Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43f30a7a-34f3-44ec-8f0e-3357214f2627.roa
File: 43f30a7a-34f3-44ec-8f0e-3357214f2627.roa (raw, json)
Hash identifier: PfO/lSKjyvHVfOOIaTG/Xo4DK8hl4IX6aDeg83fzijo=
Subject key identifier: 84:0D:05:7B:BA:AF:CB:20:DA:3E:32:06:8A:0D:66:F1:8A:7F:E1:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3832B7817577D01378367912EDDE988E20A58AAB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43f30a7a-34f3-44ec-8f0e-3357214f2627.roa
Signing time: Tue 24 Dec 2024 00:00:00 +0000
ROA not before: Tue 24 Dec 2024 00:00:00 +0000
ROA not after: Tue 28 Jan 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:32:b7:81:75:77:d0:13:78:36:79:12:ed:de:98:8e:20:a5:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 24 00:00:00 2024 GMT
Not After : Jan 28 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:84:3a:ee:93:64:27:c7:42:8c:29:15:5f:
39:02:1f:fa:ff:5b:42:ca:72:73:bf:d2:35:63:0a:
88:a5:69:8c:83:ba:a9:9e:f1:b7:1a:0a:df:56:dd:
f4:91:c9:4f:a6:06:dc:ba:cd:b1:e2:8b:98:bc:7b:
b4:05:14:b0:af:b5:ba:e6:65:e9:4d:8a:51:97:3c:
a6:2d:ab:83:8b:ab:3f:50:2d:fb:02:3e:06:36:70:
4b:45:b4:67:9b:35:cb:95:44:6b:3f:5d:9c:24:c7:
4b:d4:60:fe:93:ec:c6:73:b9:5e:5f:17:72:3f:ca:
a0:95:93:81:59:10:32:37:0a:b2:43:68:8b:ac:94:
89:2a:ec:78:de:6f:70:7c:96:f2:2c:5d:02:17:96:
58:4a:9a:ac:79:bf:4a:16:02:ab:3c:55:ed:33:d1:
93:bd:6d:4a:af:e1:c3:b7:82:5e:fc:ce:81:dd:59:
bc:df:0e:03:6b:49:5e:12:62:78:68:05:19:d7:8b:
3b:5c:29:c4:4b:16:8b:bc:a7:da:54:b6:c1:a2:f9:
df:08:76:a0:29:5f:b8:4f:2d:29:91:44:95:d6:5d:
85:53:f2:15:71:87:63:8d:72:9c:fd:a5:c0:f1:be:
a6:70:ce:5a:f2:fb:39:3a:08:53:35:ae:e8:7f:f5:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0D:05:7B:BA:AF:CB:20:DA:3E:32:06:8A:0D:66:F1:8A:7F:E1:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/43f30a7a-34f3-44ec-8f0e-3357214f2627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e3:0d:7b:04:db:cf:49:51:ee:89:7d:00:55:57:e6:f5:ff:
c9:ff:4d:21:19:92:d9:c9:76:1c:ac:a8:ad:09:0c:d7:fb:2a:
32:b2:6f:5a:97:5b:e7:3a:0e:0b:23:eb:dc:e5:86:d7:d9:bc:
08:75:03:4b:a3:e7:58:e1:49:6a:7a:f1:a7:94:d8:e3:98:46:
5c:05:c7:d8:00:1e:11:6b:49:12:82:82:bb:5b:90:ac:92:ad:
81:53:75:2d:d0:61:c0:17:1a:05:ee:c3:93:22:e6:f5:96:2a:
64:ba:c2:24:3a:e0:c4:83:d2:e2:8f:06:98:92:2a:2d:00:88:
e0:72:78:14:80:df:bb:2d:24:30:66:6a:3e:de:33:d7:95:df:
38:ea:29:c8:fb:c3:40:d1:77:15:5b:db:c2:73:a2:e5:e9:c2:
2f:44:17:b7:96:2f:e5:e1:27:62:dc:25:3b:36:b7:60:41:08:
1d:08:54:2b:61:93:b3:fc:f9:cd:b7:30:cd:9b:9b:c3:57:bf:
75:96:6c:3f:2e:c2:4a:c0:16:48:c7:78:ec:11:c1:27:03:8e:
70:44:01:04:1c:8d:e1:3d:49:90:32:93:39:10:90:eb:a3:1e:
8e:d7:1b:2b:b6:84:86:79:f4:10:ff:42:3d:47:4e:e1:b0:cd:
17:99:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:15 2025 by rpki-client