Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2598eddb-5b14-46ea-be34-9a5c86d1ce3b.roa
File: 2598eddb-5b14-46ea-be34-9a5c86d1ce3b.roa (raw, json)
Hash identifier: asxbK7lmnl1ZCZ70wuFUNrSM3UicSY0nZYtLMIPrxvU=
Subject key identifier: 6A:33:C5:C6:36:DE:1D:D6:7F:DB:78:83:BC:30:1C:15:5D:4E:65:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F3E7DB9C85DE4F8CB63AD5ADC342DE7301D3335
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2598eddb-5b14-46ea-be34-9a5c86d1ce3b.roa
Signing time: Tue 17 Dec 2024 00:00:00 +0000
ROA not before: Tue 17 Dec 2024 00:00:00 +0000
ROA not after: Tue 21 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 208.78.128.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3e:7d:b9:c8:5d:e4:f8:cb:63:ad:5a:dc:34:2d:e7:30:1d:33:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 17 00:00:00 2024 GMT
Not After : Jan 21 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:42:eb:01:74:c4:93:ac:78:7d:6e:47:bc:
74:ec:54:9b:d3:6e:e7:58:cd:0b:ec:b0:e5:c8:f2:
3b:ff:7d:12:d4:c2:54:a8:5b:93:db:0f:7a:d5:bf:
c2:65:9b:1b:39:b6:28:f4:1f:7e:cc:c6:68:1e:48:
68:76:38:43:37:fc:a7:ef:6d:75:dc:ee:3e:4a:d1:
11:32:68:5b:91:89:3d:33:fc:e4:b3:a2:74:dd:8b:
cf:b6:99:bd:ba:8a:e7:c4:4e:26:96:ee:da:59:02:
3a:42:d4:42:ff:b5:3f:5c:6c:34:6f:6e:32:e9:aa:
b9:7f:16:5f:6b:b0:10:b3:db:12:8d:20:36:72:27:
a1:30:76:db:9f:be:e9:74:b8:e8:be:92:b1:bc:72:
2d:cc:cc:35:f5:89:c5:ec:ad:1d:49:0a:e9:de:78:
0e:1d:25:90:89:bb:9b:48:41:69:94:23:1a:a2:ef:
2f:93:7f:3d:7d:a6:c5:88:41:7c:72:d3:bf:65:04:
a6:35:68:3a:18:5f:db:fe:10:f2:32:da:f0:8b:06:
ab:9d:0f:b7:f4:e6:5f:ee:dc:79:3d:21:07:aa:98:
ae:7e:22:e8:2a:95:bd:0c:90:4a:67:1d:73:6c:f1:
42:ad:a8:2a:55:b9:0f:17:df:94:be:70:05:d2:03:
14:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:33:C5:C6:36:DE:1D:D6:7F:DB:78:83:BC:30:1C:15:5D:4E:65:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2598eddb-5b14-46ea-be34-9a5c86d1ce3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.78.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d4:52:a3:b9:8b:6d:2b:bc:b1:a7:93:e1:95:71:b5:65:e3:
11:0b:9a:0e:70:43:1f:f4:c2:74:89:b6:48:d7:99:df:81:43:
bf:42:e2:a8:bf:84:5f:8d:4f:9b:3d:08:74:cf:5f:49:e1:1d:
69:f4:1c:b5:bb:03:60:2a:a0:a2:90:6f:5c:52:55:9c:4b:1d:
ce:d0:56:e0:f0:44:76:3f:e5:f0:30:c9:00:26:5b:ca:8f:48:
21:d9:27:f6:4c:88:0c:7c:c4:0e:9d:df:5f:00:25:80:05:df:
b7:9c:0d:81:a9:ae:1b:6c:df:fd:98:99:c0:ab:46:05:39:34:
80:1a:bd:0e:d7:48:e4:0b:1f:e6:09:b7:10:81:9e:4c:71:29:
a4:c7:b8:c1:fb:85:82:bb:44:13:ee:69:b4:cc:68:1b:10:b7:
fa:e5:66:8a:ef:5f:e3:99:4d:ab:ba:50:1d:ab:b7:a3:01:62:
23:cc:73:bf:04:af:2d:53:5a:25:ad:d4:b5:93:5e:dd:dc:85:
e0:b2:23:81:73:b2:86:78:56:03:f4:c6:df:99:44:33:90:3d:
a0:86:f6:1c:02:30:e0:f9:50:f4:3f:19:47:6e:87:21:6d:97:
ca:e7:31:19:19:1d:46:12:44:6b:29:8f:5b:95:14:e5:59:c9:
a7:0f:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:53 2025 by rpki-client