Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5ac1ae-70c1-4ce7-ab8b-6f3a7141542d.roa
File: 0b5ac1ae-70c1-4ce7-ab8b-6f3a7141542d.roa (raw, json)
Hash identifier: hVu5KRsrIisg8y+FVXxh/JmuuLdEo7jP+z+wIG/z+0Q=
Subject key identifier: EC:82:4E:1B:B0:42:3B:61:01:D2:D0:87:F0:46:BA:56:2B:4D:E9:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E0A0C638F1A81F363A55096556828C0B558B65C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5ac1ae-70c1-4ce7-ab8b-6f3a7141542d.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 204.39.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:0a:0c:63:8f:1a:81:f3:63:a5:50:96:55:68:28:c0:b5:58:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:ca:f1:54:d3:b0:7a:6e:fb:76:eb:15:ce:
78:74:da:60:98:5d:7e:26:b9:e3:f2:e2:1a:40:f2:
c8:4f:35:f2:32:ac:0e:ba:52:a4:d5:1e:00:c5:c2:
2e:7d:e9:38:b8:c4:08:6c:54:6a:94:ad:c7:ef:85:
ea:dd:5e:93:b9:7b:ce:d3:f8:ca:19:10:5d:9d:28:
90:87:f4:b8:a3:c0:1f:7e:4c:13:0d:3a:88:aa:94:
e2:98:7d:b1:cf:5d:8e:eb:0f:63:49:cb:18:d2:e4:
f6:49:c8:a0:80:49:db:96:5b:59:ff:14:91:bf:2a:
c2:4d:3d:26:36:f5:07:f6:2f:ea:80:a9:e5:0f:76:
7b:81:c3:41:60:c6:9b:71:92:cb:a3:80:3d:3f:2d:
33:74:a6:47:39:cb:d8:b6:30:93:8e:33:c8:c4:4d:
a0:f9:ee:09:b0:25:51:ee:49:0b:33:d2:5e:79:74:
8c:d7:52:02:a3:a6:1e:6a:16:9a:cd:62:0e:0f:eb:
ec:7f:62:c1:69:eb:bd:7c:07:7a:77:ed:83:8c:16:
45:23:8c:24:c0:a2:83:05:a8:84:23:ae:ea:0f:a9:
d9:a1:61:80:33:dc:3c:ea:22:4b:cb:a6:3b:6a:9c:
dd:95:54:20:44:67:40:c7:c6:f2:e0:fc:8e:0f:86:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:4E:1B:B0:42:3B:61:01:D2:D0:87:F0:46:BA:56:2B:4D:E9:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b5ac1ae-70c1-4ce7-ab8b-6f3a7141542d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.39.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a2:e4:c4:1a:4a:a3:4a:7d:a9:71:4a:6d:27:60:67:fd:ac:b8:
c2:12:08:cd:21:47:61:87:f8:3c:91:53:6e:56:31:e4:dd:99:
b3:ca:3a:8e:6c:96:b7:93:8f:3f:d7:9a:40:ce:69:15:a0:a1:
a7:80:eb:ff:37:3a:0e:0a:38:37:e5:5f:5e:04:31:15:21:2b:
e5:15:1a:ee:9c:90:a0:2d:e9:c5:29:a2:a3:1a:9c:6b:c7:15:
4d:fd:bf:1b:f9:89:f6:72:30:08:cc:be:c9:0a:e1:f3:88:da:
cf:da:39:bd:05:40:b2:d2:1a:f9:b9:eb:43:9a:e5:a7:0c:70:
3e:c2:b8:67:8e:b8:68:66:77:9f:cc:78:51:75:b9:c3:e2:45:
f4:28:8c:0c:77:41:da:02:b4:5a:0f:83:6c:85:b4:ec:ee:14:
73:20:9c:10:6e:55:2e:9b:4b:d9:a8:07:b7:00:ad:49:ff:08:
3d:a8:d4:50:23:36:d0:9c:5d:b2:45:a0:b4:1c:44:18:9c:f8:
31:9b:63:64:eb:68:aa:e7:5b:ee:90:db:50:07:e0:5f:d2:f0:
27:62:dc:87:e5:57:ec:ec:38:42:d4:7c:60:33:ae:d1:5b:64:
a4:23:33:ee:f9:67:3d:45:da:f4:4b:d3:e4:5c:f5:00:38:31:
83:47:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:24 2025 by rpki-client