Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156521c4-1579-40d3-81a8-50ca058b9c02.roa
File: 156521c4-1579-40d3-81a8-50ca058b9c02.roa (raw, json)
Hash identifier: F6jNleRb6Q+ccKPqCZ8al3vrlxg3ZSL2NnRRLLU+tVY=
Subject key identifier: F5:4C:7E:B3:8F:93:7E:57:4F:1D:68:FE:FC:45:92:0A:02:9E:98:27
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 051524C557037F5E4ED95E447686550BCBA29C7B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156521c4-1579-40d3-81a8-50ca058b9c02.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 54.80.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:15:24:c5:57:03:7f:5e:4e:d9:5e:44:76:86:55:0b:cb:a2:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:d6:f8:af:26:5d:f8:be:60:a8:f7:ae:11:
3d:9d:3e:98:73:97:70:71:8f:b4:15:dd:ae:16:f6:
70:49:be:d6:5b:72:6e:12:f5:5a:19:69:77:18:cc:
0e:5a:a2:c9:72:55:d6:23:02:84:c7:81:5c:70:e5:
b0:a3:2f:24:af:ba:e5:63:67:08:17:9b:83:8e:2f:
21:81:ec:50:d6:e8:b1:99:f9:d6:a3:0f:37:7c:84:
11:c6:5f:93:df:12:2c:d2:ba:26:f0:3c:b2:f8:08:
50:a6:d1:7c:8b:a4:8b:b0:27:3f:fb:03:c1:b1:db:
2a:fd:94:a3:d2:17:10:e0:37:13:9d:b3:fb:38:c5:
8f:fe:cb:69:5e:1b:d0:56:8e:76:3f:1d:76:7c:d5:
50:37:e3:59:9d:99:33:57:8e:b8:c6:21:37:77:1e:
e1:65:4a:9f:d8:16:82:3d:67:92:a3:49:3a:61:47:
28:2c:5a:f3:7c:64:b2:d5:80:4b:71:56:5e:47:d9:
1b:71:92:8a:a5:24:e8:bc:95:2f:a5:9c:ac:02:3a:
3c:4c:bf:a1:11:ed:48:7b:09:1e:27:78:75:7d:92:
71:51:31:21:cd:c1:6f:8c:6e:73:59:6f:04:41:41:
ee:0c:6f:20:11:c0:e1:6e:9d:87:b7:86:6c:a2:d8:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4C:7E:B3:8F:93:7E:57:4F:1D:68:FE:FC:45:92:0A:02:9E:98:27
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156521c4-1579-40d3-81a8-50ca058b9c02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.80.0.0/12
Signature Algorithm: sha256WithRSAEncryption
7f:aa:34:e4:58:62:3d:8a:d3:05:5b:6b:6a:f8:e9:0f:08:0f:
a9:5e:5e:b8:6e:26:62:ee:4e:12:35:37:d8:c7:6c:4a:d7:54:
ee:ab:54:cc:88:27:10:ca:51:f5:16:ef:63:27:ce:42:02:cf:
ba:a7:e5:92:f9:21:45:63:d4:04:f3:61:fd:1b:03:d7:ae:91:
77:fc:04:1a:7e:30:ee:5f:2e:6f:ee:37:36:b2:e5:74:00:f9:
be:9c:a6:48:8b:38:76:30:2e:37:81:0e:f4:94:2a:e6:8c:53:
dc:f7:c4:70:3f:de:b9:5c:8f:9f:0e:cd:1e:70:db:c0:ec:2e:
af:03:4d:24:7d:5f:4f:4a:e4:6d:87:56:52:ec:7a:0c:1a:b2:
84:74:be:a6:3a:e5:a0:b3:30:05:d0:0b:1d:85:97:70:e5:a8:
a6:e3:15:cb:42:15:98:7e:8e:23:47:bc:d1:e4:74:d9:70:fc:
6a:58:d4:d3:b2:28:2b:a6:bf:84:7c:50:1d:95:59:e3:1b:84:
74:78:e5:74:fb:8b:bf:02:d7:10:28:2c:f3:c1:38:75:f4:77:
35:7a:dd:5f:5a:56:23:97:fa:ed:98:8f:f6:cb:4a:3b:d9:b1:
e8:4c:73:71:41:d5:94:82:c2:8c:e4:f8:4b:c9:f3:9a:fb:c8:
42:e9:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:42 2025 by rpki-client