Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd6f0fed-1983-4a87-bdd7-0cd99694dc86.roa
File: fd6f0fed-1983-4a87-bdd7-0cd99694dc86.roa (raw, json)
Hash identifier: BRfyeWESztWKXVb+kSVlsRAfTqUEGdUXAs0nynQPaEY=
Subject key identifier: D1:AB:4B:6E:C2:96:16:4E:FB:45:DA:7B:D1:00:D8:9F:D2:C1:5F:E4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0E99FAFC9C74657A3E1E4A593304B940C72863EC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd6f0fed-1983-4a87-bdd7-0cd99694dc86.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:99:fa:fc:9c:74:65:7a:3e:1e:4a:59:33:04:b9:40:c7:28:63:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:70:85:1d:c4:34:b1:68:75:74:5e:04:19:
a5:f3:ff:e9:a1:24:b8:d6:15:4c:5c:83:b0:5a:98:
2f:2d:88:38:53:78:3d:3f:6e:fd:47:c1:a4:26:98:
44:4e:9d:5f:14:20:33:e2:09:95:bb:e9:43:07:25:
2b:53:5d:d9:5a:67:08:99:4f:85:24:b9:77:05:99:
f9:3a:bd:be:70:e5:9e:0c:96:89:25:fc:fe:c7:f3:
6f:43:94:dc:bc:3f:03:85:4c:a2:1f:29:83:52:da:
03:75:35:8b:75:49:2a:13:a3:51:f0:69:f2:26:e2:
3a:1b:fb:95:ac:7f:c3:53:70:18:55:94:fc:49:a5:
a2:96:0e:7b:a0:88:1c:9f:ae:45:e6:d8:f0:ea:8c:
89:d6:62:43:de:22:fe:eb:f4:00:8f:f2:d0:4c:99:
1e:71:98:89:f1:ae:43:3b:35:b7:5a:c8:cb:7b:c4:
cd:69:e9:84:52:e7:21:87:05:6e:6b:17:eb:70:18:
3e:a5:eb:66:ae:74:06:2b:43:8e:9c:96:b9:c7:03:
e7:4d:fb:59:d2:d8:68:4e:94:30:f0:93:ff:14:83:
e6:f8:14:1d:6d:a9:27:a6:a3:d9:b3:3a:15:08:bd:
02:56:eb:af:73:e5:78:e6:a5:5f:b8:5f:aa:7d:d4:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:4B:6E:C2:96:16:4E:FB:45:DA:7B:D1:00:D8:9F:D2:C1:5F:E4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd6f0fed-1983-4a87-bdd7-0cd99694dc86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
Signature Algorithm: sha256WithRSAEncryption
55:17:31:41:5c:d3:de:1c:3f:8f:86:9e:16:2f:a8:7e:e5:06:
d7:c7:01:f3:9e:2c:a8:64:24:af:7f:71:1a:70:07:ed:bd:59:
80:b9:ed:d1:70:60:df:c4:78:7c:bc:48:82:ce:6b:71:0f:6e:
1d:48:82:8b:4c:22:06:be:f8:4b:29:b5:51:6f:09:a6:36:ca:
55:e7:1e:56:53:16:2b:0e:64:33:06:8a:59:e8:80:1a:e6:c9:
b0:b8:e4:74:45:83:94:72:df:12:a2:0c:bd:7e:10:87:6f:f8:
6c:49:06:d1:1e:e3:25:ea:9f:2a:6a:71:ad:45:55:8b:99:b0:
ee:35:68:fc:af:58:4f:48:ae:35:f3:c6:0a:66:51:73:30:93:
88:3f:4e:f2:4b:7b:30:6c:b0:4a:89:16:c0:74:a6:ac:2a:60:
ba:08:7b:66:26:81:08:b8:02:be:7b:37:88:eb:b7:14:4e:e8:
d6:ac:67:d3:35:f6:c6:fe:8b:36:8a:e2:75:ed:de:d5:8d:97:
c8:69:68:5f:7c:b0:ce:10:e8:a8:7a:c2:80:52:a6:c8:e5:cf:
44:d6:f7:61:50:0f:8a:ef:d9:c6:c3:e5:36:29:be:92:20:86:
ac:ce:0b:83:6a:e8:14:63:b6:f2:4d:5d:27:15:2c:74:86:a0:
c2:a7:c3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:20 2025 by rpki-client