Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/306e4294-1348-4144-b76c-04a6eba1bfe7.roa
File: 306e4294-1348-4144-b76c-04a6eba1bfe7.roa (raw, json)
Hash identifier: wzZ1vPVuO/qp8mQRT05kk5lSeLY/oBsoLPU2xsdE6yw=
Subject key identifier: 0C:96:E7:29:44:0D:47:CC:82:2F:1A:6E:60:03:B0:E1:65:3F:2E:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23CDF3D4DE05901B564EF130576B9625B60D8448
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/306e4294-1348-4144-b76c-04a6eba1bfe7.roa
Signing time: Tue 03 Dec 2024 00:00:00 +0000
ROA not before: Tue 03 Dec 2024 00:00:00 +0000
ROA not after: Tue 07 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.112.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:cd:f3:d4:de:05:90:1b:56:4e:f1:30:57:6b:96:25:b6:0d:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 3 00:00:00 2024 GMT
Not After : Jan 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:ea:c5:d1:96:1a:11:1f:b4:99:b5:a9:b9:
46:75:ad:6e:0f:4a:8e:2f:31:37:6e:23:5c:99:3f:
a7:04:90:9c:c4:ee:12:23:80:73:56:57:3e:86:8b:
bb:b9:a7:b9:e9:57:02:a9:9e:3f:86:90:60:7d:c1:
2f:ea:a2:cc:95:0c:67:0b:bc:a6:83:e5:cd:2a:2a:
b8:0c:7a:a5:39:64:ae:78:03:17:91:ea:a1:3f:74:
33:43:3c:12:39:ea:1d:04:88:75:b3:69:fe:06:32:
87:0c:b3:59:22:e5:81:f6:3f:0e:99:70:cf:a7:fe:
97:45:41:d7:d8:fc:eb:ea:cb:a4:72:1b:a7:b6:71:
07:bc:b3:3f:96:72:e9:3c:8c:4a:a6:5d:0c:ec:99:
68:f7:2e:6e:f9:57:3b:d7:32:88:87:3c:8d:3b:f8:
0c:8b:ec:0c:dc:07:0b:d0:28:86:12:bb:65:5f:64:
f0:07:b0:61:eb:d4:17:c0:11:46:e7:4d:c4:f1:4f:
0d:65:7c:af:bd:67:94:36:25:95:6a:c8:82:7f:51:
71:04:e6:7a:e8:e6:d9:dc:19:06:88:75:59:7d:75:
c0:3e:35:92:17:a8:18:f7:93:dc:ef:31:99:06:67:
d3:39:de:b2:f5:55:38:4c:a0:8b:9c:7e:a3:3f:c9:
71:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:96:E7:29:44:0D:47:CC:82:2F:1A:6E:60:03:B0:E1:65:3F:2E:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/306e4294-1348-4144-b76c-04a6eba1bfe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:4d:19:89:9c:66:02:60:ec:57:25:90:ad:50:16:e9:cc:9b:
03:82:30:69:53:91:c7:08:bb:7e:b3:4b:59:43:68:53:18:a3:
11:ca:13:ca:c1:50:3d:2a:27:dc:67:af:6d:7d:2f:b4:d4:cc:
7e:b0:6d:4c:ba:5c:fa:2e:33:3e:f2:2d:93:a1:c1:47:b2:c5:
76:63:b2:3a:a6:66:da:26:3e:40:f1:83:12:8a:79:7f:6e:f4:
a1:53:eb:92:b2:d3:ff:63:00:e8:84:ea:b8:16:82:8c:e2:48:
b6:7c:ff:3f:65:0a:e7:b2:7c:17:e2:76:af:c3:b5:f7:a5:05:
4d:ad:ee:3a:82:96:31:a9:8b:e5:d8:e7:02:05:f7:3d:b5:f4:
56:88:49:95:6d:6a:72:e4:5d:32:cb:20:77:da:61:b3:ab:d6:
2e:53:e8:04:18:ec:4b:5b:ab:b1:dd:82:c6:a8:2e:97:a1:b8:
47:bc:dd:23:8d:69:7d:2c:66:0f:b7:08:c6:31:d6:44:d5:65:
84:66:b1:e5:a9:51:e2:97:3f:f8:07:71:18:d6:a5:21:ce:fd:
cc:a0:94:3f:7a:c3:7d:a1:3d:a8:ca:0f:1d:db:54:97:01:82:
d2:c0:42:dc:55:3c:1b:7e:e7:6b:95:f0:5e:da:ba:d0:10:e6:
d2:2c:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:29 2025 by rpki-client