Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa
File: 31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa (raw, json)
Hash identifier: mahzWPfZ99WuTIa4jTRMUP4aYdSw7U7ZEerFc3pd3XY=
Subject key identifier: A0:86:95:3E:7B:EE:09:78:A7:7C:C2:A0:5E:61:2E:FF:7D:E0:18:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 181D249570EC9CB723F305186C674570AF3537F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 72.29.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1d:24:95:70:ec:9c:b7:23:f3:05:18:6c:67:45:70:af:35:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:d3:47:38:88:dc:db:ed:3d:cd:11:be:3d:
54:e9:64:50:52:56:05:3d:9b:5e:25:5f:31:8b:b4:
65:7a:f9:eb:b3:ac:0d:9c:f4:69:48:d2:db:f5:73:
6c:ad:01:26:40:06:7d:53:f9:58:41:28:36:56:6b:
b9:ce:41:d0:ac:af:09:df:ff:3e:cf:9a:5f:c5:2a:
1c:17:a1:c5:39:45:eb:8f:25:5b:40:06:db:9d:4c:
78:c3:9f:7a:32:2c:b5:93:39:6d:b6:f9:2b:81:2b:
3d:3e:32:51:5b:ba:de:bb:57:bd:0e:a1:36:26:3b:
a3:48:d1:99:83:40:c3:1e:4d:3e:0b:20:55:84:c3:
5d:53:e1:53:b2:19:c1:63:c7:91:5c:71:59:bd:de:
05:66:66:3f:d8:11:c5:b6:ba:79:74:da:c1:d6:ce:
df:5f:10:f3:0a:2e:a2:86:93:4c:a1:b3:c0:82:36:
d3:ac:72:c7:3b:fa:76:0a:05:99:a6:1e:d8:94:52:
d2:e6:a4:8d:ef:b7:62:c3:f6:76:60:28:64:f5:f1:
c6:35:19:ca:5a:d1:14:27:a3:62:eb:63:47:aa:af:
e7:22:1b:3d:e4:37:15:86:a9:66:ce:6a:af:3e:75:
1e:26:09:52:92:72:6f:9d:c7:59:7c:07:65:18:9d:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:95:3E:7B:EE:09:78:A7:7C:C2:A0:5E:61:2E:FF:7D:E0:18:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/31d26a18-48f4-4b3c-b1c1-123ef7f7f237.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.29.0.0/19
Signature Algorithm: sha256WithRSAEncryption
25:09:2e:a2:8a:65:eb:88:a0:15:89:93:60:cf:16:96:c7:39:
a3:d5:47:0d:02:e7:9f:00:a6:5d:98:55:f8:ae:45:b0:a9:bf:
98:04:d8:59:f3:a9:eb:f0:fe:2a:34:44:da:2b:9b:0d:75:63:
8a:7c:af:36:9d:ec:99:33:12:94:e7:76:62:74:ab:7a:97:67:
c4:fb:99:02:73:5c:82:13:79:da:6f:b5:31:06:2c:51:64:b6:
38:85:4e:9c:fe:fb:ef:e8:e2:86:8c:11:9a:09:02:28:82:96:
31:de:5c:c2:6e:dc:a3:e4:f2:0e:3a:18:7e:ab:e1:e0:3a:3a:
ef:68:4c:c7:98:17:d1:90:ba:fc:40:fa:d0:55:30:a1:fc:6d:
02:bd:c0:28:48:6f:90:41:50:62:d3:16:6b:c7:a1:f6:12:fc:
c2:97:cb:0b:2a:59:c9:ec:8d:2e:21:75:ca:e2:43:4d:1c:5f:
ce:61:bf:7d:2f:7b:0b:ad:74:43:4f:db:b0:33:b2:93:4b:e4:
d4:cc:2d:26:de:37:f1:be:d0:95:42:ed:80:4d:92:57:02:d5:
6f:3c:8e:4c:63:1f:92:00:0b:f3:bc:16:ac:f9:7d:5a:b5:ae:
e2:30:44:76:99:96:cd:38:58:da:06:ad:ed:0a:2c:e9:21:12:
ec:57:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:06 2025 by rpki-client