxNTk0Yy9HQ1BKTVpoLW5KdzM4RUFncXJxX20wM19tMlEuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAe4qYAwDQYJKoZIhvcNAQELBQADggEBAH4pHPmWSTo7LRbxyAMKasBwTk6j
sjQFC/BJ2D170TbYPV2DaPklRRMp5YFNhL7r8qXYo/OdqgbMOMPBdpBHHDAAbc+g
NJVIsfcJCa62HnYOGcWdtjnpEkS51liEI4yzNuYRf+Kdo4CGf0qWFCS0KbJ40PRt
r/BdLMFL3Ds1cewcIW8jJUklfC9v9YR4UN17LBLivA4AIvwI6XgGZMVP+bP+b2H+
OIx9mzSZLCNR5X6a8uled04VL+U9IsySrCiIvoWi19Dbb/dV70Njj83WT6wqGiOs
0fFQ3MY6w94oNkjJ1+3cHy2kDRO7ONvt5Lwu2+X4RW0TVRzkeQC/3vEZkdU=
-----END CERTIFICATE-----
Generated at Fri May 9 07:30:01 2025 by rpki-client