Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d8226a1-9bb2-4fce-a9e9-b5d4d2a98ba3.roa
File: 9d8226a1-9bb2-4fce-a9e9-b5d4d2a98ba3.roa (raw, json)
Hash identifier: lmnElpwEnSy6DrgqVzftD3+15GO5lRB1vXbLOhJh5bo=
Subject key identifier: FB:3B:D3:34:BF:80:33:15:FD:AE:02:71:86:58:12:02:99:D8:3E:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 58050B9E26CD9DCE64F6077F672A7D4742DC5BD3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d8226a1-9bb2-4fce-a9e9-b5d4d2a98ba3.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.2.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:05:0b:9e:26:cd:9d:ce:64:f6:07:7f:67:2a:7d:47:42:dc:5b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:02:91:52:28:61:40:3d:31:d4:ed:a0:4d:73:
ce:a7:be:d7:54:4d:39:5c:ce:94:a0:e4:c2:79:75:
96:9a:eb:de:4b:dd:c2:cf:13:3d:58:5c:fd:00:69:
99:f3:6f:f6:aa:52:6c:e1:13:6e:67:79:b9:c3:0d:
32:14:4e:ae:d1:98:66:12:78:99:a3:04:2e:7a:49:
55:54:72:7a:5f:0b:b2:62:ee:d2:0f:b9:2b:2f:f2:
7a:64:69:f8:f1:df:89:a0:3b:7f:ed:76:ca:0b:15:
cf:e5:65:a4:fa:26:9a:e7:5f:98:e5:66:20:c4:2f:
0b:d8:5d:06:fe:d2:c9:3b:f4:91:2d:55:2c:d8:ac:
2d:66:f7:e9:e1:72:56:b3:9d:19:5c:b1:44:d4:4e:
24:fe:81:50:8c:66:ee:4d:fe:ad:75:b8:81:f2:f1:
05:ef:91:86:0a:b2:25:a0:f1:37:03:15:c4:c4:a8:
0a:97:04:bc:4e:d4:97:fb:77:40:0e:56:1d:7c:af:
3d:f4:3f:3b:57:b1:fd:8d:5c:a7:b9:cb:a2:e4:6b:
04:79:c0:5c:6c:e0:c2:96:68:99:51:3c:8f:5f:f8:
e8:ca:90:40:e0:ee:81:d4:f6:79:57:7c:ee:ce:0b:
10:d1:a3:20:0d:54:80:4e:49:0c:7a:3e:55:cd:33:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:D3:34:BF:80:33:15:FD:AE:02:71:86:58:12:02:99:D8:3E:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d8226a1-9bb2-4fce-a9e9-b5d4d2a98ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.55.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:cd:e3:dd:51:42:92:32:88:cd:66:44:d5:69:35:b6:76:
3a:2c:2d:b6:24:7e:c7:c9:79:bd:77:fb:78:2b:63:b6:70:4f:
e0:bb:6a:e5:fd:7b:2a:79:63:fd:ca:53:59:bc:bd:4e:25:b4:
80:64:f5:2f:f3:8c:cb:97:1e:a3:6f:4b:f6:a2:d6:94:5e:bb:
a2:80:fc:e7:13:bc:f4:23:d4:27:db:52:b6:c7:9e:63:37:16:
d0:ce:1f:66:4d:e6:23:e4:58:d8:9f:bf:2f:06:7f:24:0d:78:
1d:b4:dd:d5:03:f2:08:eb:14:c0:f3:1b:2b:da:e3:5c:9f:71:
1e:51:5c:9b:dc:c4:4a:f4:03:86:2a:19:e1:0c:09:5d:56:5f:
28:d1:4d:88:73:ee:dd:85:3f:a6:f5:ab:b5:fe:05:c5:4d:72:
18:7d:fb:c7:68:1c:34:3c:0e:67:57:fd:1e:8b:6c:0a:8b:14:
55:7a:6e:2b:64:ca:9b:f0:e7:b2:e4:fc:b0:74:f3:15:90:80:
87:fd:8c:1e:40:29:45:b9:11:e0:4c:9d:b8:e9:6e:ef:d9:83:
fa:fa:1c:03:df:b9:c8:d1:d5:54:c9:d8:f9:43:28:53:e0:49:
e9:4d:23:d1:08:cb:5e:61:0c:4e:2e:76:81:c5:4d:a4:ae:70:
8a:57:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:10 2025 by rpki-client