Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2acb8759-3986-4853-822b-03a0f475b72f.roa
File: 2acb8759-3986-4853-822b-03a0f475b72f.roa (raw, json)
Hash identifier: MshB2Eyj5cPY6yptAedhlWTIrozs2QVnqXKjfjcuJLg=
Subject key identifier: 4E:3F:BA:B2:58:AC:D8:70:D2:51:80:14:C5:87:EE:75:16:E2:41:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 286FE43C1356B46572A867EF14B0923140E5438D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2acb8759-3986-4853-822b-03a0f475b72f.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.112.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6f:e4:3c:13:56:b4:65:72:a8:67:ef:14:b0:92:31:40:e5:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:3d:f2:62:47:e4:36:2d:66:41:e5:37:81:
0b:67:4a:44:83:77:56:0c:62:f0:69:26:58:c0:a3:
8f:17:ff:c4:e9:dc:c8:ac:ea:ea:09:c3:cc:c7:8d:
e1:68:15:8d:88:90:70:58:33:d0:94:39:d5:7a:a4:
80:b4:08:89:ab:8d:65:14:51:ef:44:71:86:2f:f9:
7e:9d:8f:1a:53:e6:ca:b1:7c:2b:47:a0:18:7b:b5:
e2:e5:86:82:7b:13:50:35:c9:5f:3d:0d:5a:a5:33:
96:4d:34:82:63:02:76:ad:5c:36:00:52:4f:f5:e3:
87:d4:79:a9:41:ee:53:91:4a:42:a3:f5:67:a2:72:
4b:a3:b1:56:b9:f1:c0:2e:f8:95:eb:e2:f8:b7:83:
56:60:81:36:3f:00:7d:fa:d8:7e:f9:a6:a0:b9:2d:
fa:93:f2:2c:62:47:b1:e2:c3:94:ba:b9:19:5e:e4:
83:a1:fb:bd:17:9c:4d:e2:cd:76:1b:7a:e1:d8:1b:
f3:92:28:fa:55:ce:92:06:bb:4e:3e:c7:71:0f:0a:
5e:74:83:9f:09:6d:fd:e6:8f:34:f0:04:99:2a:8f:
14:0a:a1:67:ef:b9:04:1f:26:83:d5:22:fc:34:7d:
64:e4:e9:70:fd:df:af:53:3e:51:04:cd:55:5c:66:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:BA:B2:58:AC:D8:70:D2:51:80:14:C5:87:EE:75:16:E2:41:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2acb8759-3986-4853-822b-03a0f475b72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.112.0/20
Signature Algorithm: sha256WithRSAEncryption
39:36:d7:db:76:88:2d:c1:99:1f:af:63:86:0e:4e:40:f1:15:
d9:50:04:3a:fa:14:c5:8e:bb:9a:20:f0:40:c4:d9:c6:54:c3:
83:83:7f:b1:30:4e:dc:26:ed:a7:cd:25:98:8a:d5:98:5f:25:
c8:ba:7d:0d:6f:ff:3e:33:9e:a1:8c:eb:89:ae:99:ca:ba:89:
5f:1e:78:47:63:ce:22:23:24:8f:97:42:51:74:a3:75:e9:24:
6c:35:5c:03:f1:c8:08:69:ff:02:cc:72:cb:9a:d1:24:20:15:
82:64:5d:20:b2:26:b1:8a:b1:47:f9:fd:a5:9f:f3:17:9f:e1:
a0:19:9e:ca:a7:21:79:e3:1a:b2:e8:b6:d0:ad:16:a3:11:6e:
92:21:0e:d9:1f:4f:38:1a:44:9c:b5:8a:3a:a0:cd:5c:0d:25:
cf:d6:7b:fd:a7:34:ed:cc:93:aa:d7:d5:ee:55:38:b8:45:7e:
93:5c:ef:53:f7:fe:23:73:16:13:4a:23:f8:dc:92:da:12:f8:
f1:e1:3b:76:58:43:d5:f5:09:cd:15:85:7f:b0:26:27:d8:cb:
45:2d:46:ba:d5:2a:43:01:2b:57:69:ec:ff:63:fb:8d:ac:70:
4f:64:1a:b7:39:f1:9c:be:c5:a8:b0:b6:48:25:fc:c1:f9:e8:
fb:6d:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:29 2025 by rpki-client