Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb59b3ad-c26e-4ad8-b450-0ec0d25ca59a.roa
File: eb59b3ad-c26e-4ad8-b450-0ec0d25ca59a.roa (raw, json)
Hash identifier: 7I0YDV4Wh0QqbMU2ZMbxkg4CBt8GhwfMhQKqv0Al3LM=
Subject key identifier: 52:67:A2:02:65:51:29:57:64:51:56:36:54:63:62:50:6F:A9:0D:15
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3898E25CF3E786BE55E8841D028D2E3C90CE8F58
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb59b3ad-c26e-4ad8-b450-0ec0d25ca59a.roa
Signing time: Mon 16 Dec 2024 00:00:00 +0000
ROA not before: Mon 16 Dec 2024 00:00:00 +0000
ROA not after: Mon 20 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:98:e2:5c:f3:e7:86:be:55:e8:84:1d:02:8d:2e:3c:90:ce:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 16 00:00:00 2024 GMT
Not After : Jan 20 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:c9:7f:5d:d9:ad:03:cb:81:f2:9c:c6:21:
a8:6b:17:11:67:ed:75:0c:ea:49:49:52:31:27:f7:
52:fd:ed:ed:33:4e:95:9a:24:16:d0:08:7d:46:42:
7c:7d:00:f9:a2:d1:bb:d5:29:f9:70:d5:18:c4:43:
d1:28:00:0c:a8:f6:02:e2:4e:d6:7e:69:c4:6d:9b:
2e:ee:7a:c5:f9:9e:86:86:83:32:aa:17:33:b4:23:
12:02:26:09:1c:d2:b5:85:eb:af:b4:f9:47:ff:6b:
b6:35:a3:d1:cd:21:79:c9:01:2b:1c:76:50:2e:38:
55:53:8e:0d:47:10:3d:ed:69:a2:77:49:22:fa:96:
10:f9:6f:1f:3d:93:04:06:1e:ef:cf:01:c5:de:83:
92:1b:2a:ac:cb:6d:09:dd:02:1e:12:1c:66:fd:3a:
ac:aa:5c:42:97:3e:e1:11:dc:f5:25:e4:f9:cc:26:
c7:73:fb:21:e8:9c:0f:f6:b4:70:ec:a8:d8:d4:41:
10:c9:6c:b6:31:65:b1:78:15:0c:ec:4f:05:73:f6:
ed:e2:c2:c6:83:53:cf:5c:59:d9:aa:84:0e:27:57:
4c:e0:25:c4:08:24:50:d0:65:e6:0d:b9:d0:bb:9a:
f5:3d:49:52:3a:12:d9:62:c7:63:05:a9:e8:ac:b5:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:A2:02:65:51:29:57:64:51:56:36:54:63:62:50:6F:A9:0D:15
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb59b3ad-c26e-4ad8-b450-0ec0d25ca59a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2f:77:a4:f7:ed:aa:a0:b7:d8:46:08:87:a1:96:f7:40:e9:30:
f4:8c:c6:d4:6d:74:25:09:d9:aa:e3:bb:73:80:c2:89:9e:d1:
12:8a:08:2d:97:80:b5:a8:a1:9b:2b:1f:1f:09:a7:bb:cd:5e:
a4:10:8b:32:2f:0b:83:39:39:df:92:be:8b:d1:bf:52:46:2c:
0c:e8:06:22:ce:d3:5c:f6:d0:b5:ff:4e:06:3d:fa:3a:ec:50:
1f:2d:37:b2:e2:ed:95:d6:24:7d:f3:2e:6e:fa:53:dc:60:a8:
49:a6:69:04:11:ea:7e:04:4f:28:06:c4:80:1c:d3:1e:da:94:
b3:13:7d:1a:86:f9:35:a9:9e:c3:5e:d7:a7:01:11:d9:90:f9:
77:01:da:7b:6a:e7:41:77:f5:db:3a:b3:56:f1:7f:d3:a6:49:
05:da:dc:11:df:cf:e9:68:2f:47:5d:39:fb:9c:2e:09:d3:0d:
60:85:a5:71:b7:3f:79:34:9b:20:4c:3d:fd:31:a1:21:bd:72:
db:08:65:54:e5:14:dc:5b:1b:30:1a:bf:ba:ea:dd:d7:df:44:
83:ab:00:66:07:b4:88:80:1c:f1:f1:1f:bf:47:ef:82:84:52:
99:b6:04:99:22:e8:e7:bc:c7:9d:93:43:6d:40:6e:ae:53:e6:
de:65:34:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:11 2025 by rpki-client