Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b10112a3-7c32-49f9-9149-82c63faf0066.roa
File: b10112a3-7c32-49f9-9149-82c63faf0066.roa (raw, json)
Hash identifier: 8gItyvb/LF+Kteo+ayRHdul84mrfa8/jmPzbYTBRra8=
Subject key identifier: 33:17:FE:AD:83:9C:42:63:8E:50:A7:1D:20:C9:0F:0E:DA:12:73:64
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 06D10A931FBD814B8443956B9ED9D88C8FA190C8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b10112a3-7c32-49f9-9149-82c63faf0066.roa
Signing time: Mon 30 Dec 2024 00:00:00 +0000
ROA not before: Mon 30 Dec 2024 00:00:00 +0000
ROA not after: Mon 03 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 18.96.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d1:0a:93:1f:bd:81:4b:84:43:95:6b:9e:d9:d8:8c:8f:a1:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 30 00:00:00 2024 GMT
Not After : Feb 3 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:1c:3b:49:42:43:90:ec:78:72:16:3a:8b:
31:d7:12:05:e4:59:10:8e:01:a3:aa:36:d8:4c:69:
ba:38:b0:b8:88:19:ed:b1:2d:f1:55:0e:3b:7c:a8:
50:ae:b8:de:48:bd:ca:49:8a:60:93:b9:d8:65:72:
46:71:26:49:c7:54:9d:ce:1f:ef:85:50:fc:ef:e3:
3c:01:1e:98:fb:6e:e6:23:fb:6f:d2:bb:a6:89:ab:
f8:11:1e:6c:d9:70:fa:4f:4d:cd:2d:f3:83:b8:b2:
46:d3:52:4b:fd:bd:7c:77:b7:07:f5:25:8d:b7:90:
18:d9:51:e2:61:58:b2:90:20:aa:de:0e:c4:97:40:
af:20:da:c4:09:09:b3:7f:a6:25:69:6a:73:41:71:
87:b2:86:e9:50:ac:88:9b:d7:61:36:d7:57:a7:80:
74:5c:c6:3c:b7:ed:55:85:03:54:fb:61:34:99:1b:
86:65:7f:1a:61:c6:70:c4:ca:af:fb:fe:44:6b:70:
15:a9:eb:bd:87:16:3b:22:4d:23:59:09:87:e1:5e:
44:3b:d5:c2:80:f7:e8:5f:c7:5d:33:84:52:95:99:
fb:78:57:85:f5:1a:f4:2c:5c:76:b4:66:52:ca:06:
ee:5c:66:3b:c0:f7:2e:b1:7e:50:25:a8:9e:a9:1b:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:FE:AD:83:9C:42:63:8E:50:A7:1D:20:C9:0F:0E:DA:12:73:64
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b10112a3-7c32-49f9-9149-82c63faf0066.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.96.192.0/19
Signature Algorithm: sha256WithRSAEncryption
75:0f:3a:a3:35:e6:f5:d7:b0:93:8a:8e:fc:e7:d9:cc:55:a1:
b9:1e:b9:cc:58:19:49:bb:2c:a6:47:bf:8c:ea:c6:f2:b7:eb:
28:77:aa:29:96:e8:44:4a:dd:d2:63:05:b8:91:ce:8b:54:c2:
5a:68:e9:a3:c8:63:fd:ec:7e:aa:26:55:9f:ee:74:1b:8b:cb:
c6:80:b9:0a:c6:2c:04:fd:d9:80:7a:33:a8:48:0d:7d:95:70:
9a:d4:b6:5e:b6:8c:64:10:c8:62:22:27:60:58:9f:07:8d:18:
7b:39:b9:e5:ae:1c:f1:32:53:58:97:a7:82:12:17:3a:f6:6f:
d8:f4:5e:0b:71:3a:a0:9e:04:af:48:e3:75:57:3e:e9:eb:fb:
da:9c:66:44:eb:96:8c:99:02:e2:82:e6:e0:b6:2b:ea:59:68:
65:92:14:4a:72:74:83:5f:55:50:07:8b:a2:a7:83:98:ed:d7:
2a:5e:3b:61:82:4c:79:6e:17:ea:b3:c2:36:59:bb:2b:53:99:
87:3a:e2:28:89:f7:10:f4:6a:68:32:b1:94:fc:62:31:7d:74:
8a:39:80:45:6b:8a:6e:cf:ba:1a:75:d6:59:43:a8:0a:02:03:
f5:20:a2:29:6d:b1:75:e1:80:29:5b:ea:69:15:21:fc:a6:dd:
0f:38:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:34 2025 by rpki-client