Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d8a9c44-be6b-4287-8371-9f779a8d9bb5.roa
File: 1d8a9c44-be6b-4287-8371-9f779a8d9bb5.roa (raw, json)
Hash identifier: L9qz4Z+KcxhtRfRGbTZyiX24Ymvu7VqRe4/Jnnzjq5Q=
Subject key identifier: BA:EC:52:21:17:C7:1A:06:B3:5E:7D:54:58:98:A4:A3:40:63:81:F1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5231BB8F31F77736904E4976216B6E9D724B152F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d8a9c44-be6b-4287-8371-9f779a8d9bb5.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.154.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:31:bb:8f:31:f7:77:36:90:4e:49:76:21:6b:6e:9d:72:4b:15:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:84:ff:de:41:34:15:9f:66:4c:28:a3:f9:
a0:8f:69:8a:05:a7:8f:79:90:f5:55:c3:65:c8:17:
f4:2d:f1:b5:a0:90:0b:bc:78:1e:41:37:5e:09:1a:
08:c8:0d:95:3e:27:c1:10:80:ed:42:0b:db:b7:a4:
3f:df:b7:2e:9b:f1:ec:14:b4:7f:7b:bc:c2:34:94:
83:67:43:85:a7:87:f7:39:a3:93:08:e1:ea:35:02:
00:1d:31:b4:2b:50:93:b6:e2:ab:6c:75:4d:42:38:
9a:6a:5d:d8:be:b6:d0:98:56:49:f9:5c:b2:0a:29:
77:c3:ce:d0:29:d5:93:7b:2b:ef:0c:31:c7:9f:45:
b0:80:6c:6d:d5:ed:8b:1e:36:10:e8:5e:52:5f:e3:
a8:ea:7b:5e:31:c6:0c:18:f5:0d:bc:cf:3e:32:6a:
09:de:b8:10:32:86:4b:b0:b5:22:2d:c5:27:35:23:
86:2a:5e:9f:95:93:f2:97:9d:08:b2:a9:31:69:4a:
63:47:80:f5:9c:22:c4:a8:10:4e:23:f8:40:5a:ae:
96:a2:59:64:93:48:d4:f5:c8:6e:9e:cd:7b:cd:22:
7b:9e:63:fb:df:71:3b:73:da:14:0b:f3:be:15:b1:
ab:c2:a2:9f:d0:64:06:22:5f:3a:0f:0b:a3:30:a7:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EC:52:21:17:C7:1A:06:B3:5E:7D:54:58:98:A4:A3:40:63:81:F1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d8a9c44-be6b-4287-8371-9f779a8d9bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:ef:5d:67:1d:8d:06:96:bf:ff:12:e9:58:77:68:36:1b:d8:
10:07:4a:bd:a8:76:3a:18:f0:3f:73:45:03:4a:5e:69:70:13:
ee:63:26:32:23:8d:95:fe:e7:ab:de:43:5a:a2:d0:3c:dd:4c:
03:58:b4:aa:91:2d:f2:62:08:90:86:de:f4:f8:78:b8:78:78:
05:f0:b4:01:22:34:33:e2:06:92:e9:34:67:7e:3a:2e:1e:7c:
44:9e:0e:5a:37:d7:f5:db:87:b5:80:aa:f1:6c:46:3a:cb:41:
7a:85:fd:40:40:d1:cb:36:de:b3:c7:37:f6:82:92:a6:2f:a9:
59:4c:36:cd:7b:fd:5a:05:ec:b3:84:a0:3b:bc:b2:17:76:17:
46:1f:51:fa:2d:6e:3b:10:98:43:bf:2a:06:bb:7d:d5:d2:27:
8d:fa:1f:0f:7d:ce:59:cc:e0:c7:db:87:ea:2e:9b:00:73:50:
e6:a9:d9:45:44:62:ee:63:9d:65:48:4e:9c:d8:91:b6:83:81:
af:fc:ac:bd:1e:07:09:ea:d2:5f:54:c2:da:16:3a:53:49:a7:
57:d5:5a:06:d9:63:4a:3f:38:bf:67:5d:2a:48:44:5b:d3:a1:
80:bd:9c:cf:42:a5:a6:8b:a3:a9:24:27:6c:6b:f0:95:4a:78:
65:af:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:23 2025 by rpki-client