Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bb7ba53-a4ab-4392-80de-d1d644f0f67e.roa
File: 5bb7ba53-a4ab-4392-80de-d1d644f0f67e.roa (raw, json)
Hash identifier: 0TqS4/W3cYvSHxSNndvQQODZY9Jx9c6SJZ6+R5YBoVQ=
Subject key identifier: 78:DB:12:4A:5D:2B:09:A6:12:CF:1F:26:2C:B1:CD:C9:82:D5:D3:46
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 46D3CCF6D7BB996D983EBB186C3E7663E57458C3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bb7ba53-a4ab-4392-80de-d1d644f0f67e.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 16509
IP address blocks: 18.163.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d3:cc:f6:d7:bb:99:6d:98:3e:bb:18:6c:3e:76:63:e5:74:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:d3:3a:8e:f9:a3:2a:a1:a2:77:cd:68:84:
70:f4:f1:db:34:13:6f:9c:ef:6b:b4:20:78:80:66:
28:01:54:37:16:03:62:7a:97:b3:bf:b9:5e:ee:88:
f7:05:9d:92:94:cb:ab:23:32:4e:17:0b:c8:9c:98:
9d:1c:24:bf:ca:8c:35:25:3c:7a:ba:d8:be:7c:aa:
d7:a7:0c:de:60:cb:9d:8f:c5:93:00:bb:8e:22:e6:
37:1f:10:2e:6e:4e:92:26:57:c3:36:02:96:61:b2:
74:a4:27:b1:dd:06:ae:85:c5:92:97:76:62:93:4b:
43:d2:cc:37:37:ff:71:17:8e:f4:c8:2b:a7:5f:40:
0a:69:65:a7:12:a5:13:db:b5:74:36:4e:f4:40:ba:
d0:1b:0a:fe:70:4a:dd:b5:b1:04:73:a0:e1:8d:d7:
49:be:35:eb:95:29:a1:38:7b:90:7b:0b:61:33:bf:
a8:e3:b1:7d:20:7e:73:eb:a3:bb:93:9d:b3:1f:4a:
b1:b6:f7:4a:db:8a:96:38:50:db:a0:86:0d:8d:cc:
2b:d7:59:11:b2:8a:20:3f:de:19:2f:c3:00:ca:f5:
92:d4:9f:aa:16:5a:45:c3:df:11:a5:6e:34:76:5d:
ab:03:35:8a:96:a4:be:50:cb:eb:15:2f:49:c8:8c:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:12:4A:5D:2B:09:A6:12:CF:1F:26:2C:B1:CD:C9:82:D5:D3:46
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bb7ba53-a4ab-4392-80de-d1d644f0f67e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.163.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:f6:00:f7:c4:ef:96:04:0d:17:37:ed:27:a0:a2:e0:66:69:
05:6e:63:38:5c:0f:30:8e:3b:73:3f:30:d1:a8:8b:24:b0:20:
47:60:2e:6b:eb:85:5c:0b:d3:28:15:1e:21:f2:ba:20:fd:d9:
ad:d2:f5:a8:28:64:1e:f7:d9:95:10:1a:b7:4b:c4:72:e7:9e:
54:05:ac:14:d5:e3:6e:a9:52:fc:9c:2d:2c:4b:01:d3:c3:9a:
74:fa:90:76:42:54:97:e1:f6:af:e0:8f:12:93:c2:88:c6:4a:
c7:cc:e5:37:c7:29:4a:3e:b2:02:a8:fb:f5:6d:44:63:bb:51:
e7:97:81:ba:c1:2d:50:18:8d:f0:94:a7:c2:4e:bc:e3:96:f0:
89:e4:38:df:81:f7:8f:ab:70:7e:23:22:f2:f9:ff:60:db:7e:
37:17:ee:ba:a0:b6:83:8f:7c:31:f9:a5:90:5d:bf:ad:3a:b7:
1e:e9:21:c8:7d:60:b8:65:01:33:b3:da:ea:26:74:b5:c3:2d:
c2:39:e7:33:83:d0:4a:fe:ca:70:5f:4b:c9:06:d3:68:97:29:
76:d2:68:5a:bf:93:60:bd:57:96:9c:6a:55:f5:0b:ea:80:db:
df:0a:cf:77:69:fe:91:52:32:b8:dc:48:c7:c7:61:e7:41:30:
1e:51:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:15 2025 by rpki-client