Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/482bdae4-9954-4811-b3ad-aa2023a17246.roa
File: 482bdae4-9954-4811-b3ad-aa2023a17246.roa (raw, json)
Hash identifier: ai6xV9Xt//prNNJX4YB0bzHjOl1oGTFkySxCN6l1/Kg=
Subject key identifier: 24:28:15:55:6A:80:56:66:61:FB:09:84:A2:9D:C8:77:02:E9:D1:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D886FAD8EA68B9F7323012783EAF72DF78EBE84
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/482bdae4-9954-4811-b3ad-aa2023a17246.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 8987
IP address blocks: 72.17.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:88:6f:ad:8e:a6:8b:9f:73:23:01:27:83:ea:f7:2d:f7:8e:be:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: serialNumber=ffc413faa66a8f3a6640a810d0f6c8ca608abc2dac98f9c38046d621881eea63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:04:00:91:15:64:77:96:66:bc:6c:8b:63:
3e:1b:0f:f8:f3:06:f6:2a:f1:08:7c:85:df:e2:78:
97:f1:82:dd:9b:90:9b:22:fd:22:f4:51:fc:ba:89:
cb:e7:30:43:20:bc:fc:95:f5:61:68:39:29:6c:be:
40:ec:c1:b9:0b:b6:76:32:f9:7f:a4:21:37:19:6b:
37:61:66:84:9d:23:47:f8:cc:90:d1:fd:42:35:ff:
5a:31:e3:72:47:60:02:8f:1b:99:d2:e2:08:d6:b1:
75:d1:b1:a9:79:04:9d:cb:cf:8f:50:4d:15:47:e2:
f9:b3:8b:7b:9d:22:b5:65:51:93:89:91:53:bd:83:
6d:41:0a:7d:68:c5:c0:b2:9e:01:db:22:dc:60:a5:
8a:ad:02:3d:fe:d5:65:bd:59:76:19:f4:30:58:1f:
63:65:b4:a7:4f:e0:36:91:34:a6:2e:f3:e3:a4:fd:
d3:bf:a6:44:26:f8:93:a0:1b:4b:5b:c9:ca:c9:24:
bb:4a:b2:26:b4:8e:ad:c4:6a:63:9e:dc:3a:e7:93:
ee:8e:56:24:03:f0:f0:00:0f:f6:f2:74:ed:2f:66:
e5:fe:d5:05:48:ba:fd:ac:76:c4:b0:af:c6:4e:ef:
d2:58:80:9f:11:a2:bf:a8:5c:5a:7a:0a:00:82:df:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:15:55:6A:80:56:66:61:FB:09:84:A2:9D:C8:77:02:E9:D1:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/482bdae4-9954-4811-b3ad-aa2023a17246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.17.128.0/17
Signature Algorithm: sha256WithRSAEncryption
04:d6:40:4f:b7:7f:80:e7:e2:e3:c8:3f:b8:49:99:4e:28:16:
25:4d:1d:b8:d8:a0:ec:7d:3e:21:6e:de:a0:dc:06:9d:7e:8b:
b5:51:a6:5e:89:fe:08:63:89:5b:4b:63:bb:49:90:77:29:60:
22:63:b3:d1:b4:ba:e2:43:4d:f5:3d:1e:f3:0d:2a:49:c4:a7:
d6:a9:30:96:d8:09:f5:60:16:f6:f5:30:d6:27:d0:a4:69:f5:
8d:b3:22:8f:3d:9e:4c:32:46:4d:94:f9:c0:b1:7b:06:02:93:
63:b3:0e:8c:60:7c:06:7a:92:39:01:eb:d8:18:c3:d1:dd:ae:
80:5f:63:b0:ae:7f:fc:ee:b3:e0:a1:a4:4e:3d:fe:28:b2:4d:
55:5b:6f:37:c0:21:d8:c1:16:b8:51:eb:1f:6f:f1:f3:a2:1a:
29:2b:9e:d3:e0:65:00:5e:41:b5:6c:14:b8:38:86:af:fa:ec:
59:c8:fd:a3:1c:0d:5e:ea:b3:fc:48:94:c2:a7:50:2f:04:7f:
0b:0f:8b:12:3c:79:f2:40:f0:78:14:79:8f:5a:ac:c0:ea:6b:
b5:6d:b0:46:b0:15:11:84:ec:33:e7:2d:cc:84:43:3d:ed:11:
a2:c9:e0:8d:be:61:10:59:81:12:86:bd:5e:b9:f2:27:2d:f1:
0f:bb:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:37 2025 by rpki-client