Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/871608f6-84aa-49b4-875b-315b0ead8404.roa
File: 871608f6-84aa-49b4-875b-315b0ead8404.roa (raw, json)
Hash identifier: GLNHyhv1S0FSKcRYlIx37Z2yrpa/OlJReqK9NpgyGQc=
Subject key identifier: B7:1C:28:4A:F9:45:B7:46:13:3D:5A:5A:4D:3D:A1:F7:04:DD:87:45
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3E2F2614D90B8CB82D7B483D151D9B8894B56ADF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/871608f6-84aa-49b4-875b-315b0ead8404.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2f:26:14:d9:0b:8c:b8:2d:7b:48:3d:15:1d:9b:88:94:b5:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:4d:53:7f:73:1a:6c:fc:8e:ae:cb:a5:e7:
2d:39:7d:73:46:2c:14:17:5f:16:43:00:48:79:b6:
a3:5c:34:9d:36:14:c1:62:77:69:f0:5f:40:18:5b:
31:2e:66:17:4f:12:a0:a0:62:e8:de:b0:64:d8:5f:
1f:b1:6a:83:32:73:b1:8a:6b:ca:e9:54:2e:ea:b0:
c6:74:32:e1:05:58:fe:6e:dc:1e:1a:2c:b0:b5:94:
a1:ab:21:0f:92:8a:26:be:56:20:ec:10:87:f0:56:
2a:1f:d2:c2:b2:76:c0:11:8a:1c:46:63:0c:49:dc:
e8:df:8c:17:05:dd:82:ad:db:43:47:72:c9:f8:39:
33:3f:05:15:fb:e7:2f:77:c0:14:49:eb:26:97:81:
77:23:76:af:95:74:5e:60:79:9f:9e:89:bd:b6:43:
c4:5a:59:8a:64:65:60:c6:c6:73:40:65:0e:ee:40:
1a:47:67:1a:ea:9b:39:96:74:a7:a9:0e:89:2e:bf:
38:26:ea:de:ca:6c:19:14:e3:8f:e9:c1:85:55:a6:
23:34:c6:81:a4:fb:f2:79:d1:5d:93:f2:9e:55:63:
3c:4f:cc:65:33:60:c9:db:32:b7:de:21:8d:24:79:
94:b6:8c:be:5f:61:ca:8b:a0:17:77:4c:8d:b8:c6:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:28:4A:F9:45:B7:46:13:3D:5A:5A:4D:3D:A1:F7:04:DD:87:45
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/871608f6-84aa-49b4-875b-315b0ead8404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e5:96:1d:c7:bd:fa:9a:96:92:10:72:41:77:7c:46:17:0b:
c2:1c:2b:43:7c:d6:64:14:79:62:42:25:34:30:5d:ac:d9:28:
92:5d:a2:42:1b:d8:a4:12:6e:2e:a5:09:ad:e5:20:d3:69:09:
3a:8c:6e:94:4d:f1:5c:54:a8:97:eb:a1:c0:9f:4d:c0:f2:aa:
9e:fc:72:e1:60:d0:93:d8:f0:3a:e1:27:90:a6:f5:8a:69:8f:
90:15:7a:e9:b6:07:c7:c4:91:06:a8:69:88:91:f2:b9:39:d3:
21:23:b0:34:0d:76:9b:e0:55:d1:51:29:5b:43:e4:34:2e:d3:
d6:67:74:df:1e:e3:c2:90:16:6c:06:39:fa:73:da:cf:e2:79:
05:df:d1:45:29:bf:e1:c5:11:87:f5:17:f0:be:2c:b1:49:3a:
16:39:ef:d4:ed:d0:8c:be:b9:57:c5:45:e2:f4:54:73:88:26:
29:d7:93:1b:cd:ad:31:69:c8:49:72:f2:b7:31:23:e4:41:58:
fe:2c:46:6a:6d:1b:24:10:1c:59:f9:c1:27:b9:9f:6e:74:99:
d8:2b:10:39:5a:90:57:92:69:ed:0a:e6:58:30:84:bf:ab:07:
f1:59:11:a3:0e:4f:b4:4e:81:2d:b8:4d:ef:08:56:7e:ec:49:
f0:1b:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:19 2025 by rpki-client