Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9e7a518-5082-425c-a939-21ad9a957d72.roa
File: b9e7a518-5082-425c-a939-21ad9a957d72.roa (raw, json)
Hash identifier: jYiEdby/HtZsYDpVBol3wF0yblDpVZlkOr1QQbTmsyo=
Subject key identifier: 69:3E:14:AD:9C:AE:32:3D:63:6D:7C:65:67:3A:BB:DC:C0:7B:F1:38
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 794C32DE64733E21A9A6C3498AF2C541D134FCEA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9e7a518-5082-425c-a939-21ad9a957d72.roa
Signing time: Tue 07 Jan 2025 00:00:00 +0000
ROA not before: Tue 07 Jan 2025 00:00:00 +0000
ROA not after: Tue 11 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 18.113.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4c:32:de:64:73:3e:21:a9:a6:c3:49:8a:f2:c5:41:d1:34:fc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 7 00:00:00 2025 GMT
Not After : Feb 11 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:9b:30:3c:35:18:dd:f1:8b:5d:91:f3:e7:
81:64:1a:7d:05:7e:13:1d:7b:24:c5:cf:38:06:ba:
04:a6:f6:43:83:21:c4:51:3b:e7:1c:a1:0d:3c:c3:
a0:89:6f:76:84:9b:e0:1c:9e:7c:67:b3:ae:bb:68:
aa:66:76:1e:02:7e:8a:a5:43:a7:4d:a5:25:45:a4:
28:8a:92:49:ae:d7:1f:6b:4b:64:6e:02:38:61:d1:
0c:7e:ed:d0:20:44:f1:22:73:1e:b4:df:0d:8d:ff:
f1:6f:9e:2d:e1:ff:e4:cf:c6:d4:0d:32:1b:1d:d3:
46:43:12:ad:f5:49:1a:40:e2:1d:ed:f5:8f:48:08:
35:a8:b8:73:fe:a0:50:f8:9e:3b:33:c2:4e:8f:e8:
90:28:39:81:da:3f:d6:bf:fe:76:53:06:7f:6d:6c:
a9:8e:63:14:b9:39:13:af:e0:7a:98:8e:10:ce:87:
84:2d:02:44:a7:96:84:a7:b8:b4:53:a7:82:33:28:
a8:de:a9:8b:16:38:fb:92:db:ea:b2:c8:97:60:3a:
7a:16:5a:28:1d:48:40:d6:07:83:57:72:16:5b:0c:
bf:81:3c:0a:75:e1:93:54:50:6a:40:d9:2b:5f:da:
59:67:9e:f8:26:e5:14:37:4b:7f:43:23:a4:64:12:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3E:14:AD:9C:AE:32:3D:63:6D:7C:65:67:3A:BB:DC:C0:7B:F1:38
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9e7a518-5082-425c-a939-21ad9a957d72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:90:ab:57:58:65:e9:f6:d6:ef:2f:4d:69:ea:bb:73:27:11:
01:ab:da:15:ab:ba:d4:e3:10:77:32:5d:bb:f3:8d:1f:fe:a5:
66:c7:86:dd:c1:6e:4a:c5:cf:31:fc:76:40:cc:ce:a5:97:45:
77:42:55:16:de:e5:37:46:c3:e9:8b:1b:56:7d:76:b0:10:7d:
ad:76:91:52:34:c9:37:65:9d:df:f6:4c:52:bf:1f:96:46:6c:
db:f6:20:91:06:57:06:df:e4:27:c6:41:68:35:b7:6d:08:e4:
bd:32:15:b8:19:4d:1f:69:52:f5:0c:58:b1:04:b4:63:ca:d1:
09:49:c8:c3:ab:9e:4a:3a:26:9f:41:bb:19:39:a7:34:b3:06:
ac:36:ec:d6:97:89:1f:ec:21:4f:5a:99:ed:0d:67:51:9b:a4:
b5:ee:71:94:14:04:03:23:f4:6f:2e:9e:e8:0d:e5:01:16:d4:
38:76:dc:4c:0f:29:a6:52:40:82:62:40:99:aa:6b:5f:18:05:
ed:11:3e:aa:5b:6c:d9:55:70:f8:d3:0d:14:29:01:9e:d0:02:
91:53:94:55:ea:1a:27:8e:a8:ec:98:d6:5e:1b:03:af:e4:fc:
bc:46:36:31:fd:c6:cf:3f:52:ae:86:83:94:2a:b5:ff:0b:5d:
9e:9a:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:49 2025 by rpki-client