Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c7657a6-183f-47fc-99d5-3cd7b8fbab13.roa
File: 4c7657a6-183f-47fc-99d5-3cd7b8fbab13.roa (raw, json)
Hash identifier: kj6E4BvL+CDKFnAlAz+YQPZzBgdapUtXFCMWzIM9HRM=
Subject key identifier: F8:9B:A0:43:2A:43:93:E2:57:10:91:2A:BE:A4:B7:60:AC:32:39:81
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 647F04810AC8E615352D1205E2E61C24B1F81046
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c7657a6-183f-47fc-99d5-3cd7b8fbab13.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:7f:04:81:0a:c8:e6:15:35:2d:12:05:e2:e6:1c:24:b1:f8:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:89:b6:70:9d:6f:23:96:f4:da:fd:60:4b:
e6:7f:8b:62:0a:5c:7b:21:97:80:27:ca:30:54:74:
75:d1:37:9e:cf:0a:dc:4b:1a:d4:7f:b3:72:06:81:
2d:20:56:50:b1:46:2c:38:4e:3f:67:6c:69:13:43:
25:35:2a:cf:e8:81:90:62:81:64:0e:c9:10:ad:37:
ef:12:f0:23:0b:0e:be:f8:f6:c9:36:ad:b7:1f:36:
a9:37:13:21:05:d7:d6:c8:a5:f5:76:b2:18:5e:c9:
75:43:0c:82:87:37:aa:36:3a:21:0f:9a:47:8e:b4:
00:45:2c:ac:12:50:32:24:6a:ca:51:54:b2:15:2e:
52:1b:13:5a:ba:1e:6d:06:fe:ba:c3:80:40:5f:72:
83:aa:8b:53:0e:66:79:44:49:00:3f:85:8c:02:59:
86:b8:87:7e:d8:87:d4:1a:de:6e:c8:70:61:4e:73:
bf:98:85:79:23:9c:51:1c:d3:fd:35:7e:c0:a8:61:
26:41:fd:46:11:d6:f3:fe:f5:66:a0:f0:ee:44:4c:
b6:f0:96:9b:4e:33:8f:48:72:99:fa:ba:a6:78:43:
22:ca:b7:f8:20:2b:0b:b2:db:f4:5b:f5:4a:ed:d0:
d7:ea:05:fd:ce:2e:76:ab:a0:5d:96:3f:37:9d:1c:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:A0:43:2A:43:93:E2:57:10:91:2A:BE:A4:B7:60:AC:32:39:81
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c7657a6-183f-47fc-99d5-3cd7b8fbab13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.150.0/23
Signature Algorithm: sha256WithRSAEncryption
07:64:b9:d2:5b:0f:24:17:d1:c7:08:06:f3:60:1d:37:c9:a0:
ab:3e:e2:47:59:4c:99:af:59:f9:2b:32:3d:f8:e2:36:c8:40:
67:91:35:aa:80:38:9e:a0:cb:46:24:2e:27:22:5c:b7:41:65:
a8:e7:b6:51:0c:58:d1:d8:f1:48:97:7d:6e:3c:21:37:78:bb:
37:92:6e:c0:b9:6f:a4:85:ec:de:bc:8a:a1:67:d2:dc:9c:40:
12:93:62:db:6b:7a:35:ad:62:da:9d:6f:15:a4:24:2e:7a:ce:
e6:92:d6:ee:db:e4:eb:03:73:79:dd:87:c6:5c:9c:d1:00:cc:
f9:81:ac:b2:ad:d1:80:70:eb:5d:ca:6b:ad:00:78:e8:31:b4:
78:c8:3f:1d:85:8e:2f:be:81:ad:c9:d0:de:c1:3f:45:75:f5:
ce:4d:42:44:e6:91:d1:0c:c8:4f:8b:c6:11:77:06:35:aa:43:
72:6d:30:67:19:6a:fa:48:5d:82:84:a1:66:df:94:28:4a:d4:
88:37:6e:b9:27:78:96:e6:c0:b1:38:b5:e8:fb:d0:23:fd:da:
1e:8c:39:98:f2:e9:d4:a4:72:e3:58:c7:35:df:1d:c0:39:96:
c7:5d:c6:1e:5a:11:33:2e:43:74:b1:2f:53:7d:00:c1:a4:ce:
87:dd:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:23 2025 by rpki-client