Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc94bd7c-350a-4d31-a7fe-1283efa7546b.roa
File: bc94bd7c-350a-4d31-a7fe-1283efa7546b.roa (raw, json)
Hash identifier: 5Ec+kxVSlU9RYumb7VX7ZExAhE8BLJBSEDoJ+8JEpKE=
Subject key identifier: BB:BE:91:0F:D4:16:FF:F6:62:08:F1:B3:56:AE:0C:7E:5F:AE:4C:2F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 06A1A315BD04309F868C6A8189A802C2F258B10F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc94bd7c-350a-4d31-a7fe-1283efa7546b.roa
Signing time: Wed 11 Dec 2024 00:00:00 +0000
ROA not before: Wed 11 Dec 2024 00:00:00 +0000
ROA not after: Wed 15 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 13.248.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a1:a3:15:bd:04:30:9f:86:8c:6a:81:89:a8:02:c2:f2:58:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 11 00:00:00 2024 GMT
Not After : Jan 15 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:4a:eb:89:d7:ed:80:06:94:c4:0f:80:31:
36:53:38:7d:71:3a:5e:cc:2c:ca:4d:93:53:68:96:
20:0b:64:cf:a4:13:38:85:6a:1a:90:19:9d:2b:7f:
54:50:4a:55:e6:ac:77:68:ce:87:53:93:4a:22:2a:
de:e6:7f:9d:93:71:48:c5:49:9b:5b:79:47:0b:3b:
03:72:03:a0:1a:ba:38:47:e0:95:0d:1a:de:fc:cc:
15:a5:51:a0:a5:f4:cb:7f:f6:25:3d:4f:42:46:0c:
5e:f6:01:9c:51:04:b1:64:81:02:51:87:ed:5a:36:
c5:1b:f7:ed:53:eb:3f:16:40:d7:ea:cc:8a:4a:70:
b8:c0:c2:57:f9:6b:50:1a:97:18:a3:de:13:be:5f:
35:5c:c5:0d:6b:d3:a7:dd:02:b1:15:54:77:ad:42:
6b:4c:15:cc:6c:af:42:11:67:e8:11:88:30:58:6a:
87:b2:68:98:83:46:25:1a:60:ac:99:12:de:90:37:
be:ac:9d:a5:de:f1:6e:b0:8d:a6:03:de:bc:47:29:
8f:07:72:09:1d:96:8b:71:e4:b3:73:c1:46:06:5a:
39:98:37:11:fb:1f:07:cf:a7:2f:40:56:42:37:52:
8c:6d:9f:74:e6:75:fa:aa:f6:aa:6d:cb:68:37:e6:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BE:91:0F:D4:16:FF:F6:62:08:F1:B3:56:AE:0C:7E:5F:AE:4C:2F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc94bd7c-350a-4d31-a7fe-1283efa7546b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.122.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1a:8b:71:b9:f0:f4:e1:c4:07:9c:2f:e4:6a:5a:8b:85:3f:
63:c4:ec:29:f1:bf:24:e7:5f:45:1e:d8:7c:9b:f9:c3:11:a0:
34:e4:36:01:8a:13:ad:7c:14:a1:b9:fc:6e:2b:60:d3:af:6c:
e8:15:7d:a6:ef:02:ce:b3:1b:e7:e8:ab:95:87:e0:03:86:48:
37:fb:a3:70:a1:4a:4d:6d:e4:4a:20:e5:f9:2a:05:a1:f4:50:
ad:00:e6:b3:96:f7:91:2a:d2:83:35:5b:ef:c6:e9:b4:a1:32:
63:e9:45:f1:3e:ab:36:57:c1:d7:9e:15:d6:28:ee:9f:78:3a:
86:42:97:95:19:ef:fb:f3:c0:6a:c5:8b:95:00:cd:8f:5f:b6:
7d:4a:f8:b3:1f:0e:c1:f2:f7:43:6c:b0:b6:89:cf:28:ab:5c:
61:18:f3:d0:0e:fb:bf:00:46:07:22:13:48:8d:e6:4f:81:94:
26:83:72:cd:0a:e9:5c:02:a0:e2:e8:50:29:f7:9c:43:43:45:
5a:0a:20:63:10:bc:99:22:70:5d:ca:d3:3f:99:22:eb:64:f9:
8c:c2:db:e2:41:6c:e2:80:ec:cb:2a:e5:6e:3a:22:92:6b:8c:
b4:40:9b:8e:84:de:7a:69:b9:dc:69:15:8f:9e:aa:8f:12:80:
fb:39:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:42 2025 by rpki-client