Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/769f3fec-e323-4931-9287-f96e2f059aee.roa
File: 769f3fec-e323-4931-9287-f96e2f059aee.roa (raw, json)
Hash identifier: lwDU0lp8r/ML7++ThxupLScgooOZgsO99rYMHYq3B9Y=
Subject key identifier: 3B:11:F7:F1:F5:1A:36:8E:2F:0F:4D:45:DE:8A:CC:76:74:C2:F5:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5C143530808B506D7C04463304F94EE8A08B71D3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/769f3fec-e323-4931-9287-f96e2f059aee.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 15.255.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:14:35:30:80:8b:50:6d:7c:04:46:33:04:f9:4e:e8:a0:8b:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:9d:5a:ce:9a:23:ba:1e:ff:4d:00:1a:77:
c0:50:03:48:83:35:24:03:6a:53:80:2d:cc:7c:a1:
58:d0:aa:44:87:01:a4:06:6b:05:dd:85:77:17:1a:
d8:a1:1c:35:1c:28:8a:12:35:86:08:2d:61:27:d6:
d1:a3:50:68:38:ec:3b:70:bf:18:6c:b9:21:8d:0f:
47:11:39:42:18:83:ae:81:c4:01:85:95:aa:36:fb:
1f:b5:30:4a:45:91:23:6e:74:5a:1d:36:cd:25:47:
d2:9e:a7:1b:bb:b8:b1:7a:b7:60:e9:f2:8f:f6:d9:
ef:21:32:35:72:66:da:2f:19:6b:e1:fd:c4:3d:8e:
17:fa:bc:59:35:c7:c9:fd:b7:0d:bd:30:eb:dd:39:
62:76:80:1d:93:82:55:bf:a2:72:11:4d:ea:f8:4b:
18:62:18:31:87:ab:0a:6b:9b:58:0b:b3:fc:64:7d:
79:6d:df:a2:15:f4:80:81:f1:cd:72:38:d2:e8:84:
03:28:f6:fd:5a:54:aa:b1:87:ff:b4:95:75:fd:95:
82:8b:9c:fa:09:27:e0:05:85:83:77:65:5a:5f:b2:
5d:8a:0d:05:08:63:b2:b0:6e:42:d6:42:8e:ba:2d:
17:e5:7d:6d:8f:61:90:3d:5a:a5:02:d0:77:58:78:
cb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:11:F7:F1:F5:1A:36:8E:2F:0F:4D:45:DE:8A:CC:76:74:C2:F5:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/769f3fec-e323-4931-9287-f96e2f059aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.255.0.0/16
Signature Algorithm: sha256WithRSAEncryption
88:3f:df:e6:5a:95:37:6c:dc:c5:80:56:9e:d9:f9:c4:b7:4d:
e4:26:0f:5d:20:ac:9b:ab:ac:e9:23:b8:9a:23:5c:e6:d2:ad:
f7:48:98:b8:dd:cf:6a:6f:b4:42:f4:a4:47:72:3a:da:66:f8:
6a:58:c9:64:57:20:3a:76:43:eb:9f:99:f1:5d:9a:ef:f7:ec:
f1:76:e9:1c:49:bf:96:1b:1f:35:59:3a:0b:aa:7a:63:cd:85:
8d:7f:f8:4a:b0:74:85:f9:2b:91:05:78:73:b9:f0:21:e3:41:
ed:aa:47:1b:3e:a3:72:99:ee:61:5c:1c:2a:eb:76:5b:e6:d9:
4e:fd:e8:f7:c8:21:ee:3f:7e:eb:99:6c:02:6f:9a:59:f4:e2:
38:02:bb:e6:5f:7e:1b:a2:01:cb:62:94:8a:64:db:4c:96:68:
6c:29:e7:fa:68:6e:bb:ee:43:1a:1f:00:d9:26:f9:98:a9:49:
2c:97:85:cc:3d:3c:23:36:ff:fc:2a:fe:2c:3e:46:27:1a:96:
34:d2:e9:62:05:15:3c:77:57:c3:94:a4:86:1e:cc:bb:53:f9:
3c:92:6c:b4:5a:58:02:b2:53:3d:27:38:39:b9:82:53:4a:34:
bf:94:22:4e:9b:b4:b4:f4:c1:60:c8:c3:7a:9c:bd:e8:a5:a1:
e4:94:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:33 2025 by rpki-client