Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd971c1-cdc0-47de-8711-e5a3d7f44fdf.roa
File: 3cd971c1-cdc0-47de-8711-e5a3d7f44fdf.roa (raw, json)
Hash identifier: +//xtRjSKglVtMerjMGyQEqLXtMGicTlaiT3T3you/w=
Subject key identifier: 7F:08:4E:2C:07:61:3D:D5:81:1D:0A:38:02:6C:C7:A0:DE:01:38:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62CCB2ABDE345A8604C7832A3BAFA221AF19F0B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd971c1-cdc0-47de-8711-e5a3d7f44fdf.roa
Signing time: Fri 27 Dec 2024 00:00:00 +0000
ROA not before: Fri 27 Dec 2024 00:00:00 +0000
ROA not after: Fri 31 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.72.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:cc:b2:ab:de:34:5a:86:04:c7:83:2a:3b:af:a2:21:af:19:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 27 00:00:00 2024 GMT
Not After : Jan 31 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:73:ac:41:28:42:be:14:bf:94:1f:ff:53:
49:20:b2:59:10:c6:a1:4f:80:92:07:8e:df:a6:3f:
5f:1a:8e:ca:b9:6f:fe:28:21:de:f6:87:fe:77:48:
56:9a:c3:17:b0:d7:83:9f:e5:b3:15:8f:9e:77:20:
21:1d:73:be:6e:1c:2b:4a:b7:03:37:2d:aa:45:c4:
e9:75:0b:80:3c:44:cf:5b:38:4a:de:13:fb:bd:ba:
e9:fc:7d:ea:fa:c4:f8:94:f7:10:55:07:38:c6:89:
d3:dc:59:14:00:b4:f9:8c:bd:f5:50:43:c2:f5:3e:
31:ab:f3:4c:ec:14:21:7f:a2:71:8a:90:8c:8a:9f:
8b:9f:fb:1c:5f:7e:97:74:89:03:f8:22:9a:62:f7:
66:94:43:a0:24:20:15:3f:52:30:a2:7f:57:03:e1:
bd:fb:88:b5:b2:e5:d4:e0:81:da:96:cf:82:6e:0d:
0d:fb:f7:29:c7:c3:c6:c9:d2:80:a0:7a:93:de:35:
64:49:97:dc:57:75:57:58:8b:90:d3:5e:34:32:5c:
1c:ee:09:53:70:35:d0:e8:6c:74:4e:c6:00:41:91:
4e:89:fc:f9:5c:03:bc:c3:d9:c2:5b:d4:f8:5f:db:
71:c2:1b:d1:50:2f:93:96:13:2f:b6:fe:f9:f2:54:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:4E:2C:07:61:3D:D5:81:1D:0A:38:02:6C:C7:A0:DE:01:38:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cd971c1-cdc0-47de-8711-e5a3d7f44fdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:ec:0d:ed:58:b8:82:13:70:a8:4a:15:f1:e3:8a:7e:01:02:
cf:49:d0:fd:be:c9:19:d5:78:34:58:c8:b8:a4:cb:54:f5:00:
e7:0c:ea:93:96:ae:33:30:ab:6b:6d:c2:38:87:f9:5d:28:43:
23:07:ac:11:53:7a:57:de:25:79:72:db:54:ba:4a:5f:f3:26:
e4:15:ab:ac:12:9b:e2:43:2b:b0:eb:48:67:e4:d4:a4:63:1c:
61:61:d8:bb:a4:20:22:f3:74:80:d8:49:3c:dd:51:fd:25:9c:
43:de:61:d0:be:39:73:f5:b0:d3:fa:0b:3c:af:d6:08:be:0f:
52:ab:b7:59:62:c0:a4:fd:d1:22:44:d9:8b:2d:ce:97:f9:01:
82:a7:f1:7f:d2:70:25:95:8b:ce:7e:1f:a6:44:3d:72:29:b0:
9f:8d:80:78:0c:40:21:7c:d0:c8:97:9a:00:83:00:fe:24:03:
57:1e:2a:08:98:b0:cd:70:5b:7e:31:39:72:74:ed:91:ef:2c:
14:f2:87:fb:80:7f:a5:f0:70:d8:5b:14:d3:90:c5:40:d8:61:
f4:36:df:85:ac:66:e2:7e:75:e0:b3:16:be:e2:f8:6d:e3:6e:
76:dc:22:44:42:c2:b9:f5:86:56:db:41:97:92:1d:b2:be:d1:
29:c9:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:32 2025 by rpki-client