Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb93b4b-d566-4d72-bbfb-f177a7f9371c.roa
File: ebb93b4b-d566-4d72-bbfb-f177a7f9371c.roa (raw, json)
Hash identifier: c36h8om658Vcgrcgm2QxRyCSqTgmk8qpLfQg/i/Q908=
Subject key identifier: 27:47:4E:B7:B7:AC:56:97:0C:9F:C7:B8:FC:33:9F:79:F4:8A:68:4B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5F86517E39230204CA50A2D1D32B13A950D26CF3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb93b4b-d566-4d72-bbfb-f177a7f9371c.roa
Signing time: Mon 23 Dec 2024 00:00:00 +0000
ROA not before: Mon 23 Dec 2024 00:00:00 +0000
ROA not after: Mon 27 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 3.164.0.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:86:51:7e:39:23:02:04:ca:50:a2:d1:d3:2b:13:a9:50:d2:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 23 00:00:00 2024 GMT
Not After : Jan 27 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:f4:a4:10:19:e9:07:1e:fd:34:b8:cd:d1:
74:57:9b:a8:0b:8f:03:46:0f:66:e5:61:b1:43:8c:
16:6f:4d:4d:dd:b0:cd:9d:d2:e2:95:68:a2:41:63:
b7:c3:f2:db:58:5b:20:7b:61:5c:9d:1f:48:49:2f:
5f:19:88:3d:58:3c:17:ec:57:7e:d2:ea:c4:4a:50:
ad:6a:37:0d:a0:1b:8b:3d:85:76:8b:c4:71:3e:51:
ae:c4:13:f4:66:6c:c6:72:2d:11:2f:2b:9c:8b:8b:
b9:a6:13:a4:d0:fb:62:8e:f8:fa:96:f9:f3:71:bc:
fb:47:45:a7:c5:30:15:79:be:5b:bb:df:7b:4e:5d:
ad:98:64:4f:ae:f0:89:b7:64:ce:dc:bf:ff:1c:61:
e2:35:9f:49:ca:9b:c9:28:10:76:69:9e:a1:57:75:
28:43:12:43:86:35:88:34:33:06:4f:18:34:8e:5e:
ad:11:cc:f6:53:50:a5:bc:c3:9a:b2:e8:1f:a1:8e:
04:f8:1b:8d:c7:55:f7:b4:81:f6:33:2e:9f:b4:5b:
b3:f5:03:1b:1f:13:2d:63:41:e3:2c:00:f4:02:96:
6c:06:26:e9:6c:ce:75:e1:f9:ac:d1:1d:8c:18:70:
3e:6e:29:72:61:8b:bb:d2:34:ce:dc:4f:e9:64:81:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:47:4E:B7:B7:AC:56:97:0C:9F:C7:B8:FC:33:9F:79:F4:8A:68:4B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb93b4b-d566-4d72-bbfb-f177a7f9371c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.164.0.0/18
Signature Algorithm: sha256WithRSAEncryption
13:39:06:2e:9b:f7:d8:ec:9e:09:ae:4b:d2:a7:cd:0d:82:dc:
2c:b9:cf:63:17:9b:c2:20:c0:ca:f1:19:2a:5d:21:91:14:8e:
0d:be:30:92:8a:c8:7f:2e:bf:b3:9b:77:45:b4:58:03:b1:00:
66:d1:f3:93:65:50:43:73:61:31:68:97:86:f1:72:8b:fe:7f:
31:21:ce:d1:0f:d6:d2:d6:08:ae:29:0d:62:74:b6:a7:a6:b5:
32:e5:03:68:38:6d:1f:15:c0:7e:6f:3b:69:94:0b:14:05:2c:
d5:52:37:42:d1:5d:25:e9:f3:ac:ab:8f:18:de:c5:41:51:63:
a7:e3:dc:8b:b4:71:16:04:a4:2e:1b:45:e2:c9:f4:e2:16:90:
ce:38:2c:5d:45:8b:57:6e:ec:7b:98:6a:ce:fe:d0:7d:2e:b8:
fe:2d:7f:2a:fd:73:8a:17:e4:a2:65:5d:92:57:5e:f5:30:20:
a1:ff:28:7a:07:c1:e2:08:63:e5:f2:3e:9a:8a:72:50:b3:67:
f0:e5:cb:97:c4:64:ca:c3:47:fc:33:b3:90:33:df:9b:0f:a4:
77:9e:ea:b8:92:2a:de:d7:86:18:f1:fc:e9:ad:ad:17:f6:cb:
16:2f:2d:9a:ba:c8:5f:de:b2:79:81:03:b7:d7:6e:64:aa:37:
40:81:ee:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:37 2025 by rpki-client