Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43378c34-9893-41d9-b24b-6060b24d999d.roa
File: 43378c34-9893-41d9-b24b-6060b24d999d.roa (raw, json)
Hash identifier: GybrP7ICJ+15qwYRaxZ1340cqZYjI3MzUJULFv/qsJA=
Subject key identifier: DC:8A:31:C6:6C:80:FA:71:DD:23:14:09:78:D3:2A:92:D4:B2:ED:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 529C4BD108E1BB2F6BB606B8544B058C0E9D72F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43378c34-9893-41d9-b24b-6060b24d999d.roa
Signing time: Sat 11 Jan 2025 00:00:00 +0000
ROA not before: Sat 11 Jan 2025 00:00:00 +0000
ROA not after: Sat 15 Feb 2025 23:59:59 +0000
asID: 14618
IP address blocks: 165.67.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:9c:4b:d1:08:e1:bb:2f:6b:b6:06:b8:54:4b:05:8c:0e:9d:72:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 11 00:00:00 2025 GMT
Not After : Feb 15 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:5b:d3:bf:9c:7f:4b:5e:a3:a8:57:d5:d4:
6d:96:ae:f1:9b:47:8e:91:24:e8:71:39:ab:87:99:
2b:55:2c:2d:61:b2:62:60:f9:e2:32:88:fb:ee:5a:
d6:97:eb:ec:3e:6e:23:63:99:fa:2e:eb:a5:1d:51:
fd:11:71:1b:02:81:69:f3:b2:5c:cc:7e:29:48:dc:
0f:b4:2a:ad:c7:ae:c3:2d:68:d9:5d:25:4b:ae:94:
bf:28:b0:93:75:c2:1b:46:5e:fc:2c:82:5e:a5:5a:
3c:6d:db:b7:6f:d6:7b:6e:ca:d6:8d:23:9c:5c:ba:
b5:9e:78:c3:93:47:56:59:2d:c3:6d:b2:b0:95:69:
21:8f:fd:23:6e:b0:55:ff:9f:5d:1b:d4:a2:72:01:
84:86:8e:7c:66:5a:8e:d0:3c:19:82:c4:10:4e:8b:
c6:11:09:93:6f:19:dc:07:b1:2a:67:18:e5:cb:b8:
5b:ab:b3:9f:7f:a2:9c:85:40:7a:1e:e3:ab:db:56:
ed:4c:12:71:3c:a3:cd:bd:a8:50:2d:cc:3d:8f:50:
f9:78:6b:33:7c:43:7a:aa:0b:25:b7:26:52:60:9d:
7c:03:f0:8f:06:25:ea:53:e3:ec:ea:4d:bc:af:d6:
de:40:f7:d6:84:61:b4:13:16:c7:57:72:ac:d5:f9:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8A:31:C6:6C:80:FA:71:DD:23:14:09:78:D3:2A:92:D4:B2:ED:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43378c34-9893-41d9-b24b-6060b24d999d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:c3:c7:c1:87:e2:a9:af:55:a2:02:b6:96:24:2b:18:95:da:
a2:49:9b:6e:87:67:f1:d8:fe:1c:d1:0f:8a:2b:f6:4b:c0:43:
94:e8:eb:15:2a:d7:19:61:f8:3c:3b:f4:ea:6b:d9:4f:14:4c:
fe:c8:e3:fb:31:7a:03:98:73:a9:ea:ca:22:05:16:d3:7e:22:
5f:f3:ec:9e:01:62:aa:b1:72:8b:53:34:aa:05:6b:d4:ec:e9:
f7:0a:06:54:b4:0a:24:49:6a:cc:02:b0:f9:fc:fb:60:16:a2:
39:d1:8f:0f:01:a8:97:30:36:a5:b6:0c:2d:d2:ac:e2:5e:3f:
f5:fd:f6:2d:f3:33:c0:5f:00:4a:bb:5c:1f:d6:75:ce:06:0f:
0e:95:4d:a8:06:5a:96:20:86:ee:cb:7b:56:e5:af:da:fd:c4:
7f:cb:36:ec:65:49:ea:17:0c:ee:39:60:d8:3d:f9:8c:d2:bf:
c9:dd:44:13:bb:be:f9:af:1b:78:23:c7:42:67:db:42:8b:25:
f9:ca:92:4d:5b:e0:f5:01:e0:05:14:99:be:b2:19:23:6a:e8:
91:76:26:49:87:9a:49:9c:ec:9b:4e:57:d0:6a:5d:7a:19:d6:
65:10:5a:86:7c:a7:9c:d2:cc:42:87:1e:df:14:9f:cf:04:df:
f3:20:80:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:43 2025 by rpki-client