Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113e816e-8324-45b9-98cf-dbeca79f4497.roa
File: 113e816e-8324-45b9-98cf-dbeca79f4497.roa (raw, json)
Hash identifier: B+d4oI0vKV0JbNjLTke8v92pgtOzZC2vDA9G3rzty6g=
Subject key identifier: A4:C5:C7:BB:F6:CB:DF:1B:68:CE:05:AD:90:66:21:53:0B:46:72:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F54144DFE10E703DE4F3F9731E09BD3CA72208B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113e816e-8324-45b9-98cf-dbeca79f4497.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 8987
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:54:14:4d:fe:10:e7:03:de:4f:3f:97:31:e0:9b:d3:ca:72:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=11342be48d934e467b5306f4dea576842587e86cc8477a1099c75caf3fb46e55, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:21:a7:ec:8a:e2:ed:f5:32:de:26:61:c2:
6e:35:97:9a:b6:ce:98:fa:16:2e:41:10:a1:9d:ac:
eb:ca:89:06:54:2c:81:e5:81:a1:06:8d:b0:26:06:
28:9e:aa:ed:31:7a:1f:5c:80:72:f6:8a:53:6b:f6:
9c:b0:fb:d2:57:52:72:04:38:56:09:1a:f3:ee:ff:
8b:9c:27:eb:04:25:65:dd:36:bf:08:0e:71:9b:4e:
c0:6d:8a:b6:63:6d:1e:b0:fa:35:72:10:d7:22:ef:
af:c2:f1:f0:b7:a9:41:f4:a2:a6:58:b8:25:66:d9:
6e:23:ed:17:9a:49:7a:47:18:ec:df:0a:dc:b7:77:
33:79:e2:b5:a0:0f:06:31:e8:dd:bc:cb:8e:09:7d:
e5:09:0c:d7:a7:f2:d7:a8:25:6c:10:5b:d8:09:3e:
87:c0:63:a6:6a:c8:60:aa:91:d8:46:17:af:d3:0d:
05:bd:3b:55:71:1c:92:fc:87:a7:22:27:be:4b:0e:
73:36:70:0e:8e:2d:5a:f3:e4:77:0f:9e:c9:6e:c6:
36:14:ce:21:60:50:ff:35:84:cb:90:e5:ff:60:6c:
fa:99:6f:3c:67:8a:b5:18:84:16:25:46:d6:f6:f9:
c5:c3:02:63:f7:76:01:44:83:07:97:26:3d:70:01:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:C7:BB:F6:CB:DF:1B:68:CE:05:AD:90:66:21:53:0B:46:72:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/113e816e-8324-45b9-98cf-dbeca79f4497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
Signature Algorithm: sha256WithRSAEncryption
d6:d4:5e:cd:57:a4:1d:d0:44:4f:b7:00:60:5f:e1:5b:65:77:
f5:4e:99:cd:56:14:2b:96:0b:5e:37:de:34:ab:f4:ee:30:40:
f9:f2:f9:72:ee:ee:ee:0f:92:df:ed:bb:df:7f:82:3e:58:c2:
d6:7a:eb:7a:96:64:da:76:b3:0a:9f:30:d5:de:05:39:bc:d0:
0a:8b:e4:77:0f:38:f5:02:f6:14:4a:83:79:58:74:01:fe:ab:
5b:c7:0f:f8:bf:34:eb:e8:ba:b7:5e:ed:e4:da:06:2a:56:10:
7f:85:7f:ec:b7:1b:91:f8:5d:b3:06:2e:d7:a5:80:a8:3c:9f:
b8:62:94:7b:3b:4e:f2:dd:7a:9f:5d:4d:d7:06:95:9d:88:ae:
63:51:02:f5:fc:da:0a:8d:a2:ac:6c:2e:2c:9a:c3:de:dc:67:
0d:b6:4a:9a:3a:de:ef:ef:fb:7c:a0:f0:d3:63:a6:19:cf:3f:
da:8e:15:bf:6f:e1:f4:7e:2a:ef:23:3c:b9:ab:ca:7c:9b:e6:
4c:36:c7:ba:5f:2d:bd:00:a9:0f:56:47:db:f9:a6:1a:d3:51:
ae:e4:47:8d:ec:86:7f:36:be:f4:a7:36:c1:d7:61:71:dc:be:
49:67:fa:b4:37:ed:26:7e:08:c9:8f:86:57:02:68:5c:93:93:
6b:01:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:04:49 2025 by rpki-client