Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14367865-525f-4991-a81a-64f5cc8d6207.roa
File: 14367865-525f-4991-a81a-64f5cc8d6207.roa (raw, json)
Hash identifier: pRkvVY1ks4crv8ChabiGN/M/WqDIK4LEruXss+axKS4=
Subject key identifier: EF:FB:58:1B:77:67:C3:DA:72:4F:FA:D6:45:17:8B:85:27:BA:7C:F7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39E0BBB3025663BDBBD9F478864F6D4D685CA392
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14367865-525f-4991-a81a-64f5cc8d6207.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.78.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e0:bb:b3:02:56:63:bd:bb:d9:f4:78:86:4f:6d:4d:68:5c:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:be:6b:80:eb:ed:81:52:ff:79:34:45:32:
a0:b6:c4:0e:b5:c7:6c:50:92:6f:3d:15:1c:91:74:
f3:bd:56:ca:03:fc:0a:5d:72:86:ce:8b:5e:7b:72:
06:a8:12:e5:6f:04:a4:a1:50:21:a4:bb:47:d6:d6:
24:fc:06:f3:b8:9d:57:7e:96:0f:e6:a8:66:0f:69:
d3:0e:0b:9b:0b:c7:b0:13:04:cc:3e:d5:1f:7e:2f:
0f:d3:2d:8d:cf:74:30:d7:56:af:be:8b:8f:71:50:
80:b6:ad:22:e6:0b:0e:7d:54:a9:91:47:72:73:ea:
76:9f:b5:c6:f0:43:5d:5d:d1:2c:80:5b:e1:b9:e8:
1d:98:99:c6:8f:76:8d:5b:a0:60:64:73:3c:29:38:
f4:11:fc:a8:60:15:9b:23:f6:3d:3e:4b:fb:25:59:
05:69:e0:a6:56:1e:99:cb:48:7f:27:19:2d:42:4c:
18:3c:2c:11:6b:99:eb:25:57:ea:07:34:95:bf:98:
6f:d8:8e:52:56:d5:aa:33:d5:50:cc:e6:50:37:ba:
a6:36:db:00:60:6c:68:e8:25:28:ee:69:01:1e:bd:
d9:b1:8e:5c:13:30:f7:46:64:91:a3:23:a9:be:ca:
29:88:c5:56:e1:d8:a4:c4:87:27:dd:25:e1:0b:80:
69:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:58:1B:77:67:C3:DA:72:4F:FA:D6:45:17:8B:85:27:BA:7C:F7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14367865-525f-4991-a81a-64f5cc8d6207.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:73:02:55:43:26:6e:6c:53:c8:05:46:08:a6:1b:ce:dc:67:
9b:22:35:01:83:71:e4:56:82:37:11:4d:16:31:b4:05:d0:c9:
86:24:64:62:ea:01:11:a5:51:01:f0:10:8c:49:91:04:c5:c7:
86:ce:77:73:ed:08:1b:4c:dd:28:d1:ea:64:7d:4c:36:f3:df:
de:16:5f:60:cd:43:06:3d:13:58:c7:cc:b5:f3:f6:1a:cf:8e:
4e:9d:3b:ae:e8:88:f6:0f:d2:f3:f5:03:15:0f:bc:c2:ca:07:
ee:c0:c6:2a:31:93:cf:a5:a4:1e:bf:f6:03:36:e3:eb:99:6b:
cb:7f:91:7a:19:b1:f8:5d:b3:50:34:35:c9:55:38:b4:78:a1:
20:33:a3:f8:de:0d:5c:90:d0:2e:ba:83:b1:0b:78:57:5d:91:
0d:06:5e:42:6a:55:68:a9:96:c3:65:f5:0f:cb:6a:2a:39:a3:
88:8e:17:17:73:8a:c1:dc:57:cc:db:90:19:24:3f:ec:c1:69:
b3:ca:c2:4d:85:4a:35:b1:c5:ce:ec:4c:41:ad:ec:48:4c:6b:
a2:ae:c0:2f:01:5d:f3:52:4c:8e:03:a3:ed:75:88:ec:1f:a6:
4e:92:b1:25:89:64:0a:f8:4e:77:82:af:9b:3a:ed:58:4f:5b:
21:2e:38:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:54 2025 by rpki-client