![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfea5d43-9102-4e90-84d1-86314db7e820.roa
File: bfea5d43-9102-4e90-84d1-86314db7e820.roa (raw, json)
Hash identifier: /by9EoXGCp1MB7iwKwYW1ys03SK6gYSqgSUAJOl77Ag=
Subject key identifier: 79:7D:40:E3:6D:89:F1:33:5B:B0:38:6E:45:9E:02:98:19:7C:9A:76
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3B89AE701583EF270A15BC4CA2687CFBCB8DFDFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfea5d43-9102-4e90-84d1-86314db7e820.roa
Signing time: Tue 10 Dec 2024 00:00:00 +0000
ROA not before: Tue 10 Dec 2024 00:00:00 +0000
ROA not after: Tue 14 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.40.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:89:ae:70:15:83:ef:27:0a:15:bc:4c:a2:68:7c:fb:cb:8d:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 10 00:00:00 2024 GMT
Not After : Jan 14 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:59:6e:4e:11:68:e8:f9:a6:ae:c1:30:38:
25:e9:29:a2:f5:01:8a:54:6f:77:60:be:05:a1:73:
5b:c4:01:1e:07:40:25:83:6a:f0:9f:c3:94:96:a7:
11:da:73:dc:d4:a8:40:7d:6d:50:30:04:16:d6:56:
fd:1d:88:ed:da:8e:4c:60:56:dd:78:af:5b:45:4f:
59:6c:17:9f:3e:db:7d:74:5a:11:c5:f8:a9:7c:af:
4f:3d:02:4e:a9:a1:7f:f6:f6:f1:8a:ec:51:32:e8:
71:65:8a:c8:c1:ac:81:b5:d4:3d:33:da:08:87:58:
12:c1:59:c5:f1:97:b8:38:41:99:b0:ab:71:d8:e1:
85:99:83:9c:ef:66:8a:ab:38:c1:d7:9a:31:80:17:
60:bc:2a:5f:11:fd:8d:35:a5:f4:87:ce:1a:c5:57:
40:b3:b5:c5:de:ae:80:cf:fe:d8:11:02:55:ee:91:
b5:1c:a9:d3:1d:7b:0f:c2:19:01:cb:c8:c3:a2:16:
4d:d0:b3:f4:11:02:6d:cd:a6:bc:35:60:92:67:c0:
5d:73:7a:01:0e:05:35:81:7b:23:bb:ae:06:75:09:
f6:7f:09:d7:fc:c6:28:3c:4c:39:10:37:f3:2a:0c:
71:ee:8d:ba:00:b8:c8:ec:54:bb:02:fd:84:b0:0f:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:40:E3:6D:89:F1:33:5B:B0:38:6E:45:9E:02:98:19:7C:9A:76
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfea5d43-9102-4e90-84d1-86314db7e820.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.40.0.0/13
Signature Algorithm: sha256WithRSAEncryption
50:d4:ad:16:ba:d6:32:34:92:f2:f8:70:c7:28:47:58:c9:aa:
bf:76:85:d5:19:32:04:60:03:dd:d5:c5:ae:30:f5:76:cc:52:
45:f1:42:91:41:a9:be:68:f6:45:a9:b5:d5:d4:ff:58:58:64:
89:ac:f8:64:16:be:cf:c5:88:fe:24:aa:51:fa:e1:a2:f5:14:
cf:89:0e:84:ac:48:9b:47:c0:68:4e:d2:06:4f:81:1c:66:54:
a8:1e:86:a3:7f:c9:54:f6:08:a6:a5:01:1f:be:85:f0:4b:9b:
92:b4:23:31:eb:6b:b6:ed:50:2b:b4:00:0e:4d:ec:fd:a9:1b:
6e:38:53:d3:3f:80:46:6c:21:cf:fe:02:ca:be:48:93:c4:5c:
52:53:c4:eb:f2:03:18:0d:36:c2:07:a9:81:1d:18:da:b3:2b:
ab:2b:e4:c6:53:63:9c:6e:ad:8b:c2:63:c4:ca:4b:84:a9:bf:
77:1f:27:f2:aa:18:bd:93:21:af:b9:e8:7e:18:6b:c2:22:50:
1b:ec:27:27:8b:02:a6:c5:58:db:4c:72:ca:83:d5:75:1e:79:
fd:03:78:bd:56:c8:e3:8c:ad:1e:81:78:2c:3f:1c:61:ab:58:
5e:29:92:d2:71:a7:93:2a:32:af:b6:e8:55:a8:1e:91:37:4b:
8b:eb:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:09 2025 by rpki-client