Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c1e363bd-114e-4af2-874f-9608185a27c5.roa
File: c1e363bd-114e-4af2-874f-9608185a27c5.roa (raw, json)
Hash identifier: Dz4vethVdV3W+c6p31tXaY4lJR6axar1NE3k0tunIzA=
Subject key identifier: 69:F6:A7:2E:F4:66:2D:D0:68:D9:6A:86:69:30:74:C6:D1:B2:CA:70
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 7CAC96787074AEC2559566BE9C5DF4C4B3340DCC
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c1e363bd-114e-4af2-874f-9608185a27c5.roa
Signing time: Mon 09 Dec 2024 00:00:00 +0000
ROA not before: Mon 09 Dec 2024 00:00:00 +0000
ROA not after: Mon 13 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ac:96:78:70:74:ae:c2:55:95:66:be:9c:5d:f4:c4:b3:34:0d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Dec 9 00:00:00 2024 GMT
Not After : Jan 13 23:59:59 2025 GMT
Subject: CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:ec:56:52:3a:4f:55:4a:78:38:65:a9:43:
cf:03:5f:c7:d2:aa:44:ca:e7:2a:b5:7c:d1:52:45:
ae:08:6d:97:e3:be:91:51:4c:ca:71:d2:8c:c5:09:
16:5d:8b:a7:f2:da:12:b9:39:f6:6a:9e:cd:40:ac:
c8:42:f6:a7:c5:a1:90:c5:fa:8f:bd:22:3f:a6:9a:
43:fe:f1:79:82:7c:18:b2:ea:1d:a0:cd:c4:1b:02:
ae:ed:86:6e:b7:1d:45:f3:4c:d7:b9:d8:20:ed:51:
6d:c0:79:2b:09:6e:ae:b0:e3:20:cb:7a:54:01:25:
0c:d5:6d:c3:b9:a8:b7:28:23:18:68:07:dc:fd:a3:
09:e7:16:39:58:3c:89:91:2e:7c:52:f5:c6:ab:ae:
c7:62:82:77:76:19:89:4c:9c:5c:0a:a9:dd:33:4b:
1a:11:4a:d0:4b:1d:98:4c:de:41:84:78:42:66:01:
9e:20:f5:6a:15:ca:c0:79:d9:61:04:ec:ea:6f:64:
ea:3c:a9:85:9c:8e:00:e5:db:13:ed:a0:4f:03:1f:
2f:5b:c7:73:03:55:6e:4b:b8:39:01:2b:fb:d4:67:
7e:c3:cf:3d:3b:58:b0:9f:e3:aa:04:6b:9d:42:ae:
0f:3f:a9:85:82:da:67:44:1e:a7:b1:68:1e:a0:b7:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:A7:2E:F4:66:2D:D0:68:D9:6A:86:69:30:74:C6:D1:B2:CA:70
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/c1e363bd-114e-4af2-874f-9608185a27c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:35:0b:84:18:97:12:03:05:9e:49:7c:c7:91:c7:7d:5f:2c:
f0:da:dd:b0:81:69:e4:ba:ed:4f:3c:9e:fd:22:6c:52:42:45:
4f:b3:59:10:63:6f:f3:86:9f:15:49:9e:d3:09:38:14:74:ff:
60:fd:59:e1:ba:69:1b:4c:96:b6:85:7d:e3:2b:39:bf:0d:98:
1f:14:60:6c:e0:50:55:93:37:b9:43:be:f3:c4:48:bc:d7:ea:
51:68:c9:ab:ff:d5:a7:ea:b4:88:0a:ab:c9:7f:7c:c7:6d:a2:
00:48:d2:5d:5a:28:d0:90:d5:fa:13:60:fd:8f:67:0f:2c:0d:
e5:d4:ee:5f:0e:7a:f5:f1:27:d3:0d:93:58:34:1e:7a:4a:cd:
8d:ca:9a:2b:27:f8:6a:f7:f4:ab:05:3f:1f:5f:6c:0b:0d:2f:
c3:db:ce:ca:e7:01:3a:bc:50:d5:a7:54:cc:07:29:1d:fb:74:
2a:ba:3d:c0:ba:8e:a9:fa:e1:65:4d:f3:9b:6e:0c:eb:bb:1b:
ea:b4:69:5f:81:c5:18:f8:a8:25:fb:5b:13:bb:9f:97:f7:16:
71:6d:28:11:ac:fc:6e:23:fc:f2:ee:d2:d7:ba:c4:2b:9b:ee:
cf:46:19:7d:e4:9e:8d:49:e5:75:64:32:ca:8a:3a:dd:e0:1a:
6e:b0:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:49:16 2025 by rpki-client