Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebd1c780-36ac-487e-a7a8-db145687e23a.roa
File: ebd1c780-36ac-487e-a7a8-db145687e23a.roa (raw, json)
Hash identifier: skDe1tkZKmKUps/rAV+3Mq+iWQunPt2ZMYWstzIqjnA=
Subject key identifier: D5:F6:F8:D2:D0:20:D6:D4:55:F8:83:D4:7D:91:B6:42:94:C2:99:D1
Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial: 150B884336FBF7B1D38B2ECAF39C8F2C3D3DADAC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebd1c780-36ac-487e-a7a8-db145687e23a.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.137.32.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:88:43:36:fb:f7:b1:d3:8b:2e:ca:f3:9c:8f:2c:3d:3d:ad:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:63:1d:50:90:20:95:ec:e6:71:45:98:48:9a:
7b:b9:8f:97:0f:a9:68:d9:38:2e:4d:71:b1:54:3e:
5b:96:7d:47:18:7e:61:8b:4c:a0:b3:6b:31:6d:70:
8a:d3:b6:47:4a:0b:97:04:44:00:89:19:2c:4a:14:
33:09:92:e7:72:e8:23:1c:2c:71:fa:09:4a:86:64:
70:c3:9a:bc:eb:62:55:5a:ac:fe:a8:35:1a:cc:81:
7d:1d:f7:9f:6c:0b:1c:15:fc:68:be:5f:60:a5:08:
e3:4a:71:aa:45:21:06:7c:9c:3a:30:d3:89:a2:9f:
73:a3:21:a6:cd:cf:ad:98:17:b1:28:31:cc:67:4e:
c9:f0:e1:b0:aa:65:d8:7e:e4:37:b2:e3:bd:80:b8:
af:56:3d:11:17:11:a5:6a:e5:ee:e2:19:03:e3:12:
19:5a:07:3f:60:09:df:9e:3f:21:0c:97:52:1f:61:
7e:3e:ed:e0:47:9d:92:18:17:05:50:71:88:6a:8c:
af:25:c9:02:2b:4d:a9:f3:bc:93:4d:f8:7f:7b:20:
bd:f6:c6:bc:a7:30:5a:c6:62:52:2f:95:c6:e8:f5:
57:34:04:61:c7:0f:49:79:49:5a:74:5b:c4:2d:25:
f4:cb:d6:53:99:72:09:b6:bc:2b:5a:e3:83:06:cd:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F6:F8:D2:D0:20:D6:D4:55:F8:83:D4:7D:91:B6:42:94:C2:99:D1
X509v3 Authority Key Identifier:
keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ebd1c780-36ac-487e-a7a8-db145687e23a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.137.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:34:74:92:fd:e7:5d:59:d3:52:a4:4c:ff:dc:04:3f:2e:7f:
ea:d2:81:31:dd:98:a4:9c:f0:a6:02:4e:cb:1a:a2:0d:24:d7:
db:de:e3:46:2c:fc:59:78:0a:48:4b:0c:0e:92:dc:c1:45:86:
f5:8e:ef:bc:cd:40:2a:af:7c:d7:6c:14:f7:af:46:f4:19:88:
33:d3:02:61:f1:3b:5e:07:07:fd:ca:71:9f:6a:97:ca:3a:d9:
07:bb:c2:37:f6:c7:ad:ee:6a:ca:be:e6:a0:a3:4b:42:7a:6e:
14:6c:ed:79:47:4b:a8:8b:36:30:ca:18:cb:9a:80:7c:83:51:
dc:97:df:88:88:c7:a6:e7:ec:da:c7:91:82:59:8b:24:2f:10:
71:04:cb:0c:70:c6:bc:3b:44:5f:12:6f:41:38:bf:ec:26:e1:
7b:11:57:3f:1e:58:a3:81:fd:ef:60:7e:96:3b:74:0c:96:60:
1d:88:b1:0b:70:1b:38:2f:37:8e:43:e3:69:8c:62:1b:0b:9a:
d9:1a:12:9d:25:2e:ed:b8:da:bd:5b:be:e5:fd:ae:b7:8a:c6:
72:70:af:5a:95:ad:8c:9b:a1:88:17:76:6f:d5:cb:d3:14:6c:
95:74:0d:2a:29:ad:7d:dd:6c:3d:78:0c:e6:10:9a:0f:d5:b3:
1f:04:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:54 2025 by rpki-client