Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96351ac5-2b2e-409b-a828-d329af268cdd.roa
File: 96351ac5-2b2e-409b-a828-d329af268cdd.roa (raw, json)
Hash identifier: lZlDwAY0njKj4+2y1/TkXAbknJuIqH6TEV2QK+T/e4U=
Subject key identifier: 72:4C:01:12:A5:25:8B:2E:4D:F7:A7:77:8D:99:0D:F6:54:96:C9:33
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2BEC2ACBF764C1A865FE97CE42F20F2C303E0A61
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96351ac5-2b2e-409b-a828-d329af268cdd.roa
Signing time: Fri 20 Dec 2024 00:00:00 +0000
ROA not before: Fri 20 Dec 2024 00:00:00 +0000
ROA not after: Fri 24 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ec:2a:cb:f7:64:c1:a8:65:fe:97:ce:42:f2:0f:2c:30:3e:0a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 20 00:00:00 2024 GMT
Not After : Jan 24 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:b9:82:93:a6:2a:6d:86:6f:85:e8:a7:1a:
09:1a:85:88:d9:24:ee:94:db:70:e8:ff:1e:61:07:
85:fe:b1:e0:8c:ba:a0:5c:ec:20:5e:ca:f6:6e:fe:
d4:65:76:28:7d:f1:3b:55:12:02:8c:18:f8:20:ac:
af:60:bf:a1:73:ac:7a:27:11:a1:3f:cd:81:f6:11:
57:1d:5a:3e:fc:7d:b7:b5:e6:6f:12:49:89:4b:0c:
cb:a5:ab:a4:3a:cf:94:7f:e9:13:52:8a:5f:d6:7e:
21:02:1b:1f:c8:20:0f:86:ce:c8:15:b2:cb:60:1c:
51:f6:85:aa:bd:83:33:55:59:c2:fc:d2:c0:7f:b5:
b2:1c:1e:b5:31:2b:d3:74:3a:f4:d0:7b:5f:28:22:
3b:48:76:97:20:aa:48:a2:d3:29:b2:9c:7e:4f:f6:
58:12:69:04:66:4d:24:a7:f2:09:5e:b5:e6:b6:5b:
37:e1:41:a2:f1:b3:91:f1:af:7c:51:8b:02:ee:20:
0f:b9:9a:28:67:06:1d:6f:39:9c:bf:f9:d9:fd:e0:
50:e3:00:1f:8a:18:8d:39:7c:7e:e4:53:0e:2b:9f:
6b:c9:ab:53:28:f6:8e:18:1c:1a:96:98:0a:79:6a:
62:b4:7b:a8:4b:8b:69:a7:0a:f2:19:29:1c:99:ab:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:01:12:A5:25:8B:2E:4D:F7:A7:77:8D:99:0D:F6:54:96:C9:33
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96351ac5-2b2e-409b-a828-d329af268cdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.224.0/24
Signature Algorithm: sha256WithRSAEncryption
75:14:16:62:40:7d:33:89:9a:5e:65:50:15:dd:11:80:a1:20:
16:6e:b2:a7:86:97:58:6b:b5:3d:fa:ff:ee:16:e6:1c:ac:d1:
8d:4f:8d:68:91:01:38:0a:e5:bb:d1:f1:72:ca:4c:cd:bf:8b:
19:c7:0a:ee:97:f9:72:41:2b:39:62:e4:5c:6c:2c:2b:64:ed:
d7:7f:c7:a1:ca:f0:83:cf:53:2b:e5:37:71:17:9c:84:98:1b:
dd:32:a7:2d:08:86:5c:32:30:11:19:db:e1:c7:28:a6:42:dd:
5b:39:4e:2b:47:5c:c9:ca:cc:b9:73:da:03:48:bb:b4:ae:5f:
6c:54:f8:61:55:b2:51:ee:bf:cd:6f:19:7b:03:c9:9d:a4:59:
be:7c:b6:23:e3:fb:26:b0:8e:a3:9e:d4:38:2b:89:3d:49:29:
85:c2:94:c5:36:dc:cf:06:e1:d7:6f:27:3e:78:3a:1f:c6:ab:
6f:17:81:d0:d0:60:97:70:b7:59:8b:45:29:84:17:13:e1:0b:
c7:08:96:6d:19:c6:70:7c:25:a3:56:89:71:e0:16:b9:4a:73:
f7:b2:f8:90:ef:eb:06:9d:02:0f:ea:37:df:a4:8f:08:59:fb:
c1:50:26:2e:0e:5a:6f:02:d4:8a:97:9b:40:b7:6e:01:d9:8f:
c0:99:dc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:08 2025 by rpki-client