Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00288a9e-173c-4e72-a4c9-5b2b25a26ee2.roa
File: 00288a9e-173c-4e72-a4c9-5b2b25a26ee2.roa (raw, json)
Hash identifier: vqd5hdMoOrOgqZzRoFYgjRMXapo5UVBr54kHqkm9spg=
Subject key identifier: F5:1B:EE:9A:02:4B:DD:B4:54:C8:74:9B:44:16:A8:A3:DA:BE:30:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E3D289A0CBAE7B67B00D144ABAF1EB46D5DBE2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00288a9e-173c-4e72-a4c9-5b2b25a26ee2.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3d:28:9a:0c:ba:e7:b6:7b:00:d1:44:ab:af:1e:b4:6d:5d:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=65bf2771b26433a57debd2c43112c7011dfa2baa78d97902850b1f1d40209a84, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:54:e1:e5:b2:5d:25:e3:4b:0e:5e:6f:26:
b7:a9:9d:65:21:86:b0:03:72:3a:48:90:6f:a1:86:
9a:d5:c7:10:90:66:80:75:71:e6:05:4a:d9:25:b2:
2b:da:c4:33:07:31:f1:a8:f0:df:db:af:c9:ef:79:
fa:a2:25:65:b5:6f:d2:94:de:eb:d6:98:c5:08:f3:
b4:bb:f2:59:5e:19:14:a8:4f:b1:42:50:0d:ec:ef:
0c:2b:f8:b7:65:e4:3c:da:a7:c0:ba:85:43:75:45:
4b:26:62:c1:40:1c:ab:bf:22:b6:85:32:5f:f4:c5:
ec:50:dc:be:8e:28:cd:ab:fd:e6:f6:d6:d8:13:4f:
56:99:f6:ed:3a:7a:55:6c:b0:71:e1:8c:8e:6f:ac:
33:72:97:0e:3d:4b:93:7b:a8:8e:f2:44:02:2a:9f:
32:e0:1b:8f:a9:00:33:6e:ca:35:8c:74:3d:e8:76:
f4:34:15:ca:5a:21:78:e9:67:32:14:05:ca:e0:af:
db:ee:1c:87:25:09:ac:f4:12:51:c7:85:4f:21:c1:
1c:d1:6a:32:db:99:d9:c6:5b:87:6b:0e:f3:30:6d:
c3:00:2b:cc:a8:eb:fe:da:a3:b9:55:2a:32:eb:2a:
97:e5:b1:33:29:41:88:cd:41:2d:76:bd:bb:47:01:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:EE:9A:02:4B:DD:B4:54:C8:74:9B:44:16:A8:A3:DA:BE:30:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00288a9e-173c-4e72-a4c9-5b2b25a26ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:7c:22:a3:26:cd:3e:aa:89:4e:a9:58:cf:f9:31:32:c8:7f:
97:ed:c0:14:15:eb:11:95:32:20:7f:ec:d0:c9:40:be:a8:9e:
ca:70:07:5c:34:87:4d:ec:97:90:97:87:f9:3d:a7:07:96:b3:
5c:2c:0f:bd:bb:4d:9b:88:e1:40:c3:a7:a7:1b:b4:fe:a1:1f:
87:a5:6e:e3:90:62:a3:e5:69:08:33:89:12:9b:6c:c9:77:94:
62:5e:44:cf:cf:d4:b9:0a:1f:e4:fa:1e:da:16:bb:aa:ea:43:
4f:de:fd:fd:b2:c8:b7:d5:e7:7f:53:24:1f:21:30:74:25:f4:
60:f7:c1:03:07:05:fd:54:5b:3e:ce:dc:0e:76:29:18:95:a2:
9e:6a:aa:5f:bf:86:bb:22:eb:6a:9a:d3:dc:3e:c2:44:3b:18:
72:fa:44:66:12:cd:1c:3f:a2:61:e2:00:90:90:90:d3:d8:fb:
45:9a:c7:ff:21:1a:2f:36:61:b5:07:43:de:bc:4d:69:e6:14:
41:73:b2:cc:dd:9a:9b:f1:b8:8e:61:12:83:ee:de:f2:d3:70:
07:e8:c4:14:ca:5f:22:ef:0d:bd:53:72:be:b6:5c:ba:e7:d3:
3c:31:31:1c:dc:5a:88:bd:18:b3:e2:d4:9e:a3:fc:35:af:3f:
a0:18:d8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:33 2025 by rpki-client