Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89deba92-a8f4-412d-9d98-cc220e210953.roa
File: 89deba92-a8f4-412d-9d98-cc220e210953.roa (raw, json)
Hash identifier: sSUVNWOjwmSqC7jdGfF6gQfYfyUVjI9MWVybLPH0T+A=
Subject key identifier: 9B:87:84:D2:8E:C1:85:C9:B2:F5:02:69:76:09:4A:35:85:F6:59:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0C45CF115A9DE2A3C1609CCB45E78B65478A8F29
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89deba92-a8f4-412d-9d98-cc220e210953.roa
Signing time: Mon 25 Nov 2024 00:00:00 +0000
ROA not before: Mon 25 Nov 2024 00:00:00 +0000
ROA not after: Mon 30 Dec 2024 23:59:59 +0000
asID: 14618
IP address blocks: 18.156.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:45:cf:11:5a:9d:e2:a3:c1:60:9c:cb:45:e7:8b:65:47:8a:8f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 25 00:00:00 2024 GMT
Not After : Dec 30 23:59:59 2024 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:34:9b:ec:10:a1:81:7e:88:60:5b:57:17:
e7:af:23:84:72:43:80:b7:9c:89:6e:1b:75:9b:5f:
c5:fa:c4:dd:87:2b:74:f8:2f:77:1f:52:3a:9f:47:
63:55:2b:6b:1b:31:e6:9b:58:13:c2:68:a7:97:e0:
70:54:37:8a:4d:5a:42:75:1e:bc:af:6c:84:44:1e:
24:fc:82:0e:6c:3f:04:e6:fb:16:7c:44:6f:a9:a1:
64:d7:c0:29:c1:c7:0d:2f:de:3f:72:dc:59:26:aa:
3b:3d:9d:95:d8:f3:68:69:cd:08:fc:1e:fd:49:4c:
d8:be:72:f0:e7:9c:96:2d:8a:a3:d7:78:a2:87:4c:
98:f5:37:a2:3f:77:0e:e6:ea:2a:41:ee:a6:8d:c6:
3a:55:73:a4:9c:be:7c:1d:dd:c7:ec:89:48:13:39:
42:3a:34:e1:f1:47:c6:0e:26:36:3e:7f:6f:2d:7d:
28:cf:e6:2c:65:4b:a6:6d:fa:a6:fb:c7:53:de:ac:
43:74:dd:61:be:70:ad:e7:1b:24:cc:61:4c:c7:49:
d5:05:d8:1e:58:71:29:80:b8:55:77:3a:c4:4d:94:
2d:d9:6f:91:8c:9a:34:0e:2b:03:7c:91:1c:64:7c:
77:cb:4d:89:05:20:2e:df:80:96:5d:b5:de:1d:14:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:84:D2:8E:C1:85:C9:B2:F5:02:69:76:09:4A:35:85:F6:59:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89deba92-a8f4-412d-9d98-cc220e210953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.156.0.0/14
Signature Algorithm: sha256WithRSAEncryption
06:dc:bc:eb:ec:02:26:c5:c1:be:64:4b:55:78:aa:cd:fa:2d:
27:1a:89:bc:98:04:11:7a:f7:6b:cd:ff:47:5a:1d:4a:9c:0a:
5d:f0:d9:dd:8c:5f:be:d1:2b:97:2f:f6:17:3f:1d:19:91:ff:
f0:69:17:c0:6c:76:b4:07:17:dd:36:63:b5:d9:ad:00:8d:c8:
b2:ed:7e:d3:99:0f:2e:bf:45:d9:a4:60:1f:8b:24:79:54:ab:
3c:64:59:bc:6c:11:02:1f:0c:74:74:6b:d6:fd:bf:ce:15:b3:
52:83:58:bf:36:d0:d5:09:59:c9:cb:dc:27:b9:da:f5:cf:0a:
27:9a:6f:e4:4b:8c:20:68:fd:54:48:74:93:77:4f:11:6f:42:
44:c7:47:05:ae:28:59:9c:f2:0e:38:f8:0e:41:27:f8:bd:94:
a1:c4:5e:6f:b9:19:85:c9:ac:74:a8:47:12:76:65:1f:b0:04:
e8:02:7a:3e:13:38:43:1e:f1:01:69:82:eb:71:3c:cb:88:8b:
07:a0:47:1c:76:a1:06:f1:90:bf:52:56:df:db:73:d5:31:53:
b5:7a:81:a1:e7:25:9d:53:99:7d:93:11:68:91:23:0d:53:16:
52:1d:6e:91:40:50:d4:71:c2:2c:a1:b7:6c:53:9c:ab:96:19:
e0:62:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:42 2025 by rpki-client