Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa
File: ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa (raw, json)
Hash identifier: YOSZpvBANMu4eIl5jCdL01mdsO52Qf1wGpvPwqvFfPs=
Subject key identifier: 47:84:D1:27:59:64:35:E0:2A:7E:51:47:AD:77:45:B2:28:80:CB:2F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5B1101CC812AC208C658F5EA5C6723DD9EE994A4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.32.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:11:01:cc:81:2a:c2:08:c6:58:f5:ea:5c:67:23:dd:9e:e9:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:87:94:dc:a8:11:a9:2d:c9:bd:6d:51:b3:
a0:b4:07:89:94:33:35:9f:b7:a8:f5:a3:79:3a:61:
3d:63:6c:34:74:83:4c:e3:a1:80:b0:42:35:fe:9b:
bf:02:b1:51:b5:0e:61:6d:af:56:71:2d:d4:22:82:
84:5a:6a:c1:4c:43:26:0e:2f:cb:6c:3e:04:fb:5c:
50:c0:07:79:88:55:6d:8f:78:37:81:c7:aa:ad:c6:
a7:eb:02:bb:e2:b7:4b:5c:4e:d1:3b:77:4a:41:ef:
a6:4c:92:38:82:12:bb:f4:64:e3:31:ec:72:da:8d:
c7:4b:11:64:d6:c6:ee:53:c9:26:2c:9c:2e:80:cf:
51:6c:e6:12:01:34:71:9d:9f:aa:68:97:fb:7f:ce:
ac:39:24:c6:6a:b9:a8:f7:67:51:d4:fa:5f:0b:1b:
c3:6e:ce:1b:d1:00:7b:e5:a7:5b:b6:66:16:ae:66:
71:f1:5f:29:9e:e9:70:19:04:5f:f5:b0:d9:89:6a:
f9:80:7a:4d:c3:08:c8:6e:53:6a:a3:be:67:16:24:
23:a4:d7:d1:90:13:f8:da:70:b6:5c:ed:88:58:e6:
01:17:9e:be:40:d7:88:6d:2c:46:41:c8:f4:bd:3c:
71:99:bc:b6:74:5a:53:29:45:1a:c7:d4:0a:76:1b:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:D1:27:59:64:35:E0:2A:7E:51:47:AD:77:45:B2:28:80:CB:2F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddd1b6d8-c9d9-4d20-8c99-2e4bcf0538b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:86:d4:8f:90:fd:da:e5:3b:5c:a7:2f:58:cd:cf:1d:57:38:
3d:ba:e2:8d:60:65:ff:d8:80:3b:61:97:99:75:ff:af:72:c4:
ad:b3:5c:17:9c:ad:a2:c0:af:73:0a:74:f9:72:50:4a:e2:e6:
b1:36:d2:ae:01:3f:42:02:b3:4f:1e:c8:8c:7f:8f:d6:f0:de:
4c:84:95:e0:78:07:56:ac:ea:5c:76:ac:da:6d:f9:d0:ff:54:
b4:19:ff:86:3a:f4:5f:cd:e0:5b:14:34:d1:a0:6a:64:9c:25:
c3:b4:c9:19:6d:7d:b1:6a:38:ff:23:8e:5a:88:3a:03:d2:dc:
19:38:85:ec:d5:1f:23:41:95:49:35:f3:44:1a:de:53:9e:51:
7f:d8:33:5d:bd:a2:eb:b7:15:8e:88:95:4b:93:ad:ff:05:44:
40:e0:f0:ff:67:ee:23:b7:59:60:4b:19:15:00:6c:e8:c5:ca:
a4:fe:bd:34:78:42:d1:e9:e4:ba:29:68:64:bd:e0:d4:b6:5f:
c7:27:18:ae:37:ff:69:66:fe:64:86:ab:e9:26:7d:46:58:10:
5e:b0:7b:24:52:d8:66:d0:52:ef:09:83:cb:be:cf:9c:46:6c:
cd:81:3a:d8:47:7e:85:2b:fc:a6:c2:e9:b9:d9:db:8c:89:8a:
cf:63:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:41:52 2025 by rpki-client