Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/447a1334-3557-4a31-bfab-432cf4e36014.roa
File: 447a1334-3557-4a31-bfab-432cf4e36014.roa (raw, json)
Hash identifier: kXvZyMHTsm7Jb6x98Ng4aFC8vjTB2jmrmXKKOjPckPw=
Subject key identifier: 59:63:DC:5C:E9:B3:FC:0A:EA:5E:62:2F:59:66:E0:14:7E:94:98:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BF3CBC4CAB790B4CD6ED1E89DA89F2F6FB0E5D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/447a1334-3557-4a31-bfab-432cf4e36014.roa
Signing time: Mon 02 Dec 2024 00:00:00 +0000
ROA not before: Mon 02 Dec 2024 00:00:00 +0000
ROA not after: Mon 06 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f3:cb:c4:ca:b7:90:b4:cd:6e:d1:e8:9d:a8:9f:2f:6f:b0:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Dec 2 00:00:00 2024 GMT
Not After : Jan 6 23:59:59 2025 GMT
Subject: serialNumber=2fed24e6962b18e6415a1de6ac814b9b4b4342428987b7e4a80d9edde382e033, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:c6:97:4e:0e:38:6d:51:ce:a0:c6:8c:97:
0d:76:99:7c:ad:c0:00:05:2d:75:ce:ff:3e:29:b6:
aa:89:fd:fc:26:8f:36:60:bb:24:66:f6:98:74:74:
62:44:7a:38:6e:ec:b5:96:71:09:0e:75:26:d4:0a:
0e:75:38:a8:b5:a3:d2:93:c5:9f:1e:9b:46:33:11:
0f:be:ba:4b:6b:ab:b1:1f:4d:19:cf:fa:b2:26:24:
6e:83:3b:9e:43:80:d3:a2:31:8e:28:b3:cd:3b:4b:
5d:1e:4a:6e:35:47:6f:76:b2:83:ec:bc:02:ed:bd:
39:39:ac:13:9d:8b:80:ba:70:87:15:c6:ab:ad:b9:
43:47:05:24:5a:49:d2:cd:cf:4b:c7:c3:ea:73:a9:
52:22:0e:88:2f:b0:bc:c4:06:dd:3f:48:a2:35:00:
cd:b4:9c:9b:6d:36:65:b2:5a:32:e0:de:01:c3:e1:
41:d2:7f:1b:fe:8b:9a:6c:64:3e:42:ec:88:9e:e6:
a7:f8:86:5c:9b:58:0c:4b:05:2a:2a:27:af:89:9c:
48:4e:22:cd:d0:64:cd:04:b9:e2:38:a8:e4:f8:c4:
97:1f:72:92:86:ba:1f:4c:f1:1b:ae:03:1b:27:24:
01:e5:46:f5:5a:56:62:82:33:ea:63:0d:26:f8:3b:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:DC:5C:E9:B3:FC:0A:EA:5E:62:2F:59:66:E0:14:7E:94:98:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/447a1334-3557-4a31-bfab-432cf4e36014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:4a:e9:e8:5f:27:e4:cb:fd:fc:ff:5c:a3:04:12:ca:6c:d8:
05:8c:7d:b3:0f:99:49:c0:cb:fa:7e:92:2f:ad:09:5c:4c:6d:
9f:8f:0f:be:84:95:ae:b1:e9:8c:c6:2d:24:2e:0d:96:9b:3f:
90:92:25:e9:49:1d:ed:c4:b6:f3:12:9e:65:12:43:54:4a:d5:
78:44:79:2f:b4:be:c9:16:3d:15:27:17:a6:24:28:94:55:de:
c7:79:b9:af:b1:1e:3f:eb:fb:28:af:8b:7e:73:c3:e3:d6:e3:
e1:d6:b5:a8:8d:9d:48:02:89:34:99:63:22:00:61:74:09:3f:
5f:b0:0a:a7:5d:07:61:0b:32:7b:d6:4a:ce:e9:30:a4:e4:70:
85:80:00:fb:38:48:1d:2e:cb:85:b5:37:c1:65:fb:a4:aa:f1:
a8:17:05:a1:65:63:ad:f5:58:73:1a:96:f4:a4:70:2e:ab:40:
ec:5f:8c:08:e0:5c:02:08:c4:c1:d8:1c:8e:34:f7:c9:08:3c:
1b:d9:43:24:49:48:29:fb:12:92:f1:1e:65:7e:75:85:7c:62:
71:a9:36:42:a6:dc:3e:a8:4a:36:e8:f4:fb:a7:67:fe:7b:f8:
1f:12:d0:83:24:b0:96:8a:3f:87:85:f2:29:d6:98:f2:26:61:
94:97:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:26 2025 by rpki-client