Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa
File: e3544f10-f318-46d7-ba7e-86bfdebd892c.roa (raw, json)
Hash identifier: 8Hjh11NgMU8CiTbAKAeSPwmHe77zPapOK2MZkuFEZ6w=
Subject key identifier: C5:46:A5:93:68:B0:54:EB:1F:C0:D6:2B:6A:B6:B3:35:60:03:F4:AF
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5C28D0947FE51DEF7D901470C396472C6FF7F468
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:28:d0:94:7f:e5:1d:ef:7d:90:14:70:c3:96:47:2c:6f:f7:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:b2:6a:aa:95:37:d6:78:f8:fa:85:4e:53:
2c:db:bc:e4:5d:9d:4a:57:67:8a:0b:13:18:37:a8:
5c:ce:e4:86:35:ee:cc:10:86:7d:41:5e:06:ee:27:
5e:bb:33:25:a2:eb:3f:d2:77:bd:c3:ce:70:4a:09:
bc:d2:6d:26:cc:04:26:c2:65:49:28:31:58:80:6f:
05:92:53:56:4f:62:95:54:74:a0:a8:09:51:24:b0:
ac:f9:1d:11:ad:6f:39:bb:d9:cf:03:6e:16:7e:90:
10:de:c3:61:ba:95:09:d8:72:20:43:35:b7:53:e6:
33:16:71:c2:43:d4:d3:66:0e:e7:22:62:fb:2c:c7:
1d:79:b3:47:6e:f2:d8:c6:94:f8:c5:eb:b1:d4:8e:
0c:f8:f1:88:d5:1d:79:35:31:6f:24:85:56:da:41:
1a:4a:f1:a8:93:13:49:45:88:8b:eb:1f:6a:2b:28:
9e:9f:cc:52:b8:57:00:05:a1:6b:fa:eb:86:a4:d1:
e6:ae:ff:bd:0c:21:fb:93:36:9e:f3:cb:e1:d4:c3:
fe:50:37:9b:fc:e7:f3:50:50:ad:4b:8d:cd:5f:72:
7f:8e:be:f0:df:5b:a5:74:9c:9f:54:23:6d:05:93:
52:99:ca:ef:46:76:63:69:86:f6:48:92:15:81:86:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:A5:93:68:B0:54:EB:1F:C0:D6:2B:6A:B6:B3:35:60:03:F4:AF
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e3544f10-f318-46d7-ba7e-86bfdebd892c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.32.0/20
Signature Algorithm: sha256WithRSAEncryption
98:1e:c4:82:0b:66:f4:fd:99:51:2a:a0:dc:96:0a:ba:1f:4b:
ca:f0:cc:f7:03:6f:fd:75:0c:8c:39:f1:ea:fd:02:ab:66:29:
dc:b9:04:ae:64:b9:aa:74:3e:88:95:c0:0a:24:2e:4c:1a:02:
f3:09:4f:4d:ee:3c:b5:c0:5c:26:a3:35:e9:04:85:1f:dc:d5:
dc:63:a6:fa:67:78:3e:99:4e:91:94:1a:8e:03:1c:70:67:13:
81:f3:bf:6a:d5:6b:00:e1:a7:57:d9:9f:3e:b1:03:14:28:c9:
f8:94:46:f5:f3:72:5f:d9:e5:a7:f8:c5:8a:d6:d7:6b:82:36:
a9:af:3b:5e:34:c2:f5:44:ac:90:6c:b8:55:f8:80:ed:ec:24:
9a:7c:5a:64:01:5e:dd:62:42:2b:e7:bb:81:f9:b8:f5:13:60:
22:f1:db:ef:e2:6e:08:65:4f:6b:ca:ab:9f:6a:65:41:2e:6c:
1c:c1:86:51:e4:59:8c:03:cd:d4:45:af:92:a1:7a:50:77:6b:
1b:29:41:58:b1:ce:2c:b4:b2:d6:0d:f3:62:db:4a:3c:32:d4:
e8:1e:b3:ef:58:96:02:d6:3d:80:a5:d2:37:45:fc:2d:c5:43:
72:c7:a0:df:6e:78:77:4e:03:1c:be:5e:9c:fa:96:b0:e2:3d:
78:d7:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:00 2025 by rpki-client