Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d31b450-644a-4a07-bf72-fbd00677c986.roa
File: 0d31b450-644a-4a07-bf72-fbd00677c986.roa (raw, json)
Hash identifier: AJ4YEhKzmBWi65nBlq2tGS9Pq0jsWtrfYe1FDWvxmas=
Subject key identifier: 4A:E0:35:83:01:05:B8:00:AF:12:A9:3B:1B:81:1D:8C:03:CB:03:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C09B31438553DD52FE81CEB9D6BF1376C6B546F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d31b450-644a-4a07-bf72-fbd00677c986.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 32.168.0.0/14 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:09:b3:14:38:55:3d:d5:2f:e8:1c:eb:9d:6b:f1:37:6c:6b:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:0a:80:2d:9a:6b:d5:54:6c:2a:c1:7f:f7:
5d:de:2e:12:8c:39:51:fa:ca:4f:35:5f:0f:64:b7:
ca:fe:9f:b4:2b:f2:d9:49:4a:48:3d:7f:7c:95:52:
98:d7:8e:56:ee:1a:12:da:9f:f2:0b:f2:2c:20:fc:
0d:50:69:9d:ea:50:ff:5b:01:4d:46:63:c4:46:25:
67:89:29:5e:8e:71:db:e2:89:65:9c:fa:ae:e8:79:
48:b7:6f:a1:28:4b:f5:85:83:a1:09:dd:05:74:b0:
af:7e:1a:1d:42:2b:3b:91:19:5e:48:f8:fb:5b:ab:
b7:37:da:e9:17:16:5d:b2:57:c4:08:53:04:f0:df:
86:90:02:ff:f1:65:30:1e:a7:16:5d:8b:4e:a2:67:
1d:31:13:9f:36:e7:c4:0f:f8:c6:45:4b:fa:5d:d3:
f6:91:c2:34:8f:96:2d:3a:60:24:98:e1:52:53:26:
13:45:05:1c:bf:fc:cc:e2:15:28:47:e7:a0:5f:e7:
bb:63:ce:1e:c8:d9:c9:17:9a:76:9e:2f:9f:e1:9d:
ad:b4:6a:ff:11:ef:10:f0:0f:da:b7:5d:7d:64:73:
eb:3d:d2:32:6c:a7:ee:39:57:65:6c:28:be:36:6f:
fc:d6:7f:eb:d0:76:99:f5:14:b4:25:3d:0f:15:91:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E0:35:83:01:05:B8:00:AF:12:A9:3B:1B:81:1D:8C:03:CB:03:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0d31b450-644a-4a07-bf72-fbd00677c986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.168.0.0/14
Signature Algorithm: sha256WithRSAEncryption
62:f2:35:9c:e9:be:55:82:64:a4:03:a1:a1:22:57:48:4e:e3:
8e:4e:08:5b:13:fe:c9:5d:2d:83:aa:e5:8f:69:dd:d2:e1:45:
ee:9b:d9:b7:33:0a:29:6f:28:70:e3:59:dc:8c:08:86:7f:1b:
e5:4e:6a:03:4b:74:c3:68:86:85:35:3c:7d:d8:9c:16:dc:67:
81:06:2a:ae:16:04:df:64:94:db:e4:73:95:c4:0d:d5:84:9e:
cd:ca:f9:09:a3:07:57:2d:cb:9b:83:18:52:60:85:7f:39:7a:
6c:9e:73:6b:a6:a3:5b:aa:b3:99:f4:d0:ca:29:d1:9e:78:c2:
ac:12:45:fe:ca:f7:36:26:40:b8:db:f0:3e:cd:f7:f2:f6:af:
f7:ba:9b:05:69:d8:14:84:e9:2e:73:b9:f5:a3:dc:53:e1:c3:
35:78:8c:3d:98:2e:e9:48:58:f2:88:fc:63:da:e0:79:24:ea:
b8:9c:d4:55:04:37:6a:33:d8:97:1a:b6:ae:17:35:5f:2b:3f:
04:91:45:fe:9d:24:0a:30:9c:50:44:6a:64:ac:4c:b5:45:02:
31:50:9e:8b:87:2c:4a:da:dd:f8:c4:9f:48:6c:1c:94:5f:0a:
a1:fb:91:5c:c3:06:6e:8c:7b:11:94:99:72:c6:20:90:90:91:
a5:b8:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:49 2025 by rpki-client