Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
File: 0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa (raw, json)
Hash identifier: Nt3EhXALJbymTGrez586sSymBCAoOQI9VwQlAUkaSHU=
Subject key identifier: BE:8D:14:BB:78:EB:15:68:86:0B:42:95:A1:56:AF:9B:B1:BE:94:48
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 361352457690D7B00BB4DA6B03C808835FA058A7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:13:52:45:76:90:d7:b0:0b:b4:da:6b:03:c8:08:83:5f:a0:58:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:16:f4:1f:80:c6:9e:fb:33:43:0d:86:de:
59:6a:e9:78:68:b1:a8:d1:14:6c:08:b0:8a:f2:d8:
c1:2d:c3:87:70:f1:c5:81:5e:1d:0c:1d:e4:80:42:
da:f5:34:88:b1:db:63:a1:53:e7:68:99:22:fa:99:
f3:8e:b9:4a:91:20:0d:b5:f6:8d:05:6e:c5:c7:02:
00:04:44:87:c1:c2:6d:48:0e:d7:9d:87:7f:6f:df:
04:94:21:da:45:e7:4d:a9:14:21:8c:eb:e9:3d:4b:
0e:0a:b7:62:4f:0f:20:de:7f:d2:8d:fe:42:6a:3f:
2f:42:c2:62:3e:6a:2d:94:a3:fd:3d:a0:2c:24:fb:
48:5d:b5:49:91:d3:f3:bd:62:bb:7d:36:61:2b:70:
37:29:fa:9c:ed:92:d2:2f:e1:69:17:fc:21:16:76:
3f:a7:c4:1e:f5:ad:30:85:e7:ec:27:d3:6f:66:c6:
39:b9:2e:d3:88:45:e2:71:da:cd:4a:e2:42:7c:cf:
2a:34:d7:18:19:03:bd:f9:c9:19:d9:74:01:3e:41:
ab:5c:53:0b:24:c6:45:e9:9b:7d:0b:ae:00:61:fa:
5b:f6:6d:0f:9d:b3:9f:8d:f6:76:c7:cf:9e:ef:b9:
c2:9d:7f:22:dd:6a:28:3b:9e:40:a0:f1:37:2e:a3:
59:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8D:14:BB:78:EB:15:68:86:0B:42:95:A1:56:AF:9B:B1:BE:94:48
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ea92d0d-8edc-48f8-a695-5c2e6a83a86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:5a:fe:7b:4d:ac:60:b3:ac:d9:14:2d:94:21:7c:68:8b:
85:3a:8e:6b:b5:83:cd:99:5e:38:40:fd:11:84:7e:8e:1a:48:
e1:e4:12:01:3e:97:ac:5e:b9:26:2e:44:92:66:64:a5:8a:6a:
19:fd:bb:ff:6e:cc:0b:d8:f5:a9:17:02:33:a3:2e:56:54:07:
1c:b4:05:01:27:9a:da:3d:d0:2d:21:12:56:c3:21:39:1e:2e:
aa:e9:04:40:62:de:63:b8:5b:b5:af:2b:dd:48:eb:3d:81:ab:
9d:3c:a4:07:61:88:37:0d:d4:50:dd:7e:fa:dd:82:e3:a5:03:
b1:3d:d8:d1:68:91:a0:d8:08:b3:3d:7f:d7:d3:20:00:62:b7:
34:a5:bb:67:a8:00:9a:6c:88:ac:20:22:47:63:46:34:64:4f:
ad:01:d3:78:be:7f:7b:4c:be:50:64:3e:ce:37:6c:82:b0:b2:
53:e7:38:92:21:bb:31:1c:19:c7:8c:9a:fe:bd:be:f4:93:bc:
33:e9:25:a4:67:12:c0:2e:0e:1b:1a:56:98:d5:83:48:74:e8:
6b:3b:f1:e5:a8:c8:7e:1f:44:df:11:1d:f7:9c:07:bd:75:52:
ef:fe:2a:74:45:fb:f9:11:d9:7d:31:c3:a8:10:ff:0c:58:a1:
71:80:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:51 2025 by rpki-client