Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b2b8fd-27ac-4af4-bd95-4a36a6e3f77a.roa
File: b8b2b8fd-27ac-4af4-bd95-4a36a6e3f77a.roa (raw, json)
Hash identifier: bEmkhIHWNJtf/R/I3BWf+yren4mXVoN7uuefCdt2Ezc=
Subject key identifier: BD:8F:2A:40:56:F7:DB:C2:B8:44:71:73:A0:8D:9C:DD:6F:42:5F:32
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5D052684B9F74F7C4C7D2126F1D85CD37F2713B0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b2b8fd-27ac-4af4-bd95-4a36a6e3f77a.roa
Signing time: Mon 06 Jan 2025 00:00:00 +0000
ROA not before: Mon 06 Jan 2025 00:00:00 +0000
ROA not after: Mon 10 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:05:26:84:b9:f7:4f:7c:4c:7d:21:26:f1:d8:5c:d3:7f:27:13:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jan 6 00:00:00 2025 GMT
Not After : Feb 10 23:59:59 2025 GMT
Subject: serialNumber=35f1b4fd1e22f7e0545f96c5be5319d491f90aaa61a928f7cee972ef7286ef3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:10:76:4a:8e:6d:ba:f9:ca:69:f7:ac:c6:
ed:a1:08:54:0f:be:08:b5:79:4e:c9:7b:0a:b6:9d:
db:8f:49:60:5f:d9:85:d6:66:b4:08:1a:51:92:0d:
1c:36:15:b5:33:ca:8a:f9:a4:72:b4:2f:f6:c4:17:
92:81:b8:61:d3:b3:38:a6:59:50:61:d0:5a:c1:3c:
5f:0b:5b:8c:be:e9:d3:31:7c:5c:df:a7:6c:e5:d4:
79:ff:67:26:6e:8a:95:b0:3d:88:51:2a:05:1a:55:
98:39:19:48:cf:9e:dc:ae:b3:5f:52:42:a3:d8:c6:
75:d0:23:4d:41:81:ad:dd:cc:20:bd:0b:7d:03:3b:
ed:bb:2f:6d:44:20:5f:87:75:14:f0:2e:15:60:f5:
ec:c1:0d:68:8a:14:bc:2b:8e:bb:af:5c:bf:70:68:
46:7f:8b:f0:3a:9c:59:55:2d:18:6d:d3:c3:32:15:
89:94:be:1a:49:14:10:f3:b3:c8:c5:33:fa:9f:b0:
e3:20:45:0f:a9:92:ba:0d:9f:65:ca:fe:c2:50:88:
14:83:60:80:b8:57:3f:ca:71:30:55:a0:7a:81:95:
c7:51:21:04:5c:07:68:6b:7b:27:ea:05:d8:2e:0c:
56:46:01:0a:97:f3:6e:01:ad:2e:27:d3:47:0a:16:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:2A:40:56:F7:DB:C2:B8:44:71:73:A0:8D:9C:DD:6F:42:5F:32
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8b2b8fd-27ac-4af4-bd95-4a36a6e3f77a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.180.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ad:2c:d2:3c:0a:2d:36:46:f6:08:4f:22:70:c1:29:68:a4:
71:71:35:51:d3:6c:78:63:8c:a2:be:d1:57:1b:33:40:d2:b6:
64:4a:5b:ac:2e:48:c7:a2:09:4f:74:4b:70:68:1c:01:34:30:
ab:78:9d:82:28:0e:3d:d4:17:dd:80:47:97:cc:32:1e:45:01:
5f:da:1f:0f:86:2a:1c:d4:c5:3b:37:4d:58:cd:d5:e1:d6:fb:
6a:f4:a0:67:c2:e8:0b:00:ef:74:2b:ae:c7:f7:e4:83:c8:18:
a2:3a:ad:70:65:f5:74:35:27:83:4e:f6:17:a6:b4:0e:ad:66:
8a:de:a3:63:4e:ab:f8:69:03:24:30:24:69:6f:fc:d7:e4:8e:
fe:40:40:4b:08:1d:ac:77:29:2c:91:2e:db:ef:19:ac:4a:fe:
b6:2d:b2:c1:07:af:51:ae:10:dc:f4:a8:1b:c2:55:79:b9:43:
2d:d5:09:fb:7d:1c:83:ab:dd:12:19:da:fe:b1:d9:df:f7:6e:
7f:f6:26:9e:0d:7e:9e:6e:de:24:45:4b:40:4b:b7:f8:21:7d:
55:92:39:9c:46:6e:18:4c:99:d9:41:f4:55:70:de:35:6f:55:
38:73:e4:ad:45:13:ae:ae:34:d6:41:9e:7b:d7:38:85:ff:69:
22:90:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:12 2025 by rpki-client