Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa
File: 39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa (raw, json)
Hash identifier: E1b2LUiL3zPpUtQiuu6P4uQbOOkqEOfx8GpUh4xbAwY=
Subject key identifier: 3D:F2:1C:11:69:D3:0E:54:45:53:DE:01:60:6E:90:3A:B2:52:C4:95
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 67222F6E30558B7E1A15C822C3CF1DD43E17DC61
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 50.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:22:2f:6e:30:55:8b:7e:1a:15:c8:22:c3:cf:1d:d4:3e:17:dc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d5:b2:6a:60:20:85:30:14:b4:74:a2:c3:46:
6e:af:83:fb:7e:5d:e5:94:01:1b:c7:83:30:78:c5:
b5:aa:8a:c6:ad:16:cc:49:4b:fd:11:81:a3:c9:06:
f8:8a:71:2f:98:f0:55:bb:5e:59:68:bc:f9:26:27:
7b:0f:1d:a5:f5:f8:11:69:47:67:c3:23:0f:fc:08:
1f:89:31:1b:ff:ac:4e:05:ee:55:e2:cd:14:5c:7e:
00:1c:75:74:3f:17:2c:81:d2:c4:8d:0a:08:a5:4f:
84:38:4c:68:2d:f8:4c:c6:18:20:1a:1d:c5:da:c2:
8a:c6:fd:64:a7:ab:b5:ef:8f:88:b7:a9:19:27:26:
88:c2:63:ac:5a:0d:1a:b0:2e:d4:56:91:97:77:67:
5a:69:e7:74:94:93:f6:32:ad:76:3f:57:7f:78:88:
84:4c:d8:8e:bc:35:23:96:56:7a:68:2e:d9:dc:83:
12:b4:43:f4:64:c3:99:4e:fc:f8:6c:f3:7d:41:e7:
b0:ff:0f:c0:35:ab:51:f4:17:8c:0a:cc:af:d1:49:
b4:e0:3f:4b:ad:ff:87:82:0c:db:b0:bf:08:72:63:
be:96:df:63:a2:23:74:5d:4c:88:fb:96:0f:d9:d3:
b2:0d:61:b9:71:61:80:a2:cd:8a:b4:f0:6b:dc:a8:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:1C:11:69:D3:0E:54:45:53:DE:01:60:6E:90:3A:B2:52:C4:95
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/39835a9d-1ffa-4ecb-ad9d-73d49b5419e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:15:a3:0e:e0:c1:37:46:e7:1f:fe:9b:52:2a:88:d5:6d:de:
ed:10:ca:74:48:e9:bd:2f:47:7b:1e:dc:a6:5c:ac:e1:d4:73:
14:c1:36:69:87:50:2c:ef:99:e3:12:e9:46:fc:fd:6a:d1:4c:
2c:c4:a4:87:ed:b5:ba:a8:0b:12:d0:c6:9d:c3:0a:db:bd:80:
07:1b:9c:4a:f0:19:17:33:ab:88:f6:45:2b:05:0d:37:e9:b0:
0b:a7:ad:a5:56:1a:d5:de:a5:44:d0:e2:3d:4f:d7:54:d0:35:
89:b6:a2:19:d6:f9:e2:83:37:00:ce:7d:41:e4:76:b8:9e:38:
93:c1:a2:06:3e:9e:3b:5c:a9:de:ae:57:95:79:22:95:87:8f:
61:ec:ec:c1:e5:f8:29:07:dd:96:68:02:09:37:61:47:82:53:
a2:7f:c2:2e:d2:03:ea:37:3d:2a:6b:a9:74:b6:f9:67:25:e9:
b4:c1:8f:24:39:e9:5c:f7:e4:48:2f:51:c6:83:d0:e7:a8:48:
02:2a:24:63:8c:d1:af:da:7c:63:ad:f2:a2:44:d5:b3:62:30:
6f:19:0c:97:a7:a0:d1:62:b9:d1:6c:46:3e:86:bd:58:9a:d3:
38:2e:ab:e1:30:76:61:0b:02:1a:1b:67:37:e7:72:16:fa:e4:
33:f4:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:00:03 2025 by rpki-client